
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json)
Hash identifier: e51guogliswAZikuOkFpcINv2+hYx+LEKznyP0kDjJI=
Subject key identifier: 28:8E:C3:E5:F5:08:B4:A8:75:C0:E2:43:32:91:45:9E:18:BF:31:66
Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
Manifest number: 0107
Signing time: Thu 21 May 2026 06:08:53 +0000
Manifest this update: Thu 21 May 2026 06:08:52 +0000
Manifest next update: Thu 28 May 2026 06:08:52 +0000
Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: Ytg8M9LJrisCk5K36fC2GShLyZRxk1p02Wjh4GYUAOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Validity
Not Before: May 21 06:08:52 2026 GMT
Not After : May 28 06:08:52 2026 GMT
Subject: CN=6a0ea174-23af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:72:99:9d:56:f2:80:e9:46:6d:86:8b:8b:11:
79:db:21:26:f9:70:db:2b:99:47:01:f8:c0:4f:89:
7c:3e:2a:eb:08:61:7c:fd:f2:b6:ea:29:4a:49:7b:
6f:38:5d:66:1e:90:9c:07:6b:d4:bc:5a:e0:df:ba:
9d:c0:85:26:c3:af:83:a6:4d:e8:78:0a:ca:88:d1:
12:c3:f8:7e:fe:40:ab:b7:52:72:d8:8c:d7:8b:e8:
77:8a:7c:cb:36:91:de:c0:6a:9d:2d:eb:f3:98:0a:
47:ea:eb:a0:18:90:2f:fd:4f:48:ce:ab:ff:63:db:
a7:9a:59:4d:03:f0:43:b8:90:49:d3:0f:1c:5c:13:
ca:d2:2d:35:33:b3:8c:26:62:09:3c:66:3d:3b:e9:
7d:da:ff:ad:b2:ce:79:24:43:79:55:3f:3c:80:10:
1f:d2:38:07:fb:44:e1:5f:bc:60:42:df:e7:b4:0d:
cf:81:62:a6:eb:6c:e9:41:d3:ae:3f:73:8d:3c:1d:
cf:37:dc:f5:e6:44:60:bc:12:bf:68:01:c3:13:d0:
7e:f6:0d:e3:fc:f6:c7:1e:85:ed:45:5d:97:51:7c:
97:5d:05:71:a1:01:99:dd:24:fe:f3:50:9b:9e:9a:
06:34:6a:ad:b3:a6:31:c0:35:d5:ff:43:55:e1:a5:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8E:C3:E5:F5:08:B4:A8:75:C0:E2:43:32:91:45:9E:18:BF:31:66
X509v3 Authority Key Identifier:
keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:fc:24:aa:95:8e:3a:8a:da:70:46:be:2f:cd:55:e9:23:4c:
3c:6f:d0:c3:4b:a9:45:7b:86:10:6e:ad:f7:06:f7:d8:60:76:
7c:b1:83:6c:0a:2c:e2:4f:1c:fd:b9:c4:b4:73:64:d4:45:26:
69:1f:f8:38:80:98:cd:31:69:6f:82:c9:e0:35:19:0f:9a:9b:
e0:66:bc:8a:ac:42:ba:f4:be:b0:b8:fd:52:f6:24:33:5a:9d:
09:d8:41:78:58:f3:90:fb:7e:03:12:27:fa:c7:da:c7:09:5d:
95:28:c7:f4:c9:07:8f:69:58:95:b1:fa:5c:c8:b1:87:97:62:
77:93:0b:1d:5e:1c:e8:bb:03:32:60:b4:56:c4:4f:a2:6f:0c:
00:3e:8e:a3:2f:28:f2:cf:f3:52:f3:54:55:9d:55:fb:3c:95:
98:b9:b4:d4:01:1f:26:8c:7b:f6:f8:1e:72:ac:d9:04:aa:11:
0d:61:33:a9:42:f9:d1:3d:11:8b:51:6d:52:8f:eb:ab:52:f2:
61:9e:2d:58:a6:88:81:0f:8f:f1:25:99:03:4a:e8:99:d0:59:
5e:6e:3d:51:8a:72:be:32:75:ed:f4:42:60:be:70:56:88:1c:
46:21:70:18:fd:b4:b0:cd:68:73:cd:5f:05:dc:1a:21:86:47:
40:1a:a0:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVGMDcxMTAvBgNVBAUTKDM3MzhGRjNDNUJBRjE5MTE4MkVCQTE0Qjc4Qzg0OEE1
QUVGQTRDQUEwHhcNMjYwNTIxMDYwODUyWhcNMjYwNTI4MDYwODUyWjAYMRYwFAYD
VQQDEw02YTBlYTE3NC0yM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6HKZnVbygOlGbYaLixF52yEm+XDbK5lHAfjAT4l8PirrCGF8/fK26ilKSXtv
OF1mHpCcB2vUvFrg37qdwIUmw6+Dpk3oeArKiNESw/h+/kCrt1Jy2IzXi+h3inzL
NpHewGqdLevzmApH6uugGJAv/U9Izqv/Y9unmllNA/BDuJBJ0w8cXBPK0i01M7OM
JmIJPGY9O+l92v+tss55JEN5VT88gBAf0jgH+0ThX7xgQt/ntA3PgWKm62zpQdOu
P3ONPB3PN9z15kRgvBK/aAHDE9B+9g3j/PbHHoXtRV2XUXyXXQVxoQGZ3ST+81Cb
npoGNGqts6YxwDXV/0NV4aU9BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiOw+X1
CLSodcDiQzKRRZ4YvzFmMB8GA1UdIwQYMBaAFDc4/zxbrxkRguuhS3jISKWu+kyq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8zNzM3QTJCQ0Mz
NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdSR0M2NkZMZU1oSXBhNzZU
S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRLby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUYwNy8zNzM3QTJCQ0MzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdS
R0M2NkZMZU1oSXBhNzZUS28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAifwkqpWOOoracEa+L81V6SNMPG/Qw0upRXuGEG6t9wb32GB2fLGDbAos4k8c
/bnEtHNk1EUmaR/4OICYzTFpb4LJ4DUZD5qb4Ga8iqxCuvS+sLj9UvYkM1qdCdhB
eFjzkPt+AxIn+sfaxwldlSjH9MkHj2lYlbH6XMixh5did5MLHV4c6LsDMmC0VsRP
om8MAD6Ooy8o8s/zUvNUVZ1V+zyVmLm01AEfJox79vgecqzZBKoRDWEzqUL50T0R
i1FtUo/rq1LyYZ4tWKaIgQ+P8SWZA0romdBZXm49UYpyvjJ17fRCYL5wVogcRiFw
GP20sM1oc81fBdwaIYZHQBqgLw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:20:22 2026 by rpki-client