
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
File: PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json)
Hash identifier: OKT0ZwAk4HizyPBWSk8daMp32sRJeevXBfSchvVWcwc=
Subject key identifier: 04:E1:72:BA:3B:A8:E4:25:31:9C:6A:80:27:2B:3D:DA:89:58:38:04
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial: 060E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
Manifest number: 0605
Signing time: Sun 26 Jul 2026 23:45:32 +0000
Manifest this update: Sun 26 Jul 2026 23:45:31 +0000
Manifest next update: Sun 02 Aug 2026 23:45:31 +0000
Files and hashes: 1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: qBT6ZiXzsARxXtqLbAiNtXFczI39txxqSwsnFAoI4l4=)
2: EC7B7E82DFD811F08F00FF64536F56BC.roa (hash: GBcRPAk26rh6dyuaJcennk1M9baT+ZU2RXBW85It44s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1550 (0x60e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Validity
Not Before: Jul 26 23:45:31 2026 GMT
Not After : Aug 2 23:45:31 2026 GMT
Subject: CN=6a669c1b-abdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:67:ed:de:25:65:15:6d:17:52:08:75:0d:
47:95:0f:49:f3:9f:8d:e2:69:bf:99:52:de:63:23:
6c:09:92:c1:79:5d:ce:29:c6:69:c9:71:73:31:69:
ad:6c:0a:b9:be:a2:97:31:5e:56:e5:f8:c8:56:ae:
6a:2f:2e:f6:6f:4f:25:45:57:d8:0a:09:41:79:a4:
c1:34:32:25:e6:e1:9f:3b:52:f2:f2:60:bf:11:51:
3e:2e:cb:51:4f:03:f4:ab:fd:9a:9a:fc:35:3e:b2:
2a:4f:1c:d0:10:6a:5e:7d:e4:ed:f7:1f:49:c0:3c:
b3:1c:d0:5e:a6:25:c2:a1:20:57:cf:96:c5:6e:14:
9e:ef:a9:af:f6:00:75:44:f1:3e:67:57:dc:65:c4:
d4:74:d0:0d:44:75:a0:d1:b6:d3:88:83:9b:ce:f9:
74:3d:79:ee:74:9f:35:51:a0:d6:da:4d:83:db:ca:
e8:e0:0c:99:87:c6:b6:63:9e:5d:0a:80:95:6d:ec:
f6:ed:64:0e:a3:bd:7a:a6:ff:92:6d:74:d0:0c:ed:
83:6c:de:e6:03:e2:05:17:b7:62:c3:9e:19:c6:8d:
42:99:ab:10:03:54:c9:3b:80:2e:3b:e4:73:b0:c0:
2d:16:3d:c9:4b:41:cc:62:b1:55:a9:22:ab:54:a4:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:72:BA:3B:A8:E4:25:31:9C:6A:80:27:2B:3D:DA:89:58:38:04
X509v3 Authority Key Identifier:
keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:8d:09:6f:10:9a:fa:bd:23:d5:df:7c:15:7b:8f:8f:5f:3b:
d8:f1:79:bd:f2:2f:27:d3:96:c5:b8:50:b6:49:50:a3:33:e7:
4a:80:26:4a:83:f8:81:32:56:1e:27:d0:df:cd:39:00:6e:5c:
e0:d6:0a:ba:f7:26:2b:63:4f:91:d2:2c:10:2d:e4:d4:d8:7e:
1c:fe:a8:1d:35:c3:c4:4e:7b:2c:3f:37:1d:67:11:c7:8b:66:
05:72:27:14:e7:ea:09:3d:28:2c:21:bb:38:4c:4f:36:6a:fd:
b7:18:53:eb:70:4d:1c:34:5a:16:bd:6d:d2:54:83:d4:0c:7f:
5a:1b:7b:36:3f:9a:14:d9:6a:af:64:1f:49:db:c9:96:b1:e1:
6f:ad:51:d6:da:4e:e6:57:b9:68:31:56:97:1d:24:c5:09:07:
8f:0d:0e:52:f4:11:d3:08:cb:61:b8:85:22:51:64:e2:4e:a1:
99:6f:f9:f1:8a:84:50:8f:2f:0e:35:e1:f2:b1:5e:d6:de:a2:
fa:be:60:f4:ac:31:b6:33:3d:8b:57:8a:14:1a:35:4a:bd:54:
30:3e:02:1b:9e:61:9b:34:d3:1e:19:b3:f2:38:fe:dd:b1:b4:
ff:a2:a3:07:82:f4:08:67:b3:6d:6d:3f:d4:24:f9:99:59:02:
2a:ef:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:39 2026 by rpki-client