
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
File: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft (raw, json)
Hash identifier: hFs8FneqfqukwOEtKzuEXsD2Z7huzRyN2yyvTBm4Zzs=
Subject key identifier: 65:D8:FE:70:83:BE:4A:E2:5F:FC:B8:EE:4D:B7:CC:93:8D:FA:D7:3A
Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7
Certificate issuer: /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
Certificate serial: 04D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
Manifest number: 04C7
Signing time: Thu 26 Mar 2026 23:43:05 +0000
Manifest this update: Thu 26 Mar 2026 23:43:04 +0000
Manifest next update: Thu 02 Apr 2026 23:43:04 +0000
Files and hashes: 1: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl (hash: W44DO1InrwnigNS+c/2C8F79cjkQIwShg3OMgqaOa5I=)
2: 3A6B56D0E03411EF9FB2E824C4F9AE02.roa (hash: v0/CEXlWXi0crMBA1tUEdN8IIRUJpRoMJCs1U/BmKCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl
rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D4BE, serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
Validity
Not Before: Mar 26 23:43:04 2026 GMT
Not After : Apr 2 23:43:04 2026 GMT
Subject: CN=69c5c489-5a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:12:91:5f:2e:bf:a5:58:eb:06:ce:05:8c:
80:bf:87:47:a1:64:f2:93:1a:e0:3a:12:08:75:b5:
c8:33:c1:30:16:42:5d:b6:23:d4:94:0e:14:a8:81:
ce:ec:fc:75:e1:22:e1:57:c0:7e:86:72:ad:50:8e:
07:b2:74:8a:2b:cb:42:f3:f1:36:58:c4:84:a8:54:
20:ab:6b:fe:e7:f5:65:8c:1c:9e:fc:6f:16:74:c0:
3d:98:59:e3:54:c8:04:18:d6:2f:01:67:b1:e0:a7:
68:78:c8:c8:23:44:c4:bf:f7:4e:15:32:84:10:19:
ed:ca:0c:e9:3c:d7:4f:b3:6f:f9:17:ea:c4:3c:c0:
38:b5:48:05:37:a8:29:14:d7:3e:8f:89:8c:ca:f8:
86:f6:9b:0d:e7:ef:b4:3f:5a:0e:47:35:51:cc:f5:
66:33:d8:7d:fc:8d:06:84:1f:bc:d8:27:d0:bd:65:
7b:92:05:96:a5:a3:09:78:8b:5e:fb:1a:23:10:5a:
36:9d:82:d7:63:e7:fe:1d:5a:f9:44:ee:ed:b9:cf:
d2:26:4b:48:ba:78:44:01:70:50:60:fd:83:65:8e:
c1:bf:8a:df:fc:b4:06:d6:e3:c1:50:7f:57:ee:d2:
ad:7f:8b:af:39:da:6c:70:1a:42:3c:9d:86:65:64:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D8:FE:70:83:BE:4A:E2:5F:FC:B8:EE:4D:B7:CC:93:8D:FA:D7:3A
X509v3 Authority Key Identifier:
keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:97:06:77:a5:86:8f:a8:f4:d5:c8:59:9a:09:68:0f:a2:a8:
a9:15:45:f8:de:c9:b3:01:a9:c9:65:b2:84:e2:4e:d0:68:ed:
07:92:18:85:de:e1:de:93:e5:96:c9:11:e7:be:16:59:d0:a4:
7a:46:55:d3:fc:f9:ed:b1:79:9f:54:fb:2a:77:5d:a4:e1:b4:
00:f0:f9:27:7b:9b:b8:97:7a:91:67:59:4b:56:e0:64:2b:6d:
0d:8b:94:f3:a4:f2:c5:d9:0f:f2:75:5d:72:a9:4e:28:36:51:
80:9c:84:20:75:ae:da:0b:86:c4:0d:c2:f2:44:9f:c7:a3:13:
9b:a5:78:5f:82:07:42:ee:d3:9f:2c:9b:19:f6:b9:52:85:b5:
38:4e:91:66:11:cf:39:fc:54:51:76:15:da:94:7c:60:cd:f0:
68:d6:09:51:aa:a4:d5:06:2f:fa:06:b3:ab:42:67:ee:ea:63:
11:4c:c8:f6:57:4f:32:91:67:9f:22:c5:31:fc:d2:14:7c:cd:
a6:4e:c6:f3:2f:e4:ff:0f:57:13:e4:44:98:bc:66:a0:e7:b4:
66:ed:d9:78:47:29:c2:b1:0a:5f:3e:39:ac:31:e8:c8:1f:c9:
1a:47:6e:74:21:82:2f:58:ea:a3:5b:35:1f:0c:c1:9e:5f:23:
c9:6a:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:21 2026 by rpki-client