
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
File: _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json)
Hash identifier: 454Z5+aCR/V31U1vfZRPy9MwdPByxuUJ/PKMfcicNcE=
Subject key identifier: 14:DE:88:BA:C2:7F:91:F7:CF:FE:51:35:90:12:EB:10:7B:F7:6B:70
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Certificate issuer: /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial: 02F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
Manifest number: 02EE
Signing time: Mon 27 Jul 2026 02:24:12 +0000
Manifest this update: Mon 27 Jul 2026 02:24:12 +0000
Manifest next update: Mon 03 Aug 2026 02:24:12 +0000
Files and hashes: 1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: +3OauDpFHgF4VvPh8JEC7KnzFYsmBpcFipX2zjc2ya4=)
2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: FbLoVUwsuqm0sT8Nxbam5MwbDmX4JcPXq2npG0lokuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Validity
Not Before: Jul 27 02:24:12 2026 GMT
Not After : Aug 3 02:24:12 2026 GMT
Subject: CN=6a66c14c-fafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:11:89:90:b2:b5:db:55:11:c5:5d:33:c0:
d7:b1:82:28:bf:96:1a:cc:77:07:8c:d4:f7:89:12:
10:df:c1:cd:56:c2:4e:cb:86:dd:8a:b9:af:c2:e0:
73:2d:3d:6d:be:d0:16:86:b4:b6:a7:49:4c:d8:84:
ca:f4:29:10:88:69:32:06:cd:8c:7d:d7:19:4b:4e:
1f:f9:f5:dc:72:45:99:8a:e4:00:96:25:33:29:0e:
10:bd:1c:34:37:48:6f:bb:86:89:22:5f:89:15:f4:
38:91:e5:ff:05:d2:37:82:b1:0e:fa:d5:4b:2a:0e:
38:82:4e:69:cb:5e:f2:a2:5f:38:aa:b5:62:fd:97:
79:da:d3:01:7b:c6:9b:24:4f:ff:7c:2a:07:63:26:
5a:66:0e:9c:cd:7b:ce:55:66:48:4a:35:37:ed:5f:
f1:8d:90:13:e3:a8:6a:d1:64:c9:18:d3:2c:72:00:
03:97:92:1c:08:7a:ac:1c:c4:fb:72:9f:a3:c2:56:
8e:80:62:57:4c:fd:b3:f2:43:8b:85:20:67:97:d2:
20:00:48:9d:92:aa:d3:07:95:62:dc:86:50:d6:f9:
03:9b:6a:d1:4b:28:34:63:c9:51:a8:f0:b4:60:f4:
bf:13:72:5c:e1:76:ad:4f:96:86:43:10:69:cc:7e:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DE:88:BA:C2:7F:91:F7:CF:FE:51:35:90:12:EB:10:7B:F7:6B:70
X509v3 Authority Key Identifier:
keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:10:0f:54:63:79:02:c5:04:44:df:cf:a6:30:f8:e7:27:e1:
f5:1e:94:7a:80:ef:4d:8e:20:05:9a:cd:96:d6:f0:9b:87:2e:
9b:99:01:cf:f3:35:3e:19:d1:ee:2b:94:76:e5:2d:b0:2c:c9:
46:c4:66:78:45:9a:03:3b:cc:a7:85:ed:a9:b6:cb:07:71:09:
6a:94:e2:36:1f:21:5b:58:03:67:a6:7b:13:56:33:b7:1a:78:
5e:84:6b:ea:28:cc:36:16:28:e7:20:bf:9c:43:b3:cb:73:63:
60:8e:be:29:3d:38:60:83:37:20:22:45:7c:21:3a:e3:02:88:
bd:5d:77:25:3e:c7:2a:21:83:b0:a8:21:9e:33:a4:ff:bc:16:
a4:a0:d8:88:91:61:46:99:c4:5d:18:5d:ae:8f:1b:80:3a:4f:
8d:c8:e4:a8:2c:2e:1a:4b:14:5c:4a:3f:27:1a:85:14:10:25:
31:fb:23:bb:95:ae:79:b5:40:e1:ee:f0:61:23:34:55:be:d9:
b8:06:af:0f:ca:42:3e:fb:36:0a:5d:cd:94:12:e6:40:8e:7e:
6b:22:d6:d0:35:e3:c8:d2:01:a3:42:7b:25:10:e1:c7:82:7e:
ac:93:05:fc:34:8e:da:3b:1a:d0:de:76:08:c8:2c:5c:88:cf:
4a:96:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:09 2026 by rpki-client