
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
File: ZuoPg73TYyv_GUALOhum_t_8VYc.mft (raw, json)
Hash identifier: gFxnxIGyMLPoJHMZBFEUZ084iE5iGbD244dhsi7cBdE=
Subject key identifier: BD:BB:B3:53:2A:CA:21:AF:20:EA:9E:D0:DF:D4:7D:52:F6:0F:A6:22
Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87
Certificate issuer: /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
Certificate serial: 3580
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
Manifest number: 3571
Signing time: Tue 28 Jul 2026 15:16:56 +0000
Manifest this update: Tue 28 Jul 2026 15:16:56 +0000
Manifest next update: Tue 04 Aug 2026 15:16:56 +0000
Files and hashes: 1: ZuoPg73TYyv_GUALOhum_t_8VYc.crl (hash: tC2noLxg9UN5GngnKlYv8OQG9H3SdbED2Uwf5VXNcXY=)
2: c5DC99Q5nXQ-wa9pZ3b2yCHHwQs.asa (hash: uc1it6L4GXH/et0F43S0KFaVEPSAqsiJCfwfTJNTOnA=)
3: 1190361AAF1B11E7B89F3883C4F9AE02.roa (hash: bfiGLOqg6WEf/R0XNy4/HeNqzd36AQk5hmCgwfazvuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl
rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13696 (0x3580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
Validity
Not Before: Jul 28 15:16:56 2026 GMT
Not After : Aug 4 15:16:56 2026 GMT
Subject: CN=6a68c7e8-679f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:6c:0f:d2:41:94:fe:f8:af:13:2e:db:88:
41:8c:dd:df:ed:18:97:7c:59:6f:9f:eb:6c:15:6c:
26:51:ce:50:0f:9c:2d:35:45:f4:03:97:7d:37:20:
51:3b:68:8d:81:ce:e8:3a:2a:7c:65:0c:71:9c:ff:
7a:f4:ca:40:4d:41:ef:7e:5f:9c:4e:23:a1:83:24:
44:76:c6:4b:25:a5:b2:e2:ed:ae:1e:8a:f0:4c:36:
fc:f7:5a:7b:e9:96:64:23:ca:b9:f7:da:fc:35:ae:
56:50:97:8b:59:ab:c5:a3:e3:67:2c:cf:dd:d2:bb:
c8:90:15:49:44:7f:e3:88:a4:20:cc:1e:ca:3b:24:
32:10:bb:cb:44:3b:10:8b:36:c1:e3:48:15:28:c9:
a0:71:83:20:dd:f0:42:3b:f0:7b:28:f1:63:ce:7b:
b4:fb:0f:77:d1:29:d6:13:20:04:30:f1:9e:5a:cc:
e4:31:f0:55:20:8b:77:ae:c8:64:f1:a4:ec:f5:b1:
6d:35:18:68:73:e2:8f:a1:20:38:9f:e0:3f:55:47:
90:21:62:1c:e9:3b:f3:4e:8c:8c:e8:76:79:25:b9:
14:54:ac:52:99:27:b9:33:27:4c:3e:cb:50:da:4c:
9d:5f:60:ab:7e:b1:4f:ce:51:4d:60:47:bc:2e:dd:
cd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BB:B3:53:2A:CA:21:AF:20:EA:9E:D0:DF:D4:7D:52:F6:0F:A6:22
X509v3 Authority Key Identifier:
keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5f:63:61:03:6e:8a:d4:15:6a:05:86:9d:3a:d2:c1:7d:06:
5b:cf:1a:2f:a2:03:4c:00:2e:a9:ec:73:f1:7d:5e:74:3d:8a:
34:75:94:e4:86:71:17:b1:4c:21:97:cc:eb:12:d4:a1:2a:8e:
81:b1:74:cb:59:fa:a8:8e:51:34:90:e0:c0:3c:3b:ea:1a:00:
cd:fc:89:13:3e:42:9b:fd:61:6b:55:7d:c9:6c:9e:8a:cf:d8:
13:e9:2d:fe:3b:3c:8a:5f:6a:71:44:0f:9e:83:0f:17:25:90:
16:67:0f:b3:31:88:89:be:25:7e:7c:fe:ad:0c:33:a2:53:72:
c4:f8:c0:f1:a9:47:19:e0:72:b6:31:21:54:70:e0:da:ac:e9:
ff:49:89:a0:4e:d8:07:9f:12:9d:b1:69:45:8d:62:1c:3f:5b:
85:e2:5b:a4:9e:dc:6f:87:9a:7e:c5:34:ef:9e:a4:b0:0d:8e:
08:b2:41:4b:9e:93:5c:cb:e0:24:79:c4:b3:c0:4e:00:a6:87:
a8:6b:5a:20:1a:2e:42:81:48:dd:1a:ff:0e:3d:2e:53:bf:6d:
72:0c:26:1c:ac:85:25:1c:07:b2:78:ee:b5:8d:49:55:05:ab:
cf:85:9c:1f:21:af:90:90:84:a7:3a:87:f5:fe:76:6a:d3:97:
f5:18:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:44 2026 by rpki-client