
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json)
Hash identifier: qz22NO9tTZrbRT6scyTBNgRbJqYd74k74dlRLzypV+4=
Subject key identifier: 41:E5:92:4C:CC:D4:10:27:B0:86:29:E6:B5:D1:B6:38:80:E4:D3:A4
Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
Manifest number: 012F
Signing time: Thu 21 May 2026 05:47:27 +0000
Manifest this update: Thu 21 May 2026 05:47:27 +0000
Manifest next update: Thu 28 May 2026 05:47:27 +0000
Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: u4BID4et6E//vSBUEMlWtbKpiLjytppTsITvZDVdtVE=)
2: D7A7F3FEE18711F0A8B43181426F56BC.roa (hash: vh4+TvOiKZauBrK2eZX3+JUCcmsgQa2Igdr6PGVraWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl
rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Validity
Not Before: May 21 05:47:27 2026 GMT
Not After : May 28 05:47:27 2026 GMT
Subject: CN=6a0e9c6f-b373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:53:83:56:0f:e3:37:3b:d2:4a:68:e4:50:
5d:55:e3:5a:3e:b3:d6:22:7f:e1:18:68:24:d1:d0:
b8:42:9f:2c:5b:48:2d:4c:31:59:d2:61:21:e1:cf:
c9:a3:fa:6e:b5:e2:2f:73:69:e8:99:b0:32:2f:fc:
49:6a:9c:dd:f6:23:8d:49:53:da:5e:a1:51:db:96:
62:12:1e:a5:6f:5e:27:4f:90:b8:e0:13:46:c1:03:
74:dc:18:4b:dc:2e:58:ec:d3:f8:a0:18:1a:13:5a:
a8:7c:80:e4:c7:1c:53:4f:6a:80:ed:2c:ad:19:3b:
e4:10:0a:2e:c1:17:cd:ba:6f:04:3d:81:2e:42:4a:
dd:7d:cf:8d:2f:6b:b6:6b:92:92:fa:1e:b1:f4:28:
61:a3:73:9f:72:93:c2:56:cf:5f:58:11:23:62:81:
bc:b1:c5:57:df:f7:15:3d:2f:ad:24:60:cb:88:83:
98:ca:df:72:68:e7:45:cd:70:8a:79:05:0a:cc:b4:
1a:b8:51:81:ed:ba:0a:f6:2f:35:55:47:5a:38:83:
48:1e:a9:10:ed:5f:e0:3d:03:90:15:8a:43:73:4f:
a2:67:7b:c9:9b:16:b0:70:d9:e4:ec:b6:f6:3c:fa:
8b:48:0a:91:ec:fd:22:b3:67:17:ef:d2:2d:94:b9:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E5:92:4C:CC:D4:10:27:B0:86:29:E6:B5:D1:B6:38:80:E4:D3:A4
X509v3 Authority Key Identifier:
keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:6f:b0:8b:e2:40:2b:c0:8f:d3:8a:51:b3:fc:0b:8d:a8:99:
5b:ea:d6:2a:78:d7:43:ea:81:3a:9b:46:d5:27:ae:ca:00:4e:
52:13:3d:fc:03:53:4b:91:6d:8a:07:ff:38:a9:f8:71:d1:6c:
27:4e:bc:a7:65:be:94:e7:c9:bd:cc:b1:11:81:51:1d:f4:4d:
c3:7f:f3:b3:ed:68:da:e1:02:2c:5f:a6:0d:4f:37:18:8f:be:
ed:23:6a:ef:2a:37:c5:84:90:a9:44:17:f7:39:0d:d2:43:9e:
e0:e4:ee:3e:f4:27:ce:46:bc:3e:b8:a0:82:db:45:e6:6e:18:
e8:06:c6:44:f4:5a:e6:d5:4a:7f:ed:5e:01:ce:bf:54:ff:45:
53:c2:4e:80:3d:50:e7:f9:48:b6:82:95:7f:82:01:bf:9d:4f:
04:b0:01:60:3b:c5:58:65:42:8f:8f:d4:41:ab:15:14:0c:53:
22:09:ef:7a:eb:10:5a:28:3c:46:38:b6:32:4f:25:90:03:79:
91:85:0e:1b:f2:80:74:37:ba:5e:79:82:79:10:08:d6:c8:f6:
c6:ba:bf:ea:55:85:36:22:f3:e8:22:c2:ea:1f:81:73:d2:1d:
92:b5:cf:07:64:04:c8:46:ef:a3:5c:24:51:86:6b:1f:69:99:
ae:51:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:04 2026 by rpki-client