
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json)
Hash identifier: TyhpQOCBZ8I1H3KHtKn2ebe6ZEFF8M2H82JQd/yU8ws=
Subject key identifier: FA:6B:80:F3:56:0C:5D:8E:23:9F:74:78:EF:06:A7:EC:1A:E9:1E:4E
Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
Manifest number: EA
Signing time: Fri 27 Mar 2026 05:55:19 +0000
Manifest this update: Fri 27 Mar 2026 05:55:18 +0000
Manifest next update: Fri 03 Apr 2026 05:55:18 +0000
Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: ltVmchN5d5go/RbwDoGI4m0m/WOkjAp6EgBLHfcd7t0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Validity
Not Before: Mar 27 05:55:18 2026 GMT
Not After : Apr 3 05:55:18 2026 GMT
Subject: CN=69c61bc7-7a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:19:d7:d7:9f:f7:67:d9:e6:3d:2f:56:de:59:
dc:95:c6:27:f9:59:e7:f5:ed:9a:36:76:4d:69:ec:
dd:d9:d3:88:ee:8c:02:8d:f8:e2:2f:cf:14:0f:29:
d2:a3:28:44:19:0b:55:b0:de:fa:5f:9f:ca:a9:a0:
50:fe:63:81:8f:3a:06:07:80:03:7f:ee:16:ae:d2:
b6:33:c2:8a:f0:e5:c7:3e:25:8c:2b:f1:e4:32:35:
fe:a9:a4:79:ce:d1:0e:3d:ac:01:75:af:a4:97:67:
8a:59:20:60:d8:ef:5b:29:d3:3f:17:af:29:c7:b6:
fe:9d:1d:ec:ad:f8:7e:23:e0:d4:6f:b4:d1:18:fc:
aa:f9:f7:a1:24:3b:75:97:d6:b1:c4:2e:3a:fd:e9:
c7:c7:f3:3d:c7:e2:7f:cb:ec:ee:0a:0d:97:4c:ac:
a7:ad:f8:e5:96:b1:43:35:03:23:7c:98:66:3b:89:
44:44:9c:ed:6d:17:ae:c0:92:bd:d4:d4:0a:ae:f6:
47:da:3b:a7:ad:5e:db:bf:fe:26:01:7b:f2:66:a1:
73:35:25:09:ff:2d:85:68:4e:b4:3e:38:cf:3d:4d:
c2:01:5f:34:8d:ec:20:97:cc:fb:88:8a:33:49:ef:
c4:fa:81:a0:96:a2:01:b0:35:0b:d3:69:48:8e:f3:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:80:F3:56:0C:5D:8E:23:9F:74:78:EF:06:A7:EC:1A:E9:1E:4E
X509v3 Authority Key Identifier:
keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:1d:aa:5a:f7:20:62:99:4b:e8:1d:c4:3a:a0:55:ca:95:de:
a9:64:35:de:3c:cc:2f:4c:00:a4:18:4f:35:d5:d1:ca:d0:f1:
40:96:22:b0:7a:e6:c8:7d:13:ce:ec:83:20:8b:16:27:a9:20:
b5:88:43:3b:3e:27:15:3f:dd:50:5c:47:e7:8e:64:0b:ea:7b:
20:0b:4c:ee:4f:ba:eb:af:3b:27:54:13:03:0c:f9:b1:e4:53:
dd:80:33:30:98:7b:45:d6:5c:5f:d4:41:54:26:2e:75:97:ed:
9e:b6:e5:30:11:18:e1:9e:70:87:92:80:77:52:87:86:0b:ad:
df:62:e1:5a:c2:5d:ad:37:54:33:36:58:94:9d:0c:11:be:60:
df:70:75:6a:8e:55:51:18:2f:ec:cb:ee:94:3b:06:23:d1:5e:
bf:34:16:4b:3f:c9:28:8b:f7:6e:42:36:0a:e3:0e:2c:6b:a6:
af:db:11:26:37:80:c1:44:a8:2f:42:dd:fa:52:1c:61:ed:19:
ab:4e:54:b5:7f:50:31:cf:af:a6:23:d7:9d:44:b6:db:81:b7:
5d:ee:ab:0c:5a:1b:4f:7c:08:42:ce:c1:94:79:85:89:8e:87:
6d:83:d4:df:0b:0c:c4:c2:dc:b5:84:14:ee:7d:9a:ba:f4:33:
69:8e:0b:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVGMDcxMTAvBgNVBAUTKDM3MzhGRjNDNUJBRjE5MTE4MkVCQTE0Qjc4Qzg0OEE1
QUVGQTRDQUEwHhcNMjYwMzI3MDU1NTE4WhcNMjYwNDAzMDU1NTE4WjAYMRYwFAYD
VQQDEw02OWM2MWJjNy03YTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6RnX15/3Z9nmPS9W3lnclcYn+Vnn9e2aNnZNaezd2dOI7owCjfjiL88UDynS
oyhEGQtVsN76X5/KqaBQ/mOBjzoGB4ADf+4WrtK2M8KK8OXHPiWMK/HkMjX+qaR5
ztEOPawBda+kl2eKWSBg2O9bKdM/F68px7b+nR3srfh+I+DUb7TRGPyq+fehJDt1
l9axxC46/enHx/M9x+J/y+zuCg2XTKynrfjllrFDNQMjfJhmO4lERJztbReuwJK9
1NQKrvZH2junrV7bv/4mAXvyZqFzNSUJ/y2FaE60PjjPPU3CAV80jewgl8z7iIoz
Se/E+oGglqIBsDUL02lIjvM5/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPprgPNW
DF2OI590eO8Gp+wa6R5OMB8GA1UdIwQYMBaAFDc4/zxbrxkRguuhS3jISKWu+kyq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8zNzM3QTJCQ0Mz
NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdSR0M2NkZMZU1oSXBhNzZU
S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRLby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUYwNy8zNzM3QTJCQ0MzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdS
R0M2NkZMZU1oSXBhNzZUS28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIR2qWvcgYplL6B3EOqBVypXeqWQ13jzML0wApBhPNdXRytDxQJYisHrmyH0T
zuyDIIsWJ6kgtYhDOz4nFT/dUFxH545kC+p7IAtM7k+66687J1QTAwz5seRT3YAz
MJh7RdZcX9RBVCYudZftnrblMBEY4Z5wh5KAd1KHhgut32LhWsJdrTdUMzZYlJ0M
Eb5g33B1ao5VURgv7MvulDsGI9FevzQWSz/JKIv3bkI2CuMOLGumr9sRJjeAwUSo
L0Ld+lIcYe0Zq05UtX9QMc+vpiPXnUS224G3Xe6rDFobT3wIQs7BlHmFiY6HbYPU
3wsMxMLctYQU7n2auvQzaY4LAg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:19 2026 by rpki-client