
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json)
Hash identifier: SNrypIsBLyAAGbskAZSa8Yq00rkoGM/wyl+Ma9+u9h0=
Subject key identifier: B3:5E:5D:44:C2:43:B1:57:BD:E7:61:C6:EE:5C:81:6E:8D:65:97:06
Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC
Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
Certificate serial: 353D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
Manifest number: 3533
Signing time: Sat 04 Apr 2026 14:40:51 +0000
Manifest this update: Sat 04 Apr 2026 14:40:50 +0000
Manifest next update: Sat 11 Apr 2026 14:40:50 +0000
Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: dodaO/BgUJ9r5Ci0nSswn13hKlWCQQg259evNy/TrvY=)
2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: XRI5mHaTfsQ5P4tZOTRljrYvxsKQSjEVMe5uuC/lXuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl
rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13629 (0x353d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
Validity
Not Before: Apr 4 14:40:50 2026 GMT
Not After : Apr 11 14:40:50 2026 GMT
Subject: CN=69d122f2-421c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4c:2e:d8:fc:d1:7b:47:08:4c:63:47:b5:05:
db:0c:e2:16:89:0d:7c:2f:d8:65:b2:a2:a6:89:62:
23:08:63:f1:94:3a:ca:15:1f:a1:44:c0:14:0a:ca:
75:41:99:7a:c7:79:ae:59:c1:75:12:c0:74:84:a0:
1a:7c:2f:58:b6:cf:8d:38:ae:bf:99:67:72:37:13:
9e:f0:d0:77:63:9c:dd:2e:2d:29:e7:83:a7:df:f4:
c6:fb:f3:97:a9:69:dc:7e:06:4a:0a:26:fe:e7:3f:
f5:5f:c6:50:19:84:af:05:76:c5:c1:d0:79:77:1e:
18:05:3f:38:29:6c:2d:d1:76:7e:40:fa:97:a1:66:
2f:16:be:3b:29:14:a3:b9:b0:3a:ef:a3:ee:0b:8a:
bd:5f:49:d6:e4:ba:58:57:c2:8f:1d:5b:53:68:0f:
38:ad:0c:1c:af:7f:07:e0:10:72:5d:64:77:51:64:
fb:57:16:0c:24:cf:92:4c:f2:b8:4d:a6:89:e0:74:
32:ae:b8:ff:72:e2:e9:82:3c:10:48:2f:6f:c8:5e:
ac:b4:76:90:da:67:d3:ad:59:77:99:24:8b:2d:a3:
26:58:ec:79:79:a8:38:77:59:2f:73:ad:ae:7f:73:
ce:c5:1f:87:fb:05:4b:16:65:53:f3:d7:8d:e2:ec:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5E:5D:44:C2:43:B1:57:BD:E7:61:C6:EE:5C:81:6E:8D:65:97:06
X509v3 Authority Key Identifier:
keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b6:19:d0:01:de:33:72:23:67:ca:96:9e:39:b1:29:2f:34:
b0:3f:e6:86:93:fd:be:a1:71:75:37:82:0e:25:4f:43:d3:59:
2a:2f:cc:2a:e0:2a:0d:71:c1:2b:a6:8d:d7:bc:9b:24:e5:7f:
6a:13:79:f1:54:dd:5e:69:2c:06:db:46:a6:6f:61:ef:6b:1f:
49:af:f2:26:9d:80:7d:c6:48:9b:e3:bc:77:e8:70:e1:23:f9:
68:f8:34:3e:30:d0:41:71:d5:b6:4c:97:c9:dd:b0:f8:f6:eb:
fc:03:e2:98:66:a5:bf:2f:30:16:09:fe:84:af:49:c5:84:c4:
87:1d:fd:5b:c4:fc:c8:e1:ce:d1:23:f6:74:9d:c8:98:b3:85:
4c:20:2e:55:3f:a3:c8:54:97:db:09:f1:1f:ac:30:56:40:e6:
45:9e:3c:b6:b8:94:e9:7d:d9:a9:f5:e5:ad:e7:10:15:07:7c:
69:10:e4:99:d3:c1:c5:25:ab:3c:e4:d0:c6:ef:82:bb:5a:fd:
8c:a2:c1:69:68:4f:17:c8:1c:43:b4:59:5a:c0:20:be:84:a2:
cb:b6:6d:ef:56:3f:7b:50:82:a8:fc:28:68:6d:4e:e1:fa:73:
44:59:50:b6:81:f5:7b:6d:a2:22:0f:67:df:f1:8c:6a:ec:7a:
ab:78:6d:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1
OTNFRENGRUMwHhcNMjYwNDA0MTQ0MDUwWhcNMjYwNDExMTQ0MDUwWjAYMRYwFAYD
VQQDEw02OWQxMjJmMi00MjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlUwu2PzRe0cITGNHtQXbDOIWiQ18L9hlsqKmiWIjCGPxlDrKFR+hRMAUCsp1
QZl6x3muWcF1EsB0hKAafC9Yts+NOK6/mWdyNxOe8NB3Y5zdLi0p54On3/TG+/OX
qWncfgZKCib+5z/1X8ZQGYSvBXbFwdB5dx4YBT84KWwt0XZ+QPqXoWYvFr47KRSj
ubA676PuC4q9X0nW5LpYV8KPHVtTaA84rQwcr38H4BByXWR3UWT7VxYMJM+STPK4
TaaJ4HQyrrj/cuLpgjwQSC9vyF6stHaQ2mfTrVl3mSSLLaMmWOx5eag4d1kvc62u
f3POxR+H+wVLFmVT89eN4uw19QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNeXUTC
Q7FXvedhxu5cgW6NZZcGMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE
OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa
d2V1SDBOWHFQdXhaUHR6LXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX7YZ0AHeM3IjZ8qWnjmxKS80sD/mhpP9vqFxdTeCDiVPQ9NZKi/MKuAqDXHB
K6aN17ybJOV/ahN58VTdXmksBttGpm9h72sfSa/yJp2AfcZIm+O8d+hw4SP5aPg0
PjDQQXHVtkyXyd2w+Pbr/APimGalvy8wFgn+hK9JxYTEhx39W8T8yOHO0SP2dJ3I
mLOFTCAuVT+jyFSX2wnxH6wwVkDmRZ48triU6X3ZqfXlrecQFQd8aRDkmdPBxSWr
POTQxu+Cu1r9jKLBaWhPF8gcQ7RZWsAgvoSiy7Zt71Y/e1CCqPwoaG1O4fpzRFlQ
toH1e22iIg9n3/GMaux6q3htnQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:44 2026 by rpki-client