
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json)
Hash identifier: 3ga6oCUs/LhSlaOcD3GsQc5LHWeBJX6GmT9tKj8pSRo=
Subject key identifier: FF:31:AD:E8:B5:40:BC:71:AD:E6:9F:02:2C:AC:B7:96:EE:F9:A7:A4
Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Certificate serial: 1621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
Manifest number: 1618
Signing time: Sat 04 Apr 2026 16:37:47 +0000
Manifest this update: Sat 04 Apr 2026 16:37:46 +0000
Manifest next update: Sat 11 Apr 2026 16:37:46 +0000
Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: kV4epj3xqFBWFYw5W25wYPN0CXdaHLyj0Ls99rc+mW4=)
2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: 8xUrdUhoqiEQtEMVlp3eU8zsGPwNwBU0y12jksKJnIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5665 (0x1621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Validity
Not Before: Apr 4 16:37:46 2026 GMT
Not After : Apr 11 16:37:46 2026 GMT
Subject: CN=69d13e5a-f73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:81:d3:36:68:45:83:46:03:b4:d2:d5:b5:
8b:a1:69:fd:84:e3:91:40:3b:84:16:1c:5a:9c:20:
ce:46:a6:d0:ad:08:53:ce:29:41:8e:50:0d:b1:5f:
b5:be:c7:ef:73:bc:45:92:98:6a:6d:32:b5:e2:8f:
85:8a:16:a7:2b:dc:fb:8c:e9:48:70:04:be:81:a4:
40:e3:b6:5f:74:39:45:ac:e4:8e:39:71:3b:ea:11:
00:be:fd:b3:2d:63:5e:cc:99:78:f1:9d:b5:cd:6b:
4b:58:f3:45:8f:b9:80:e0:d3:5f:0f:e4:56:e7:b8:
5c:60:a3:96:df:b1:d9:e2:4e:08:90:c1:ac:96:5d:
23:4b:bf:95:a6:50:08:a9:05:89:c9:f4:77:55:93:
fe:7e:e4:eb:58:b6:5d:c3:9d:99:d0:f7:e6:8e:61:
79:ee:90:a9:8e:d3:dd:26:4a:97:f5:28:af:e1:f0:
44:1a:b0:cf:4c:eb:a8:f4:58:6d:14:07:6c:0f:8b:
8e:f8:2f:41:f1:af:a6:23:8b:ce:d6:d9:9d:5d:e4:
41:8c:74:e1:b8:25:9d:0c:31:92:c2:be:33:a5:6d:
29:69:5c:ff:a4:dd:61:07:b1:c4:e9:24:d9:c2:08:
72:13:33:71:7b:c4:cf:58:ed:04:4a:e8:b9:77:8b:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:AD:E8:B5:40:BC:71:AD:E6:9F:02:2C:AC:B7:96:EE:F9:A7:A4
X509v3 Authority Key Identifier:
keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:16:62:35:a7:f6:04:15:08:4f:82:bb:ee:a0:c6:24:d6:2e:
65:e9:6c:b3:ea:0c:c3:f6:3b:69:cc:c3:95:44:07:59:e2:ca:
b6:99:0d:7d:42:b3:ba:e6:15:dd:17:85:76:bf:1e:46:50:76:
b3:1c:a0:44:56:84:c8:fb:bb:2b:d1:23:cc:43:b2:a3:b2:2f:
40:13:11:61:ae:6e:d1:91:0e:a3:5c:fb:a9:91:72:ba:48:9c:
92:16:a7:b9:9d:20:26:12:ce:72:83:4a:31:c5:27:e2:39:bb:
a3:52:43:e5:e5:30:0b:ea:1b:0c:0a:9f:f4:49:b2:af:f0:34:
2f:1d:f6:fc:38:02:b5:ae:35:fb:f7:47:7a:ea:51:e5:25:09:
81:16:68:9f:c8:f1:63:b8:5f:35:e9:87:c4:d3:a6:93:6a:70:
af:05:a3:b9:0d:2e:75:ae:71:7c:e7:27:4b:20:2d:30:82:0f:
d6:01:21:b4:07:7c:54:dd:75:26:44:07:fb:99:16:5b:6a:f2:
fc:ff:1e:7d:83:3c:7c:9a:53:f7:14:26:92:77:d0:8a:f4:93:
57:48:76:1c:9b:4e:0d:86:fa:ae:97:f6:ce:df:94:75:25:49:
2d:0b:4c:d4:f0:69:0e:1c:dd:fb:87:8b:07:f1:f8:a0:16:b1:
6c:24:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:43 2026 by rpki-client