
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json)
Hash identifier: 0aP28BGMcH2bzMcC11IsCmIpXW4UP7PuNiF9UKujSUM=
Subject key identifier: 51:55:37:0A:B8:1A:AB:2E:7D:4B:44:22:8E:09:9D:0A:F3:87:1B:8A
Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
Manifest number: EF
Signing time: Sun 05 Apr 2026 05:43:46 +0000
Manifest this update: Sun 05 Apr 2026 05:43:46 +0000
Manifest next update: Sun 12 Apr 2026 05:43:46 +0000
Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: Q8ASGYKG+8crdpGtFAB56DnnaZzlrDDz8G4nHujr0b0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Validity
Not Before: Apr 5 05:43:46 2026 GMT
Not After : Apr 12 05:43:46 2026 GMT
Subject: CN=69d1f692-26d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:23:03:94:7e:d5:24:c9:0a:65:7f:41:8a:
b0:60:9f:93:45:64:f7:b6:55:cb:5d:fb:61:6b:b4:
cd:51:d7:3d:d7:29:d4:31:21:0a:30:32:9d:6d:2f:
15:4c:16:b8:eb:cf:6a:91:e5:5e:ef:d2:2b:8f:49:
1d:9d:9a:84:19:c4:1d:67:de:95:66:e5:82:3d:db:
73:c0:2c:a9:dc:32:2b:2c:28:15:d8:ae:5a:db:1a:
46:03:a9:1b:cc:06:09:d3:20:e5:79:92:75:69:11:
07:6f:c4:3e:5d:f6:fd:63:7b:6e:da:5f:64:89:e2:
8a:77:51:72:b7:5d:2e:1d:13:fa:25:fb:7c:96:54:
8d:30:70:06:d4:fb:f0:3a:ca:36:c5:3d:5f:60:5b:
8c:4a:50:37:4d:b1:e7:24:d5:0b:ae:47:90:c6:07:
9c:8f:a3:c7:bd:b9:d0:73:cb:1f:be:a0:2f:e1:90:
3e:c1:3e:22:e4:26:48:2b:4d:42:ca:98:49:8e:dd:
12:e8:f3:96:ef:d8:3a:b8:37:58:7c:6a:85:3c:a3:
4c:f6:6c:48:d3:67:22:ad:72:a6:49:14:60:1a:53:
d7:c9:38:1b:ce:c3:ef:13:c7:6b:16:c7:a7:3e:d2:
9a:9d:39:68:1a:3c:0c:89:5a:7f:5a:62:2a:27:5a:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:37:0A:B8:1A:AB:2E:7D:4B:44:22:8E:09:9D:0A:F3:87:1B:8A
X509v3 Authority Key Identifier:
keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:d0:44:c2:60:df:23:8b:77:0e:52:18:a2:48:1b:36:3d:1c:
bb:12:2e:8c:82:d5:e0:19:dc:f7:12:b0:8e:fd:50:ee:8f:45:
a5:29:5d:2b:57:f6:55:61:47:de:4a:c8:54:f2:b4:0e:62:f1:
04:1f:e8:03:9c:35:85:50:42:65:d0:36:0b:d6:55:82:da:18:
c2:39:b8:d9:c7:ba:98:1a:b7:a5:55:ea:3e:eb:e7:3f:04:ad:
e2:e7:81:ca:70:0b:08:66:a0:47:a3:85:63:ba:d2:6c:66:57:
87:0b:5e:be:ae:27:3c:34:f5:75:02:0b:cd:ee:ab:71:e6:7c:
2e:2e:19:06:ad:b9:34:cf:50:0f:d3:75:74:5e:39:d0:b4:8a:
46:a1:0a:a9:90:f2:aa:43:21:75:eb:30:b2:a0:83:e5:70:6f:
77:59:8e:7e:06:80:34:dd:50:3b:01:45:ef:be:02:6a:de:29:
e1:03:b7:bd:4e:a5:e9:05:d6:ac:4a:c2:06:e9:0a:26:06:b2:
f1:92:b2:9a:74:70:9e:31:c0:86:e3:15:aa:f7:7e:3f:55:a9:
75:da:4e:42:ea:8a:c2:63:4a:7e:0e:fa:67:09:e3:43:35:f9:
ee:15:29:13:3d:9a:6d:35:4a:66:c9:59:5a:56:d5:fb:e1:4c:
77:28:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:05 2026 by rpki-client