
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json)
Hash identifier: GPUVpiV1JGkQVxKe7zZQ2ZmK8FXfQKyLTxMjr7c0Wyc=
Subject key identifier: E4:98:71:4A:76:71:A6:AC:22:5F:CC:7F:EA:55:61:1E:26:06:1F:E0
Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49
Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
Manifest number: C3
Signing time: Tue 21 Apr 2026 06:44:12 +0000
Manifest this update: Tue 21 Apr 2026 06:44:12 +0000
Manifest next update: Tue 28 Apr 2026 06:44:12 +0000
Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: 6ulOOMnfEMF96phJMKykeRyoap1l2mDB9h89lw2fE3o=)
2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: eH1wM+wRYnXUxuQ4RnmT4QdaFVHNLHxpHC9QEvFzpB8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl
rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049
Validity
Not Before: Apr 21 06:44:12 2026 GMT
Not After : Apr 28 06:44:12 2026 GMT
Subject: CN=69e71cbc-1df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:37:1b:18:6a:4b:92:b1:db:4e:40:12:7d:
7a:bd:5d:61:9d:cd:71:82:a7:32:8a:47:b3:6a:f8:
42:b3:de:89:bc:0f:b8:d8:b5:e3:1a:2e:07:4f:fb:
3b:e5:cc:93:6b:ab:28:3d:4b:0f:d8:b7:f4:98:92:
34:50:51:ac:df:c7:7b:4e:cd:82:9e:44:e0:ef:84:
09:09:7a:63:c4:fa:21:a4:81:4b:5d:b4:5a:d4:3b:
af:ba:8b:49:9c:eb:59:6e:7f:83:9f:74:13:99:0d:
c3:45:91:02:a2:d2:4b:6f:e3:4a:15:b0:27:03:05:
01:af:7e:57:91:7e:62:54:d1:45:1c:ff:07:5e:47:
83:34:88:82:5e:51:41:d6:a3:a9:d9:17:6c:0f:01:
c5:c6:85:64:dc:d5:73:21:df:fc:3b:d0:92:1c:18:
44:13:86:22:aa:33:d8:7d:bb:50:d4:c7:75:46:a9:
e7:1a:4d:c6:f2:5d:c4:00:80:84:cd:39:1a:51:8e:
54:fc:d5:1f:54:f6:68:7e:7f:9f:fb:0d:ba:15:2c:
75:2b:1f:93:84:f9:b4:df:ad:6b:b9:90:af:28:23:
a2:96:73:c3:f7:c6:79:21:ae:00:13:84:69:ef:65:
23:53:b9:61:0f:ff:78:71:d2:0e:2a:fe:31:0c:d8:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:98:71:4A:76:71:A6:AC:22:5F:CC:7F:EA:55:61:1E:26:06:1F:E0
X509v3 Authority Key Identifier:
keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0a:fd:47:70:36:12:3c:a0:bf:0e:89:da:6a:06:cf:91:1a:
e7:59:51:1a:8b:d9:f4:e7:b1:5e:b4:bf:e4:ef:bc:77:11:3d:
73:b3:5d:7d:5f:15:77:d7:55:0c:e6:79:a7:6e:0e:d5:ca:b0:
68:95:ab:f4:e8:6d:0d:d5:bc:b9:b0:ae:10:ce:12:c6:44:86:
2b:9c:a8:88:b7:48:49:a0:94:27:c5:42:f0:40:ed:5d:49:3f:
9a:48:e4:45:31:b1:17:fa:f8:1a:3f:42:ab:ac:4d:88:af:e7:
a0:60:78:42:a2:ef:29:39:2c:5d:19:7b:ba:9c:da:dd:a1:eb:
90:28:0f:a3:75:32:9a:da:e7:5c:9f:17:a0:90:10:df:57:10:
f4:1e:c2:73:fd:15:59:81:03:43:97:21:bd:4c:5f:37:a3:e9:
a7:75:a8:0d:e0:25:02:68:8f:83:d7:31:ac:67:4f:da:46:4b:
58:58:da:70:2b:fc:a2:64:c7:22:42:98:73:62:c4:ac:93:44:
0f:16:82:fc:10:34:a2:ec:1f:39:76:8b:8f:18:eb:cc:66:f2:
6c:1c:50:04:78:79:0e:d5:0f:67:c4:f7:59:8d:37:ab:4c:28:
66:d9:4a:1b:f6:b5:5a:ab:7c:61:13:bd:0a:90:2a:9c:8e:b0:
67:9a:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:49:58 2026 by rpki-client