
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft
File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json)
Hash identifier: FR7dfntEDqQ+PYZcPz6k6MtNNl29tJg16Rn/WF414Rc=
Subject key identifier: 73:91:63:2D:01:F7:62:49:CA:7E:CD:F8:D8:FB:92:A0:2E:43:19:E0
Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69
Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369
Certificate serial: 2E45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft
Manifest number: 2E1F
Signing time: Fri 12 Jun 2026 15:28:44 +0000
Manifest this update: Fri 12 Jun 2026 15:28:44 +0000
Manifest next update: Fri 19 Jun 2026 15:28:44 +0000
Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: WsIVKAaww+4owhw1RYPm9V3kquTDRSuTaFp8x5TjxU4=)
2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: lJGHvnwAoZvsRMcf7CzU0QiHaTva+fYPV5s+oeNnyCY=)
3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: qLkSs7kTPTAyjiO/JLwbMtvUImC2c8ZvFgGL8hNqu5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl
rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11845 (0x2e45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369
Validity
Not Before: Jun 12 15:28:44 2026 GMT
Not After : Jun 19 15:28:44 2026 GMT
Subject: CN=6a2c25ac-ebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:34:ce:af:b4:19:ee:83:f3:bd:90:d4:19:
4f:03:cc:45:af:74:28:4d:fe:61:42:87:6c:ac:a8:
50:7a:2e:9e:cd:dc:2a:6c:7d:c6:5d:df:60:df:c7:
5c:31:d4:ba:f5:d3:82:83:da:a5:8b:47:eb:95:32:
90:f8:24:cf:02:93:ec:76:a6:39:36:7d:95:3d:3d:
a1:33:dc:df:05:f1:96:7c:7c:8a:83:22:ce:4e:a5:
34:08:e5:11:b2:0e:23:bf:11:d7:d6:1e:29:34:df:
24:46:86:95:c3:56:0e:d7:de:14:f4:5f:c4:f5:a0:
cb:64:74:a8:04:41:fd:71:6f:e5:02:44:6b:49:35:
89:c5:64:95:b9:f1:5c:05:59:e9:6c:9e:22:9f:5b:
32:01:c5:17:b2:60:a2:24:0b:38:77:0b:11:a2:8b:
a4:99:0e:05:e9:4e:f7:0a:e8:e8:be:59:db:be:bd:
dc:36:c3:19:08:e7:a4:70:40:61:c2:94:c1:37:fe:
bf:2e:1f:76:45:06:8f:44:75:66:c3:60:58:2e:73:
0a:01:21:95:de:4c:c0:9c:c9:56:42:1a:ae:f2:c6:
9b:1b:a3:51:37:52:e0:cf:81:6a:49:57:8d:70:ec:
68:d5:02:1f:57:6b:3a:fa:d9:d5:10:08:4a:9e:b4:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:63:2D:01:F7:62:49:CA:7E:CD:F8:D8:FB:92:A0:2E:43:19:E0
X509v3 Authority Key Identifier:
keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:26:39:fa:e4:3f:e4:cb:86:ba:a2:e0:db:c7:6d:d2:bf:b1:
8f:5d:84:8b:a6:b9:41:30:cf:41:fc:47:da:05:c8:f7:77:86:
30:0e:30:f3:02:2f:85:10:c5:19:96:f1:dd:a1:41:5a:36:de:
a0:cb:ad:72:eb:f3:20:83:52:ea:12:fa:86:67:5a:73:7b:c3:
6d:d3:1b:3c:b3:64:3c:d0:e1:7b:24:30:62:30:28:26:e4:b9:
60:15:54:48:53:ce:c1:0c:f4:fb:23:33:40:6b:2c:37:54:0e:
3c:02:19:c6:8c:d4:48:d7:34:c9:d9:38:fb:b6:56:fd:29:3a:
f2:f1:1f:75:c1:ba:d9:1e:a6:92:e8:e7:62:18:26:0a:ed:6b:
20:9b:f9:84:ac:97:c4:6b:c4:a5:10:d7:f9:ab:2b:2d:31:49:
f0:72:7b:32:3e:87:ac:e1:0c:2c:a4:3b:4e:f6:29:28:d8:68:
23:18:83:d1:7c:12:8a:d7:b8:d5:05:e9:1f:f5:72:1a:63:62:
ec:48:96:c6:fb:16:ba:89:37:ca:d1:48:5c:4e:ff:e8:51:76:
05:5e:62:e7:cd:6f:c2:dd:36:32:30:84:b9:15:d4:61:24:a4:
36:ca:f7:73:a8:ee:c7:a6:c5:5e:8c:7a:4d:3f:5d:cc:67:45:
5f:b9:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:13:51 2026 by rpki-client