
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json)
Hash identifier: gFxtnFGvQ1YXqSgKAk2GocwOdlllN+PTyrPKgWTiFEo=
Subject key identifier: E1:C4:46:31:D3:D4:D9:5D:B8:C8:5B:7B:CF:7B:4B:D5:BD:27:15:DD
Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Certificate serial: 105F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
Manifest number: 104A
Signing time: Sat 04 Apr 2026 17:19:00 +0000
Manifest this update: Sat 04 Apr 2026 17:19:00 +0000
Manifest next update: Sat 11 Apr 2026 17:19:00 +0000
Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: QSgU5ME07i4oXeKkIpSprrxljr7wsbi2t7c9xpBCIdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl
rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4191 (0x105f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Validity
Not Before: Apr 4 17:19:00 2026 GMT
Not After : Apr 11 17:19:00 2026 GMT
Subject: CN=69d14804-1fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:ba:59:eb:3a:8d:98:cc:29:d4:f3:06:67:
e4:61:e8:5d:f9:39:a0:90:e2:89:db:f0:50:37:2c:
3d:ee:08:fa:f5:35:5d:59:a3:fe:3f:5c:00:0f:4c:
0f:d4:72:45:df:67:9f:0c:bf:04:c2:34:23:42:4e:
02:35:f4:aa:19:76:19:35:56:ff:ad:14:8a:3c:10:
78:04:8d:77:03:92:ff:5c:8c:43:ed:fb:d0:d8:9c:
b3:eb:99:e1:9e:3c:b2:de:4c:eb:0d:96:77:4d:7e:
d6:38:d9:f1:fd:03:25:c4:21:9e:92:b1:ed:53:df:
2e:10:06:01:15:d5:0b:db:56:1e:a5:a5:1e:dc:6c:
8a:1d:2a:2a:4e:5c:b8:8a:67:f4:e1:98:24:38:21:
0f:eb:cb:e0:4d:11:6d:2f:fa:f6:2d:6a:bf:de:5f:
66:22:f7:94:f9:f6:b2:d9:9c:06:34:b3:ea:cd:4e:
ff:c3:3b:0a:02:6e:56:96:a3:e5:52:75:51:59:24:
c9:cd:cc:be:17:3d:1c:65:40:33:7f:61:d4:2b:b3:
84:d0:3b:1b:d1:09:85:a3:2d:f9:a4:b0:be:bd:e3:
bd:9c:52:9c:07:8e:18:76:a6:17:8d:2b:b5:df:e0:
dd:c3:f5:79:94:6d:60:19:69:12:65:53:19:fb:14:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C4:46:31:D3:D4:D9:5D:B8:C8:5B:7B:CF:7B:4B:D5:BD:27:15:DD
X509v3 Authority Key Identifier:
keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fc:91:74:57:15:18:a1:aa:00:52:03:e8:a4:bd:b2:23:9b:
1c:89:39:44:89:12:58:54:46:3c:d2:23:ff:a6:d9:3c:1f:ee:
9f:c0:08:0b:c0:f6:31:74:7f:03:8f:5c:b2:d0:78:cc:f6:d2:
c5:29:d2:82:a8:ad:46:74:64:33:9f:03:c4:fa:41:17:2e:65:
38:94:97:8f:9b:b4:25:d3:7c:c6:1a:ff:a6:68:39:f9:40:ca:
50:d7:24:cd:54:19:bb:b5:c9:be:34:85:03:88:fd:54:f1:45:
47:34:40:9f:87:bb:0b:39:86:08:b4:c4:77:dd:59:2a:93:fb:
99:e4:ee:42:92:12:0c:65:3a:65:07:d1:45:64:6b:3d:e6:41:
83:59:3d:48:10:c6:9b:e0:3a:1e:8a:9a:14:19:e9:23:5f:b1:
ff:b6:74:9a:ef:a2:41:a0:1e:e9:c7:5c:1c:1b:6f:33:bb:91:
8a:9b:da:a1:e2:46:06:cd:b6:4e:27:88:87:a0:2d:68:a8:e4:
06:d9:1e:f2:f1:49:b4:40:19:4d:f5:a9:5e:3e:f4:aa:c5:02:
45:2d:1d:9d:d6:6a:d1:44:66:2a:27:e9:8b:c3:a5:be:02:ff:
2a:e8:6e:9f:44:ff:1e:94:63:2e:b0:da:5d:a5:d7:85:19:88:
87:01:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:42:25 2026 by rpki-client