
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json)
Hash identifier: g7xk7RTSO/asiz/Wc31M7CxgKMi1NAnyuPzA/q4RlFI=
Subject key identifier: 16:2A:35:EB:66:FA:B7:3B:AC:28:82:FA:6A:3D:C0:2E:21:A8:B2:95
Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Certificate serial: 0A9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
Manifest number: 0A95
Signing time: Tue 28 Jul 2026 19:51:25 +0000
Manifest this update: Tue 28 Jul 2026 19:51:24 +0000
Manifest next update: Tue 04 Aug 2026 19:51:24 +0000
Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: ejeKE7Fh1KGsgNt0nogYbuFBExn2qBhjFCUsz5lxgEo=)
2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2719 (0xa9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Validity
Not Before: Jul 28 19:51:24 2026 GMT
Not After : Aug 4 19:51:24 2026 GMT
Subject: CN=6a69083d-6037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:00:7c:17:a9:9c:41:98:cd:15:26:50:ea:
e9:d8:39:34:6b:04:07:6e:07:f5:db:63:b2:b4:28:
46:53:68:75:8b:cc:94:2e:12:cb:7f:91:7d:93:17:
ee:be:21:31:36:91:2f:29:0e:5b:5b:d6:f8:93:eb:
19:c1:3d:26:e4:25:0f:c2:ef:86:d0:ed:b6:74:50:
c1:f2:56:f6:69:03:bb:67:1f:56:5b:e3:57:a9:ee:
91:f0:d5:f1:31:db:4a:f8:d3:51:18:ef:6d:69:4b:
fd:11:15:a3:17:bb:76:f9:19:a6:07:88:7c:cd:be:
3e:72:70:82:30:7e:25:45:7d:1d:6b:3f:70:07:11:
be:92:28:b5:47:76:f7:67:05:7b:04:82:11:17:da:
3a:29:4f:39:1c:81:cb:92:21:19:41:f7:3e:7f:5e:
58:89:ab:b8:77:17:fa:01:00:6f:2a:6b:bd:b7:f1:
b0:c5:50:06:44:21:76:e1:d7:97:c6:00:fe:ee:ac:
0b:0b:35:56:e9:2d:d3:c6:71:91:e1:bd:78:99:f5:
27:b3:5c:4b:0d:c1:53:a7:50:0e:fc:88:34:54:aa:
10:ed:a8:8d:2c:86:d4:b3:b2:cd:19:bd:bc:ed:9a:
4d:f3:52:e0:a5:bb:5e:4b:30:d8:39:aa:80:20:e7:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2A:35:EB:66:FA:B7:3B:AC:28:82:FA:6A:3D:C0:2E:21:A8:B2:95
X509v3 Authority Key Identifier:
keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:a0:f4:f0:29:9c:1e:cf:15:60:28:4e:67:55:87:9a:a4:e0:
ea:d9:9d:90:e2:8f:70:2c:ce:bd:fd:61:e6:5f:3d:02:39:a1:
bc:96:d0:dc:52:01:37:db:c6:42:63:4e:a9:21:b1:56:9e:b5:
7b:35:12:7d:e5:4c:8c:0b:4b:fb:21:7a:71:f5:1f:94:38:0e:
f1:e7:1f:d5:c0:74:85:a4:84:59:d4:76:5e:49:ea:7b:d5:03:
6b:00:e7:a1:a8:5f:18:1b:41:2a:56:f2:c8:ed:1c:4b:70:16:
59:45:22:8e:a7:7f:c7:55:df:2c:c8:75:c9:12:de:3d:cb:82:
2a:2f:0a:64:7b:77:9b:9f:7e:06:c8:3f:9c:4f:e2:c9:e0:f2:
77:d2:77:d6:d6:28:72:87:2e:5d:53:0e:60:e3:ab:b9:be:c7:
55:86:94:62:db:da:b9:ab:af:50:4d:6c:01:df:86:81:58:6c:
aa:ab:81:75:8c:35:b9:f8:4d:8f:77:c2:53:5a:b0:11:0c:40:
61:87:fb:f8:07:9c:12:85:96:95:b9:67:db:26:03:96:90:16:
20:49:b4:59:98:84:3c:7e:41:2d:a4:05:27:30:97:80:40:cf:
f9:77:b7:4e:81:11:57:ff:a2:90:ea:80:28:93:1d:3f:b4:63:
18:80:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:47 2026 by rpki-client