
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json)
Hash identifier: J653vOP2WePPeYZvrVzPIGPUCeUDCybJiRDpptYwTes=
Subject key identifier: ED:F7:C6:B2:B6:74:41:10:C8:76:E9:92:CC:63:EC:3F:91:92:57:4A
Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
Manifest number: 0192
Signing time: Fri 27 Mar 2026 03:51:35 +0000
Manifest this update: Fri 27 Mar 2026 03:51:35 +0000
Manifest next update: Fri 03 Apr 2026 03:51:35 +0000
Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: a/hsqMFmLrkc3ZOjeGnEgwnNouyetVi/qe7SEFtYQLo=)
2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: GLrzVbO/eZPffRoT3cGz+iLpJergigCKe+VSGEBiwVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Validity
Not Before: Mar 27 03:51:35 2026 GMT
Not After : Apr 3 03:51:35 2026 GMT
Subject: CN=69c5fec7-4321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:41:88:5a:05:ec:63:a9:31:76:0d:c6:b7:6d:
80:c3:b8:05:d3:38:15:91:3d:51:83:c5:c3:ea:a1:
8b:09:6d:d0:94:10:e9:aa:b1:93:64:01:cd:b6:75:
a1:14:86:c1:92:97:e8:aa:15:a5:b6:0d:c7:d1:d2:
d4:13:37:c6:14:b0:0e:e1:05:5b:d7:f2:88:fc:d7:
08:ec:47:b1:95:3b:12:87:8c:59:d8:97:e8:42:ee:
e9:9f:2d:50:bc:8e:f4:ef:de:12:49:4c:aa:e5:83:
86:0b:77:f3:e5:eb:51:62:a3:32:b2:0d:de:4b:13:
b5:38:87:dc:94:8b:1c:30:01:2c:10:26:0f:19:c7:
4a:dd:19:f5:35:0c:37:1a:6b:a6:48:9b:17:2e:a3:
e9:41:32:dc:b3:cd:be:39:31:2d:cb:2d:c8:46:21:
e1:c0:bc:ae:ed:b3:51:d4:c1:a6:55:c3:55:03:bd:
1d:2c:cb:d9:1b:bd:5c:87:40:ac:2a:00:3a:3a:e6:
c2:4c:dc:23:34:95:cb:96:24:7e:71:4c:ff:26:53:
00:6c:d9:9b:3b:ea:0c:1b:03:1e:70:52:17:98:40:
c8:2b:bf:91:47:b6:d8:ee:f2:a9:eb:3f:40:db:20:
84:89:dd:e0:7b:91:6b:a6:6c:88:43:31:14:31:6a:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:C6:B2:B6:74:41:10:C8:76:E9:92:CC:63:EC:3F:91:92:57:4A
X509v3 Authority Key Identifier:
keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0a:2c:d0:d5:fe:84:76:75:2a:2f:e0:a1:54:4b:26:d2:ac:
6e:b3:6f:c0:a4:6c:29:a2:a9:96:14:c8:b3:a6:13:ad:79:5f:
54:17:99:37:36:e2:a2:46:1f:98:0c:09:fd:14:99:29:cd:0d:
65:ce:9b:cd:c4:5b:22:24:e7:f0:f3:c8:de:1c:0a:0b:63:bc:
57:e5:5f:cf:3e:90:a9:b5:ad:4d:00:14:db:79:94:2d:64:c5:
08:8a:ed:91:ec:60:7b:b4:78:45:32:9c:ad:09:d7:3c:49:46:
3d:05:37:86:bb:68:3a:4d:a2:b8:45:e8:24:c2:e9:6f:f0:cf:
c5:5f:0c:e8:fb:38:7e:8d:71:ba:53:d3:36:7f:36:ff:60:69:
d0:e2:38:d2:01:ba:6c:a7:cf:c8:18:29:9f:ac:05:70:80:2a:
3d:c7:5e:f0:db:9f:5e:5a:64:15:2c:e0:84:65:6d:89:5c:76:
62:a9:57:d2:cd:65:68:98:d9:8c:1c:21:56:52:36:8a:01:86:
2b:27:88:3d:bd:03:b3:67:29:31:fd:b0:55:ea:9e:f3:52:c7:
2d:15:aa:aa:33:88:f1:53:10:0b:c5:8e:54:d2:61:7e:1f:0e:
f2:3b:5c:9a:2d:3e:ba:a0:d8:bc:36:01:c6:ee:00:6f:84:f1:
0f:2b:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:46:35 2026 by rpki-client