
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
File: rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft (raw, json)
Hash identifier: 44Fri4Y3NVkFHmPFN2EzAuM8/MC0bi9fMllItg7m8fU=
Subject key identifier: E2:72:A0:AE:9F:D2:30:6D:BD:5E:06:7B:78:21:6C:22:08:96:FD:B7
Authority key identifier: AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4
Certificate issuer: /CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
Manifest number: 0247
Signing time: Sun 05 Apr 2026 02:00:51 +0000
Manifest this update: Sun 05 Apr 2026 02:00:51 +0000
Manifest next update: Sun 12 Apr 2026 02:00:51 +0000
Files and hashes: 1: rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl (hash: SgI+Qk8hHt22OKRTOTPCrFA0q0DUR5h7KixJPL7ZPfk=)
2: 3FEB4A2EBD8C11EDA150C338C4F9AE02.roa (hash: kOU4ZfenYTi6avUVZzRef8vWcpX0uLOlwyAQ4TBNpt8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl
rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167427, serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
Validity
Not Before: Apr 5 02:00:51 2026 GMT
Not After : Apr 12 02:00:51 2026 GMT
Subject: CN=69d1c253-5de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:36:f8:79:2e:f0:b1:d0:84:cd:67:77:03:
70:fc:09:e9:48:89:2f:eb:3a:30:54:72:a7:e9:e3:
aa:25:6c:bb:e0:5a:cc:a9:58:14:c6:c9:ec:7e:9b:
13:e0:39:fb:75:e6:76:47:37:ed:7f:51:f3:0a:e2:
8f:6c:bb:96:c2:59:56:af:19:39:88:3e:73:b0:72:
24:a9:d0:7e:b1:56:57:81:2f:8d:ec:a5:79:7f:00:
1c:2f:0d:1a:3b:94:60:24:a9:6e:eb:f2:2b:75:fa:
14:2a:50:6c:a6:6d:b9:e5:3a:55:f4:95:9b:2f:d2:
d7:e0:de:3c:0d:b2:4b:30:39:d5:15:62:30:54:72:
e7:f2:1c:2c:90:74:2d:16:69:c9:df:6a:99:6b:34:
23:29:31:31:44:08:eb:b3:ad:6e:4d:c8:23:07:01:
88:c5:f4:92:ed:73:3d:5c:3c:7c:62:ce:d6:9f:2b:
c7:6c:40:8e:3c:1d:49:a8:2f:9c:3c:55:93:54:89:
48:c1:30:8d:69:94:8c:81:87:01:6f:3a:9c:6a:ef:
5c:b2:8c:43:4d:19:5e:89:f3:fb:9d:3b:85:36:14:
fa:7b:b3:99:70:06:57:83:44:48:f3:19:63:db:07:
f1:b0:12:a6:81:cd:39:c9:44:51:15:f4:1c:54:e9:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:72:A0:AE:9F:D2:30:6D:BD:5E:06:7B:78:21:6C:22:08:96:FD:B7
X509v3 Authority Key Identifier:
keyid:AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:4d:b3:f4:2c:df:ac:66:28:cd:4a:bb:91:2b:b5:d7:2a:
7e:c5:59:55:12:0a:9a:78:25:30:f6:4a:2c:11:18:a4:9f:d6:
1c:51:2d:dc:58:eb:7f:89:19:fd:a0:85:79:81:6c:09:ee:f7:
85:18:f1:0c:0f:ec:d2:24:e1:00:76:b0:9a:04:77:dc:88:61:
d1:f0:68:fa:a7:d6:5c:bd:13:1e:23:11:81:e1:36:57:48:02:
6c:07:e4:94:ab:f4:8f:92:c1:bf:87:ed:50:70:3c:d2:f4:4c:
d3:80:45:a2:2c:ee:b8:2c:dd:af:9a:96:6f:a8:2f:e1:3f:a3:
c6:72:40:7b:e0:77:b7:05:f7:c4:e1:aa:d3:2a:89:b5:f2:39:
dd:a5:62:86:e2:c1:a5:57:d3:1c:b1:c2:40:ca:18:7e:ba:73:
9a:27:45:9b:35:74:9f:0e:fc:97:e2:62:dd:b9:3e:b9:f0:b7:
1d:06:7e:fd:78:bc:fe:f1:a0:b0:f3:8e:a8:08:25:dd:55:dd:
d6:f9:38:09:9d:24:20:ef:20:65:f8:b8:c5:47:95:8f:e2:e6:
91:05:da:28:66:6d:e4:b3:94:7a:5a:3c:8e:7c:2b:5e:aa:c1:
0e:fb:69:d8:df:46:74:ad:c1:28:5c:7f:30:16:d6:51:fe:ff:
e5:e8:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:17 2026 by rpki-client