
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json)
Hash identifier: xmkU5Ohjh0pr/v1+WMlFK47A9CYivZUN0Jc6etABjC8=
Subject key identifier: 2B:1B:6E:C1:27:8A:00:B0:9E:09:DD:3A:A0:5B:44:A6:A4:0E:31:8B
Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Certificate serial: 0640
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
Manifest number: 063F
Signing time: Sat 04 Apr 2026 22:30:30 +0000
Manifest this update: Sat 04 Apr 2026 22:30:29 +0000
Manifest next update: Sat 11 Apr 2026 22:30:29 +0000
Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: lZmyFHsIpGPQxxmSmyctO1wBfvYnwVRU34IApeH49/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1600 (0x640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Validity
Not Before: Apr 4 22:30:29 2026 GMT
Not After : Apr 11 22:30:29 2026 GMT
Subject: CN=69d19106-3e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:31:04:81:d6:d4:5c:f0:8c:9e:90:4d:f7:
6c:91:62:89:41:bf:37:43:ec:2f:ed:af:14:86:a0:
a5:77:1d:eb:8d:b3:3f:cc:65:9f:8b:1c:4b:3d:b0:
4e:66:f0:d6:f7:4f:09:64:6b:05:27:d4:1c:e7:a1:
20:ba:b2:a0:0f:6a:3a:41:37:a9:f4:4c:ba:44:a3:
d5:0e:6b:bc:36:37:05:99:65:6d:33:9f:6b:fe:70:
14:e3:4c:a9:18:dd:14:de:10:6f:8b:5f:c5:dd:79:
90:32:69:a0:61:cb:45:52:30:47:99:70:3b:c6:0d:
c9:45:9b:f4:33:de:bc:c6:e7:62:73:ea:34:46:2d:
6d:3d:aa:44:18:6c:13:84:65:9d:e2:db:d0:d6:18:
76:28:ac:5d:7e:cb:d2:29:1c:29:cf:1a:2c:d6:43:
6f:74:60:6d:20:31:3f:31:a5:7c:2e:f4:38:4d:8b:
06:ce:26:06:a0:f2:b4:a5:18:e4:00:bf:e1:5a:33:
2d:dd:99:1d:9d:a1:62:37:1e:fa:8a:c1:60:4a:13:
ee:2e:11:3a:bc:aa:e1:de:71:f6:87:2a:dd:a9:42:
21:72:90:5c:f1:5d:87:c5:09:ee:23:71:13:66:a4:
43:52:62:89:66:be:bc:74:d4:f2:85:01:d4:d1:1f:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1B:6E:C1:27:8A:00:B0:9E:09:DD:3A:A0:5B:44:A6:A4:0E:31:8B
X509v3 Authority Key Identifier:
keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5d:44:6e:3d:36:29:5e:39:8f:da:55:6a:b3:96:87:29:ca:
50:b1:4b:23:b1:1a:19:79:45:48:09:ab:d3:5f:cf:86:0c:ce:
8d:fe:46:31:0d:fa:86:67:ea:2c:7b:bb:35:87:94:58:56:4b:
93:b2:e0:b4:25:42:a7:0a:8c:f3:c7:63:a8:4c:0c:af:4e:a5:
72:bd:64:d3:09:a5:3e:56:da:0f:3e:57:8d:30:f8:8e:09:32:
0c:2b:b5:05:13:a2:f3:7a:f4:4d:d4:40:36:fa:2b:1a:b8:04:
54:14:43:43:23:72:79:7a:f2:84:18:ea:39:c2:4a:43:c5:01:
07:90:6a:2a:7f:ed:10:6f:35:3c:4f:00:b7:fa:1e:6c:42:0e:
c3:72:d3:3e:43:70:cd:5a:8e:8a:db:89:b7:0b:f8:1b:e9:65:
c3:07:06:a7:93:3d:1e:01:f6:d8:7d:8c:81:c2:bf:19:b3:1b:
b4:8f:3d:14:65:b9:9f:5b:2f:0e:4b:65:8a:fe:22:10:d1:3e:
64:90:f7:70:8f:ba:be:50:a0:cd:8f:d7:9c:58:b9:2e:51:a7:
2a:72:8b:fc:4c:dd:cb:41:d0:55:f0:c0:5a:18:74:e1:eb:46:
09:a4:9f:35:ad:b0:1b:13:62:d7:a2:4c:4d:16:e7:ee:79:99:
c0:1c:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:04 2026 by rpki-client