
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier: s3fbnOiZ75CKTf/c+gyRUkvIlQim6XWJzFJdmZamw/Q=
Subject key identifier: A1:13:59:C7:44:C7:11:97:A0:3F:6C:C7:6F:71:1A:18:C2:7B:28:8B
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial: 0821
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number: 0805
Signing time: Sat 04 Apr 2026 21:00:10 +0000
Manifest this update: Sat 04 Apr 2026 21:00:10 +0000
Manifest next update: Sat 11 Apr 2026 21:00:10 +0000
Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: 3rXdM5PIKiMgheuqK0KqxjCRlZOJIzuJ9CSivxSw2kc=)
2: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: EZxaNB8Cg1CajysGL+HI5uVaed24iixfpfYF8glfmow=)
3: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: uC8BC8FOfX07Bz7LL4CTmAUAe/spoS+Jn5Z7MYh3ovQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Validity
Not Before: Apr 4 21:00:10 2026 GMT
Not After : Apr 11 21:00:10 2026 GMT
Subject: CN=69d17bda-f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:7c:1b:d9:29:7e:08:ef:76:b6:d8:85:54:
e4:ae:2d:06:9b:8b:86:b3:d6:5f:be:67:c7:3f:40:
cc:98:a3:5f:be:e6:04:d6:8f:f2:59:d7:31:0a:f9:
c3:04:c7:b5:d8:34:4b:64:10:25:f5:c6:24:dd:be:
49:48:84:6a:0c:8c:79:31:8f:b9:52:bd:ef:67:08:
b6:28:04:06:8a:cb:ef:89:10:77:b8:90:53:2c:50:
a3:e8:86:42:2b:c5:bd:9d:d1:07:e1:99:d0:29:09:
6e:dd:97:2b:8e:2a:ac:be:34:21:1f:db:ba:4d:ae:
e1:63:6c:e7:99:41:3c:85:f0:0f:ce:b9:8f:92:2a:
f9:e4:5f:af:01:c8:4d:34:d3:99:88:d0:a5:98:4d:
44:48:d1:5a:35:ff:4c:05:7a:e5:bf:b3:ca:86:06:
ba:38:d9:01:a6:e6:4c:01:53:71:92:a6:28:24:0c:
a8:dc:3b:84:74:ff:15:b8:3d:0f:a2:ba:d8:f8:a5:
46:ca:82:c8:10:c2:4a:fa:fd:b7:23:a6:11:47:07:
b8:5b:0f:0e:41:02:94:28:5d:f5:d6:6d:5a:ab:84:
78:ba:87:c2:fe:c4:0c:1b:f0:17:a8:e1:96:3a:bd:
13:85:83:25:96:86:29:d6:8d:51:5b:33:89:8f:25:
5b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:13:59:C7:44:C7:11:97:A0:3F:6C:C7:6F:71:1A:18:C2:7B:28:8B
X509v3 Authority Key Identifier:
keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a3:cf:e0:2b:8e:7d:ba:22:85:a5:d6:d8:1a:88:42:ed:60:
cb:bb:5b:57:bb:c1:e8:d5:0c:f0:93:fd:4a:88:7a:46:3e:e0:
47:b7:af:af:fa:45:74:65:1d:63:3a:61:cc:1e:7f:7c:d1:06:
3e:c1:48:b6:df:62:90:7b:bf:08:35:9e:b0:79:09:dd:59:a3:
76:f9:dd:95:c8:f9:74:cf:36:72:87:e0:ce:3d:de:82:44:5b:
0e:1b:16:34:28:14:ac:8f:37:ad:e1:c3:f8:96:35:ab:95:84:
77:3f:9b:c7:2b:ad:0d:e9:eb:d5:f4:8e:ce:8d:86:96:31:63:
f7:3f:d2:b7:9b:4c:44:1c:e8:67:2f:c6:7f:f5:64:94:5b:8b:
47:22:da:6c:98:2f:b2:75:8d:51:48:fd:53:db:8a:05:13:fc:
35:16:c4:57:96:ce:ca:0e:0b:a3:3f:3b:44:19:79:d5:8b:88:
78:d1:2e:4c:b1:ee:1b:5b:81:21:b3:00:ee:48:59:30:98:d1:
e7:e7:b6:c1:56:58:a8:43:48:55:63:0c:c1:60:34:f5:cf:3c:
51:91:38:79:21:c2:b1:99:68:a8:99:83:5c:d3:a1:3e:12:7c:
ef:9b:f2:a1:8f:f4:34:26:67:00:21:a8:f5:dc:f9:a2:a3:7a:
b3:a3:9d:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy
NjdFQkFFRUMwHhcNMjYwNDA0MjEwMDEwWhcNMjYwNDExMjEwMDEwWjAYMRYwFAYD
VQQDEw02OWQxN2JkYS1mMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuax8G9kpfgjvdrbYhVTkri0Gm4uGs9ZfvmfHP0DMmKNfvuYE1o/yWdcxCvnD
BMe12DRLZBAl9cYk3b5JSIRqDIx5MY+5Ur3vZwi2KAQGisvviRB3uJBTLFCj6IZC
K8W9ndEH4ZnQKQlu3ZcrjiqsvjQhH9u6Ta7hY2znmUE8hfAPzrmPkir55F+vAchN
NNOZiNClmE1ESNFaNf9MBXrlv7PKhga6ONkBpuZMAVNxkqYoJAyo3DuEdP8VuD0P
orrY+KVGyoLIEMJK+v23I6YRRwe4Ww8OQQKUKF311m1aq4R4uofC/sQMG/AXqOGW
Or0ThYMlloYp1o1RWzOJjyVbowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKETWcdE
xxGXoD9sx29xGhjCeyiLMB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz
M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEE4Ri8zMzA1MjQ3QTIzM0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoy
b0Rra1lXalRKNHNtZnJydXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa6PP4CuOfboihaXW2BqIQu1gy7tbV7vB6NUM8JP9Soh6Rj7gR7evr/pFdGUd
YzphzB5/fNEGPsFItt9ikHu/CDWesHkJ3Vmjdvndlcj5dM82cofgzj3egkRbDhsW
NCgUrI83reHD+JY1q5WEdz+bxyutDenr1fSOzo2GljFj9z/St5tMRBzoZy/Gf/Vk
lFuLRyLabJgvsnWNUUj9U9uKBRP8NRbEV5bOyg4Loz87RBl51YuIeNEuTLHuG1uB
IbMA7khZMJjR5+e2wVZYqENIVWMMwWA09c88UZE4eSHCsZloqJmDXNOhPhJ875vy
oY/0NCZnACGo9dz5oqN6s6Odqg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:36 2026 by rpki-client