
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
File: ZwbZhOcxaBICGI0pntNfAFsBdYA.mft (raw, json)
Hash identifier: u3l0R6/xu1tzTrQvhtH5i5vCdLdBemomgug7UiNFUt8=
Subject key identifier: F9:28:17:5F:9D:F8:6F:29:09:B0:5C:AA:5B:01:40:E5:B5:DE:48:89
Authority key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
Certificate issuer: /CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
Manifest number: 3561
Signing time: Tue 28 Jul 2026 14:43:33 +0000
Manifest this update: Tue 28 Jul 2026 14:43:33 +0000
Manifest next update: Tue 04 Aug 2026 14:43:33 +0000
Files and hashes: 1: ZwbZhOcxaBICGI0pntNfAFsBdYA.crl (hash: p1Hx3MILgAOJiqdDYKKVLAGZgqub3NT1mIGv2ixWJxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl
rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:43:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DCDA, serialNumber=6706D984E731681202188D299ED35F005B017580
Validity
Not Before: Jul 28 14:43:33 2026 GMT
Not After : Aug 4 14:43:33 2026 GMT
Subject: CN=6a68c015-e7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:e4:ff:55:7a:07:59:28:87:de:1f:88:67:
93:b6:ff:58:6a:85:bb:e4:d9:7b:79:02:1d:0e:cc:
5a:b4:b0:16:70:80:1f:5e:c3:bb:cf:94:3a:37:bf:
58:ae:d5:a2:6e:44:9d:a4:c8:4d:00:25:a2:0d:a3:
1e:89:0f:11:72:68:b5:ff:18:f7:08:16:7b:19:69:
60:d0:af:30:5c:a0:f2:a7:44:a2:d8:da:40:60:a8:
47:cd:c9:11:d0:d6:63:89:fe:0c:f0:32:21:14:88:
d0:4b:8a:59:28:29:86:fd:b8:90:3d:c3:81:3b:2c:
c9:42:cb:d9:7a:08:00:5a:2c:6c:0b:a4:97:30:8b:
69:ab:8e:86:2c:a4:f7:04:31:c7:4a:e3:0b:c6:a1:
98:c8:5a:5a:92:6e:93:b2:c2:d2:c2:2d:59:13:ea:
73:d3:ea:13:4e:12:8b:84:36:b0:22:58:34:3e:7a:
11:aa:e1:36:7a:b2:5d:e8:6f:41:12:53:00:68:f4:
67:fc:b4:5d:00:b1:a9:e6:05:6f:8b:85:75:b0:49:
80:67:2b:4e:36:cb:a7:46:e0:12:59:d4:71:1c:96:
9b:34:0e:90:ed:c6:83:db:66:93:92:d6:38:58:f9:
9d:ae:d3:d0:5c:f8:fd:94:d9:e5:81:3f:56:ba:79:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:28:17:5F:9D:F8:6F:29:09:B0:5C:AA:5B:01:40:E5:B5:DE:48:89
X509v3 Authority Key Identifier:
keyid:67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c2:fe:7c:a1:61:a9:45:91:1d:e0:0d:1b:70:30:a3:0e:f1:
75:c9:30:02:00:ba:93:74:0c:9e:61:71:4b:6b:db:59:27:56:
74:e5:d8:19:e3:e8:0c:5b:4f:96:e5:bd:cb:ed:85:7a:7d:bf:
5b:c8:cf:f5:f4:da:1d:19:e0:53:a7:34:75:69:50:52:ab:88:
2a:19:80:37:0c:3a:6e:30:78:f1:d2:bf:23:54:19:c0:cb:da:
07:1f:79:b0:0b:9b:3a:51:27:d1:65:a2:03:2a:7b:dc:bd:e1:
f2:c5:bf:5d:ca:0f:84:fa:d1:f1:2d:c9:b3:44:9b:ba:39:50:
49:e5:a6:b1:75:8b:94:b7:3a:29:bb:b7:ca:4e:9a:81:4c:d2:
57:c1:43:7e:4f:e4:74:ec:a1:51:8d:80:0a:e9:95:d3:18:59:
8e:6f:5e:13:25:87:09:71:c5:50:57:73:19:2c:b3:30:9c:26:
a9:95:a9:83:e4:8a:ed:8e:91:c6:ab:d1:44:db:09:f3:1b:9e:
2a:1d:8b:35:44:e4:a4:4e:dc:17:33:eb:bd:6f:1d:6d:6b:3e:
5e:40:60:44:88:8d:9d:e7:69:39:8e:64:62:34:02:5a:30:78:
26:30:2b:cd:39:f9:8c:2b:7f:8b:a8:8e:32:98:46:fe:13:93:
92:16:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:04 2026 by rpki-client