
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier: MZWvFh/dsj/LTQvdp4rm33cPZvNqaUh0FQFEfSz3a2I=
Subject key identifier: 38:4B:8F:5D:F5:9B:03:F9:63:AF:73:D1:EF:60:CB:67:2A:A2:4F:C0
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial: 0CAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number: 0CA0
Signing time: Fri 12 Jun 2026 18:32:59 +0000
Manifest this update: Fri 12 Jun 2026 18:32:59 +0000
Manifest next update: Fri 19 Jun 2026 18:32:59 +0000
Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: qpNCb3qJHAOReE+38StYOTD9CrF2IWLJ4huoG+Yi5lA=)
2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3243 (0xcab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Validity
Not Before: Jun 12 18:32:59 2026 GMT
Not After : Jun 19 18:32:59 2026 GMT
Subject: CN=6a2c50db-02aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:eb:f7:bb:30:e9:08:6f:e2:9d:4d:dc:c9:
04:0e:b4:08:1f:bc:83:dc:c4:bd:38:fe:95:ca:8a:
52:2e:81:03:9a:62:27:91:e5:23:66:fa:98:66:0d:
9b:b9:5f:a6:ca:55:6d:cd:20:41:1b:b9:3b:27:76:
a7:ff:c2:e4:f7:51:45:b6:fb:ef:57:12:32:06:4e:
e3:09:97:44:ec:15:16:64:e0:bb:f1:60:66:cd:03:
36:b1:ab:69:36:88:a0:11:22:f1:6e:dd:fa:61:fb:
18:92:e2:ed:9b:3d:15:32:b6:c5:f8:5f:a2:ea:45:
5e:5f:92:9c:80:42:34:6d:4a:78:42:c8:0a:d1:ea:
4a:8a:1e:f5:08:4c:1a:14:38:15:09:7c:27:d7:29:
18:91:e7:25:26:b6:55:5a:ba:f8:cb:f4:14:d9:72:
7b:72:8e:ba:6a:09:25:b6:fa:ac:a6:99:7e:7d:34:
e8:a0:66:b7:f3:c1:54:33:ba:3e:8c:ee:6a:48:bb:
d0:99:a2:61:13:3b:cd:df:de:ae:d3:2b:39:74:3a:
c2:8b:2b:23:3d:fe:89:21:87:85:ff:85:e5:eb:37:
fb:1b:43:4f:24:11:92:09:d1:6e:31:f9:27:51:42:
4c:94:da:39:c6:8c:2d:5d:17:c6:47:43:10:51:de:
23:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4B:8F:5D:F5:9B:03:F9:63:AF:73:D1:EF:60:CB:67:2A:A2:4F:C0
X509v3 Authority Key Identifier:
keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:cd:a6:7f:c5:67:46:b4:4a:8b:66:31:50:9e:f2:59:9c:f0:
48:08:e3:20:c1:f1:ee:70:19:c8:85:a7:79:8e:f2:14:4a:ab:
1a:76:67:86:25:f2:d5:11:c0:1b:25:79:5f:22:c4:5a:a8:28:
2c:18:e1:0e:b3:bb:4c:ae:e8:ce:d7:3e:39:0d:67:a3:f1:b5:
6d:9b:c4:b0:3c:fe:e5:c5:5d:78:61:06:2c:31:33:c4:f8:b0:
1b:c4:c3:b2:2a:56:29:c2:4e:a1:5b:c1:e9:56:e0:96:75:d5:
76:a9:99:63:d6:46:8f:35:dc:00:bd:8c:61:2a:33:8d:72:7f:
87:d6:6a:66:0c:37:38:ee:a1:6a:19:21:93:80:da:f9:88:1f:
dd:19:3c:e7:e4:ec:4f:fd:46:95:b6:ad:41:e3:91:3f:d9:e6:
ff:28:ca:c6:db:9b:9e:03:d1:c7:84:41:9a:26:c6:b9:a0:ef:
50:44:98:a8:39:1f:89:d1:89:f3:ac:c4:82:db:39:b9:ef:16:
ce:ad:cf:06:ee:9b:d9:ed:1c:48:dd:44:fe:63:78:89:9c:b3:
74:3f:b6:fa:ff:75:53:c1:6b:8c:f4:97:53:57:14:76:d9:66:
f3:3f:d7:59:7f:45:13:02:07:ea:83:51:f9:56:55:ad:08:b1:
65:1f:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 14:05:44 2026 by rpki-client