
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
File: aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft (raw, json)
Hash identifier: oQHNE/AovXlwuZR+8Q3Wcn/zGuMfFojOco4AlZsQSQs=
Subject key identifier: 97:0E:99:C3:8F:70:F2:ED:A7:94:8D:E5:88:B6:CD:A9:2D:5C:5C:4D
Authority key identifier: 69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B
Certificate issuer: /CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B
Certificate serial: 07AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
Manifest number: 07A4
Signing time: Sat 14 Nov 2026 21:20:56 +0000
Manifest this update: Sat 14 Nov 2026 21:20:56 +0000
Manifest next update: Sat 21 Nov 2026 21:20:56 +0000
Files and hashes: 1: aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl (hash: bztNFqQEQDEFOU2h2+RhgVJyuBnmendvcWXWKMRfry4=)
2: 76F5B630701311EB9C85DF1FC4F9AE02.roa (hash: naUTdPx2hWErxJkYpY1OleALKvTnovAGDRuMLpDEDq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl
rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 21:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1964 (0x7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3EE, serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B
Validity
Not Before: Nov 14 21:20:56 2026 GMT
Not After : Nov 21 21:20:56 2026 GMT
Subject: CN=6af8d0b8-51a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:c9:8f:21:79:ac:05:e3:18:97:6d:98:fd:
c4:6f:d3:73:3b:7e:5f:5a:1d:71:35:31:90:49:0f:
bd:c8:61:ef:07:14:ab:03:2f:42:95:37:3c:78:41:
be:cc:c3:7d:0c:77:4d:47:be:18:8b:cf:04:4e:71:
10:68:7a:b8:32:72:b0:a8:51:ea:07:5b:2f:cc:03:
8a:68:c1:5a:ba:00:f1:ef:ad:2c:18:44:83:8f:f7:
de:52:b7:3a:06:2a:ce:5e:ce:57:44:bd:a1:f7:f1:
31:2f:9a:f4:23:34:36:83:5e:d9:29:76:f7:7d:c6:
c3:f2:93:7b:46:d3:2f:84:af:10:c8:e8:17:e3:f9:
b1:63:2e:f6:b2:0f:61:d8:bf:5f:aa:dc:6c:a6:54:
43:26:a4:1c:e5:1d:b7:f4:56:a8:99:1f:c7:fc:88:
43:24:5b:5d:a4:7b:91:43:b5:ee:36:f3:0b:9f:9f:
9d:b1:f3:f3:c7:fc:96:29:69:7f:2b:43:47:57:18:
15:82:e5:88:0d:55:69:69:86:f8:a0:5c:f1:86:16:
7e:a8:6b:93:ee:a0:0a:c9:86:6c:77:84:76:bb:cc:
9d:0f:51:5d:19:60:77:b4:60:20:a0:37:d6:4d:fd:
15:b1:17:5c:71:d0:a2:b5:0e:18:78:f6:e4:7b:f7:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0E:99:C3:8F:70:F2:ED:A7:94:8D:E5:88:B6:CD:A9:2D:5C:5C:4D
X509v3 Authority Key Identifier:
keyid:69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:b4:1f:39:03:8a:78:1f:ff:1f:66:a6:c1:2c:5e:14:bf:fe:
65:e9:7f:ed:c3:a8:af:e7:0f:8c:89:a9:e5:4e:9c:dc:04:e7:
b4:dd:af:49:7a:66:b4:88:e1:b9:1a:06:c2:d0:19:c5:c8:09:
ee:16:1b:dc:9b:49:f9:8a:3e:62:33:d4:d0:2c:6c:1e:73:f0:
54:34:7e:1d:39:ce:45:18:c4:ce:9b:f3:f0:80:f4:3b:ec:5a:
78:45:00:6c:76:21:b9:bf:5f:ed:03:15:6c:9b:b2:ef:39:9a:
9e:07:80:26:6e:7b:62:bf:27:dc:1f:23:dc:65:c7:02:29:52:
6b:18:b7:2e:0e:c3:f9:50:ac:c3:1d:66:d5:86:c8:aa:1d:55:
23:6b:bf:c7:4e:37:e4:3b:4c:ac:2b:0e:16:e5:3f:69:6e:97:
14:a0:78:06:a3:0d:29:4f:35:a1:69:1e:e8:62:2d:23:e8:83:
71:73:d5:d2:14:73:b3:88:0d:90:c3:49:7a:17:6a:96:9a:38:
87:a0:e7:66:da:b2:af:ca:dc:e8:f8:57:e8:bd:12:fb:65:d9:
4a:69:cb:ad:ab:27:e8:f5:d8:6a:6a:05:e7:f1:2d:1a:1b:df:
36:06:e2:15:64:fb:e1:b7:e7:d1:5b:46:78:d1:c4:46:d1:6e:
93:0e:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:26 2026 by rpki-client