
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json)
Hash identifier: VrmL6DT1S0O2jGjgRdFnpxZIKyjnDuyxfLjijH90hXQ=
Subject key identifier: 70:89:AD:9B:7A:78:06:FB:87:3E:04:2F:96:64:3E:97:5F:0F:47:DE
Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Certificate serial: 1BCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
Manifest number: 1B93
Signing time: Tue 28 Jul 2026 16:21:17 +0000
Manifest this update: Tue 28 Jul 2026 16:21:17 +0000
Manifest next update: Tue 04 Aug 2026 16:21:17 +0000
Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: 8gQ19jtNh+hdxmWoNY+d8n5nsrZqoiGL4JoX5va3aGU=)
2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: PINyvml/lmMP9n4bWW3ReQfqdMUKwVbzw95W7AWHcZQ=)
3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: MGtVx11HokReybIJaW43xGqirmSnPfw9cAmc88rn5e4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7116 (0x1bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Validity
Not Before: Jul 28 16:21:17 2026 GMT
Not After : Aug 4 16:21:17 2026 GMT
Subject: CN=6a68d6fd-18cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:84:e9:5c:67:dc:53:ad:a5:c9:a5:b4:b4:
8b:0a:fe:a3:1b:07:89:b8:43:f7:1f:e5:75:82:da:
3b:90:f5:56:95:c6:26:9f:8a:4e:d9:57:13:15:94:
12:27:a2:c0:66:4a:2e:5a:58:cc:4a:86:2d:dc:0b:
be:a3:d8:a2:01:b0:73:30:a6:ec:31:e4:90:d3:4c:
89:d3:40:1c:6e:4b:6a:c0:fc:e1:c8:31:ce:b2:d0:
7b:ff:f7:3c:b3:55:8c:72:4e:bf:4c:a8:47:99:53:
ca:f5:22:02:1e:ce:cc:bf:82:2a:e1:fe:6b:87:63:
97:73:21:20:66:fc:81:4b:a2:74:df:c5:ac:0e:f4:
93:13:24:29:f2:b2:f8:0a:8b:65:71:fc:75:fe:e0:
de:66:bd:d9:c6:78:7e:ca:e6:a7:31:f2:e4:d9:42:
c4:03:d7:e8:99:ab:0f:2c:40:cd:96:fb:04:81:6b:
a2:6d:b6:89:af:9d:35:af:f5:aa:44:fa:78:cc:77:
28:33:8f:28:26:eb:f8:0d:f8:9f:e5:c4:95:a3:d3:
41:25:69:1e:21:3a:6b:63:76:bf:29:f7:ed:70:e5:
d4:37:f5:4e:b4:d8:0a:b0:b8:c9:d8:b4:f3:80:bb:
cd:10:cb:c2:57:05:c8:9c:9a:5d:b8:cc:6e:b8:4a:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:AD:9B:7A:78:06:FB:87:3E:04:2F:96:64:3E:97:5F:0F:47:DE
X509v3 Authority Key Identifier:
keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:d5:2d:0f:ab:0c:85:ce:b7:5a:ca:77:24:93:47:2b:66:32:
17:48:50:44:f9:5c:b0:4e:69:b7:95:1c:7b:a6:cf:09:26:34:
0d:b7:68:3a:53:ba:50:fe:e2:5f:84:29:09:07:09:9d:1d:31:
19:f1:df:1b:c2:e0:0e:22:ae:19:c8:64:76:c3:e2:f1:1e:7f:
92:11:3c:69:17:91:fa:99:67:99:59:17:44:77:03:ba:0f:2a:
6d:4f:bb:ee:66:fc:2e:95:9c:ec:f1:51:b8:3f:28:a4:b3:4d:
66:a4:34:7b:8e:3c:30:80:01:3a:86:02:a1:a5:1a:00:36:c1:
44:55:64:ee:35:31:e1:fd:64:46:14:ad:6d:4d:cc:ff:b0:e9:
36:ad:96:4e:8f:37:24:c6:d8:82:a2:c0:41:6f:58:8e:f8:f2:
8d:80:c5:69:02:93:ca:e5:07:dd:a0:f8:f2:27:25:1f:b4:70:
32:6b:7f:b0:94:ba:f0:81:5d:d2:15:62:1c:ea:07:e3:08:57:
1f:19:3d:dd:91:d3:f1:da:c2:8d:9b:f3:4b:57:15:7e:1f:7e:
24:13:4c:66:b6:cd:34:27:97:94:b1:3c:57:8a:0f:ff:33:1a:
60:be:2c:f4:e1:31:71:bd:cd:37:28:9f:c3:31:3a:2c:ea:49:
12:42:9b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:45:44 2026 by rpki-client