
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
File: znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json)
Hash identifier: krnZDfBSMSjKSubyYN8avqYnh2Nn5tYe2iAZ+U3NGhE=
Subject key identifier: BB:6C:48:E7:85:EF:F5:9B:64:3E:73:63:47:B4:DF:32:D7:D3:AB:E3
Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
Certificate issuer: /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
Manifest number: B2
Signing time: Wed 19 Aug 2026 07:45:01 +0000
Manifest this update: Wed 19 Aug 2026 07:45:00 +0000
Manifest next update: Wed 26 Aug 2026 07:45:00 +0000
Files and hashes: 1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: OS9ALrk1Gn73aKkJRBvWHCJXt2opsg7TSYbaOKd+WWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Validity
Not Before: Aug 19 07:45:00 2026 GMT
Not After : Aug 26 07:45:00 2026 GMT
Subject: CN=6a855efc-03a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:3f:4a:1d:82:0d:08:5d:40:48:b5:4f:33:
7d:cc:b6:65:c2:1e:6a:56:3b:ae:37:2e:57:b1:e9:
7b:d3:c6:51:fb:5d:cc:e2:d7:76:e8:3f:95:93:db:
00:bb:96:2d:7f:c3:36:65:0d:2b:f9:4c:00:50:f7:
4d:59:ad:93:4c:df:16:ed:e1:4f:d5:62:cd:d1:cc:
7d:e5:93:97:dc:20:9e:c4:5c:cb:a6:4f:76:26:d2:
44:74:a1:46:3d:76:39:47:48:35:0c:f7:53:23:b0:
c1:3f:26:82:1e:2f:f4:15:f7:2a:28:5e:08:e5:81:
8f:ed:26:c1:ca:43:9d:4e:62:21:fb:02:37:14:c1:
1d:48:e7:44:9f:ab:8b:27:80:df:99:0c:9e:4f:c8:
76:79:85:fd:e3:27:94:fd:cb:fd:cd:4e:e4:06:fc:
a7:79:3d:00:fe:8e:78:3c:32:28:79:e5:69:3d:d0:
1b:4c:a9:1b:8d:eb:5a:eb:f9:13:89:74:aa:7c:00:
05:8b:17:ba:7f:96:e0:76:24:66:08:a4:25:5b:6f:
a7:71:83:7d:7c:36:5b:36:42:fa:9b:72:01:7a:a8:
88:2b:ac:2c:bd:96:f5:4f:f8:8e:b1:16:f0:7e:fb:
46:d3:68:53:bf:a6:46:78:fb:86:db:85:eb:a5:f2:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:48:E7:85:EF:F5:9B:64:3E:73:63:47:B4:DF:32:D7:D3:AB:E3
X509v3 Authority Key Identifier:
keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:90:43:e5:5b:dc:d5:16:08:fb:6f:1f:fb:79:d2:9f:89:3c:
f1:b2:12:0d:5b:77:fd:ae:94:e2:e3:43:1a:51:0b:31:f0:8c:
cb:fd:fb:7f:66:54:26:bc:13:62:5a:f9:3a:a0:57:77:a9:af:
67:de:1b:33:1c:ff:75:cf:56:9d:d7:53:41:db:d7:dd:72:da:
31:62:e6:37:72:6e:28:45:c0:9f:13:d5:f8:a9:d8:fb:bc:3c:
b1:2f:e0:14:f1:06:05:8a:8e:32:22:70:b6:1b:0f:16:50:64:
d7:f5:3f:46:b0:e3:38:26:ae:d1:a8:6d:34:0e:e7:88:50:a9:
e4:a7:a9:49:88:62:28:36:d2:c2:97:30:d8:8e:67:c3:06:40:
64:f4:c8:3c:f0:65:5d:20:96:59:1a:ea:45:7e:dd:6c:9d:33:
09:04:5c:04:a5:39:01:c2:00:27:9c:1e:f4:1e:d7:34:8f:17:
f2:c7:14:75:dd:6e:a3:ae:9f:6d:24:60:c8:8c:3c:eb:ee:71:
0d:15:08:75:13:b1:90:b0:4f:27:50:fc:2f:8c:25:d7:0d:4f:
66:95:bb:a0:88:04:ac:be:65:23:7a:8a:14:bb:12:87:6b:4d:
30:ff:9d:27:72:3d:61:00:d3:ea:0e:ba:22:41:a0:60:f1:ba:
d5:1b:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:04 2026 by rpki-client