
$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json)
Hash identifier: VhsZCFgztawUQEotCFpbNyAGwN3c3q0TBz9RykgTzb4=
Subject key identifier: 7B:6B:8A:78:54:C5:02:9A:01:9F:32:22:99:A7:EF:CD:DC:6A:1E:74
Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Certificate serial: 24E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
Manifest number: 24D6
Signing time: Sat 04 Apr 2026 15:42:36 +0000
Manifest this update: Sat 04 Apr 2026 15:42:36 +0000
Manifest next update: Sat 11 Apr 2026 15:42:36 +0000
Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: SdQWGPOXEdsxDiz08eYRPOoAhkCKQuJFiFa8ESEQ5Hk=)
2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: 0nVh716qMxf5T71PANX2QzmNBRMbCGmc3vAqRWcki7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9448 (0x24e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Validity
Not Before: Apr 4 15:42:36 2026 GMT
Not After : Apr 11 15:42:36 2026 GMT
Subject: CN=69d1316c-d572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:72:3e:5c:db:5e:5c:d6:e2:d8:68:47:51:
0c:42:78:eb:3f:0c:81:61:65:92:e4:84:29:5a:c6:
fe:d5:2a:4e:76:94:32:b4:c7:2c:27:d1:74:ac:27:
49:39:83:0a:c4:f8:78:45:6e:16:21:38:84:d5:ba:
d3:a1:70:a5:f6:af:82:42:13:e2:5a:e9:e7:94:84:
56:22:4c:65:bc:52:a0:ad:77:fa:8b:32:62:e4:ee:
b6:b6:1e:19:49:a1:61:6f:c5:31:66:e1:57:9e:33:
32:1d:12:6a:89:67:8b:ab:c2:c7:da:62:fc:2a:4f:
48:43:ae:18:4a:de:be:5c:ba:12:f8:bb:9d:c0:df:
0b:e8:a9:43:eb:7f:f6:6b:d3:75:a7:a7:09:ad:69:
8e:7b:1a:a2:81:20:f3:b3:10:b4:6f:db:8f:cd:ad:
a2:de:50:61:9b:e6:30:b5:63:90:40:3b:8a:83:c5:
c1:9a:27:6b:cb:fe:5d:d3:00:fb:27:2c:35:50:3f:
c1:fa:30:a5:b7:94:0c:d2:f2:08:16:34:59:97:47:
95:78:a9:76:5c:a6:ed:c0:fb:ed:a2:a4:2e:e6:2a:
0d:71:b4:63:cb:f1:6e:6e:b2:cf:35:62:fb:f1:c2:
f1:b3:cd:7c:ce:b2:0d:76:ea:26:22:4c:51:c7:33:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6B:8A:78:54:C5:02:9A:01:9F:32:22:99:A7:EF:CD:DC:6A:1E:74
X509v3 Authority Key Identifier:
keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f4:59:e5:7c:e4:75:92:70:f5:93:71:8c:ae:68:62:8c:77:
e6:73:e4:8d:dc:a8:ec:ff:43:ea:6d:70:b5:15:13:91:ae:26:
42:9e:70:94:59:39:18:84:b5:69:e4:42:86:2a:8e:a7:15:ed:
91:89:fe:fc:67:a5:b8:25:ae:18:27:29:c4:fd:e7:8b:5f:35:
70:b3:cf:5a:34:14:c0:c0:a0:d6:6f:0c:f9:5c:60:45:3f:d8:
25:4b:69:74:e2:7f:90:25:90:ea:8a:a7:08:53:23:c7:58:1b:
d3:a0:ff:f2:f4:42:01:34:9b:37:c4:9a:a3:7f:56:c5:a7:54:
40:2c:da:57:02:3c:ae:32:71:d1:38:e0:5b:81:bd:99:bb:b7:
3b:e2:a5:b5:9d:ee:be:f5:59:96:34:c4:bc:33:5f:81:ab:2d:
ce:87:25:13:e5:0d:3a:f7:93:7a:12:79:1e:89:64:d4:98:03:
2b:e2:20:c1:63:f5:f2:d1:fa:3c:d6:b0:61:f4:43:ab:bb:e9:
26:08:63:ab:5a:b4:1b:5c:4f:b3:bf:ae:f5:4d:27:02:a3:d7:
7f:00:1b:be:a9:72:54:b4:e6:86:0f:fb:cf:c1:b4:24:38:9e:
7b:00:de:37:30:c9:3f:e1:90:46:6a:c6:6c:01:5a:38:94:9c:
7e:17:29:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:17 2026 by rpki-client