
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json)
Hash identifier: 18mNMj/TP0rwKuxNcJN1u6T0gKxmLpxohrNkSdQfigE=
Subject key identifier: FA:9C:85:F5:36:B5:79:11:19:21:EB:7F:24:BB:AD:2B:BD:0D:CB:0D
Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31
Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
Manifest number: 0201
Signing time: Tue 28 Jul 2026 16:51:08 +0000
Manifest this update: Tue 28 Jul 2026 16:51:07 +0000
Manifest next update: Tue 04 Aug 2026 16:51:07 +0000
Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: cb8I8XJe/aSaZzrzWzXBwW3IZOlGAeBOB4y32uR+BTg=)
2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: sPimiMMVQ8HhWMH3h4YYvgrI9mvp3guGNNGoHKdWxG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl
rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
Validity
Not Before: Jul 28 16:51:07 2026 GMT
Not After : Aug 4 16:51:07 2026 GMT
Subject: CN=6a68ddfc-f009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:cd:0a:f5:26:90:36:53:fd:6f:bd:0c:fc:
7b:7c:4c:0d:18:a6:be:82:51:de:51:c5:a9:83:b4:
67:4e:09:97:71:b3:b8:60:bc:e0:71:f7:1c:dc:cc:
db:50:53:83:7e:96:7b:0b:ea:67:71:52:1d:93:42:
d0:33:9e:0d:c1:c1:0f:03:bd:1c:e7:52:49:da:b1:
77:1b:fa:c2:17:8b:a8:7e:8e:2e:85:16:db:c4:ce:
ba:14:65:ed:3c:c0:69:05:09:90:8b:83:68:23:e4:
16:b7:79:ad:f5:c5:b4:b4:f8:8a:01:c9:ea:e7:82:
0b:1d:12:bf:5e:27:44:4a:87:68:d8:50:ba:37:b1:
51:4c:b4:3f:2b:20:52:e5:1a:91:be:11:2d:9c:4d:
8e:d0:14:ad:51:98:fc:63:ec:1d:2b:23:59:0b:40:
55:58:8a:c4:ae:49:fa:f6:16:94:92:99:02:c1:45:
f5:ba:95:8c:25:7d:2b:ba:93:8f:34:4c:eb:2f:1d:
81:aa:c7:95:77:0a:45:a3:df:1f:c8:d4:cf:b3:b7:
c0:18:3f:c7:74:03:ec:19:24:c9:c2:12:77:f8:c0:
54:93:ec:ad:63:8b:59:71:69:2a:74:36:4f:1a:e7:
d3:9c:68:68:29:6e:c4:f1:7b:f5:0a:83:25:de:e7:
2c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9C:85:F5:36:B5:79:11:19:21:EB:7F:24:BB:AD:2B:BD:0D:CB:0D
X509v3 Authority Key Identifier:
keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:69:ea:85:f3:c0:31:8d:6e:de:a7:e5:54:fd:b2:55:6e:9d:
5e:6e:62:3b:5c:0d:ec:60:59:5a:97:81:04:9f:27:af:cf:42:
6a:9c:4b:8f:2e:36:4c:da:af:6f:5c:88:bc:7f:79:7d:55:80:
bb:11:3f:c3:05:3f:6a:af:53:b3:66:01:53:27:cf:fb:08:2e:
25:5f:3f:5b:b1:2f:25:c9:d9:54:2b:fe:3b:11:00:86:2c:dc:
4d:64:2e:38:54:f1:c8:0c:ee:24:97:70:77:c0:66:35:de:89:
0d:74:d9:1c:ea:55:8d:2c:9e:94:ee:41:c9:7a:02:eb:6d:28:
bd:b9:f8:bd:b0:b0:d2:b6:1f:06:95:a3:37:96:b8:c5:b1:60:
e0:e5:50:b4:11:2c:39:58:ea:3d:14:0c:b6:eb:40:9b:34:39:
7f:08:2d:59:14:87:c2:cc:55:95:7b:85:69:47:51:76:bf:c1:
ac:d0:11:9b:3a:e8:4b:df:a3:e8:66:22:3f:28:8f:2a:ee:9f:
a3:ad:f4:6b:fb:e5:93:9a:c3:44:c4:fd:d5:f9:25:9b:29:f6:
19:8e:71:66:d9:f4:6d:0c:05:ff:a0:0b:e6:3e:30:eb:62:1b:
06:83:80:aa:ec:d8:0f:a2:28:29:7f:0e:a1:82:a1:c1:70:8e:
08:aa:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:19:18 2026 by rpki-client