
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json)
Hash identifier: 3OaQzRiuBFHCTJTJLGQle0kpGhsqd9JYoI6sJib7hp8=
Subject key identifier: 39:1C:5E:6B:7F:22:CA:05:B6:05:47:24:5E:67:D9:CE:82:17:9A:48
Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Certificate serial: 161C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
Manifest number: 1613
Signing time: Thu 26 Mar 2026 16:41:46 +0000
Manifest this update: Thu 26 Mar 2026 16:41:46 +0000
Manifest next update: Thu 02 Apr 2026 16:41:46 +0000
Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: Rsgb3lPjrT59geVu82/kEJiZSpI+NosUT+8G23AjtNo=)
2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: 8xUrdUhoqiEQtEMVlp3eU8zsGPwNwBU0y12jksKJnIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5660 (0x161c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Validity
Not Before: Mar 26 16:41:46 2026 GMT
Not After : Apr 2 16:41:46 2026 GMT
Subject: CN=69c561ca-b2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:f1:80:f9:20:7c:b7:f0:4f:6c:f2:38:a5:
f5:87:40:ab:1d:2b:1b:ab:06:c8:1e:b7:12:de:40:
35:82:75:a2:5d:42:58:d9:a2:d8:27:a3:1b:a2:ba:
6d:e4:52:59:09:8c:59:a7:22:c0:31:57:16:b0:d0:
ad:6c:0e:2a:07:4b:64:5e:f3:22:38:ca:73:e6:84:
36:ff:56:75:dd:49:cb:2a:1a:9e:73:f1:de:c2:16:
30:ab:da:2f:00:66:af:60:3f:5e:8d:6e:73:f8:8e:
12:d5:ec:0d:4c:b3:9a:7d:75:2c:41:5b:dc:e1:19:
e6:e2:91:7f:fd:a5:56:a8:4e:6c:77:1f:8b:2d:f0:
10:2f:83:c9:f5:55:f9:06:7b:fd:59:9b:52:77:85:
29:17:29:af:f8:81:25:f6:dc:99:00:b5:56:c4:0e:
21:a9:64:01:dd:74:4b:ef:91:f8:66:70:d3:06:29:
2b:e8:b8:94:cc:92:b3:20:c2:02:88:a7:e6:57:5c:
a8:7f:8d:a3:19:6b:01:0a:31:c2:66:b1:86:fa:4f:
b2:44:dc:1f:99:85:a5:2f:60:d6:56:dc:2c:6c:5d:
d9:34:84:e8:bd:44:60:b8:75:4a:d2:d9:55:74:fb:
13:de:fe:af:90:e5:6c:9e:74:b9:59:80:79:b0:42:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1C:5E:6B:7F:22:CA:05:B6:05:47:24:5E:67:D9:CE:82:17:9A:48
X509v3 Authority Key Identifier:
keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5c:98:80:01:f3:02:95:80:f0:d7:d6:bd:ee:98:10:90:f7:
88:a6:71:36:16:f2:63:b6:a5:e0:c6:d4:c2:6a:1e:50:28:d3:
4e:7f:d5:a2:8a:1a:c4:5f:c5:e8:38:e6:64:76:00:30:96:4a:
65:bd:5f:6c:d7:73:03:7f:e5:d2:5f:a4:f0:f0:2d:44:c2:b4:
2c:62:3c:0b:a1:d5:56:2a:58:51:6c:96:39:7e:86:2e:c0:97:
22:15:38:5a:06:98:5c:8d:01:1c:37:8d:ca:a9:84:98:29:a4:
be:54:25:ca:e6:54:46:d0:b3:45:ad:59:8f:fc:e9:11:a1:dc:
ba:6c:49:28:4e:ab:b9:b3:20:87:9e:40:64:be:b6:ac:ed:d7:
db:d3:7f:c6:93:6c:5f:8a:bc:1c:fb:6e:c2:c6:d8:11:8c:84:
b2:e2:4b:e4:14:c0:02:dc:63:86:34:d4:f3:43:93:56:08:f4:
dc:54:24:35:7d:42:dc:c3:fe:35:f3:42:20:10:77:f7:d4:cd:
f3:2f:80:a1:67:86:22:d3:18:b9:c7:9b:14:7b:9a:98:db:b3:
90:d0:06:3a:4b:e6:34:87:d2:f6:7b:5d:82:4b:7e:a9:bf:35:
8a:e5:c2:9c:71:df:e4:00:93:7d:c6:6d:33:a6:53:75:33:2b:
8e:f5:15:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF
QUVGNUM5NTAwHhcNMjYwMzI2MTY0MTQ2WhcNMjYwNDAyMTY0MTQ2WjAYMRYwFAYD
VQQDEw02OWM1NjFjYS1iMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnnzxgPkgfLfwT2zyOKX1h0CrHSsbqwbIHrcS3kA1gnWiXUJY2aLYJ6Mborpt
5FJZCYxZpyLAMVcWsNCtbA4qB0tkXvMiOMpz5oQ2/1Z13UnLKhqec/HewhYwq9ov
AGavYD9ejW5z+I4S1ewNTLOafXUsQVvc4Rnm4pF//aVWqE5sdx+LLfAQL4PJ9VX5
Bnv9WZtSd4UpFymv+IEl9tyZALVWxA4hqWQB3XRL75H4ZnDTBikr6LiUzJKzIMIC
iKfmV1yof42jGWsBCjHCZrGG+k+yRNwfmYWlL2DWVtwsbF3ZNITovURguHVK0tlV
dPsT3v6vkOVsnnS5WYB5sEJFPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkcXmt/
IsoFtgVHJF5n2c6CF5pIMB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2
MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5
VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4
SkJBdWhTZnBCOF9xNzF5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK1yYgAHzApWA8NfWve6YEJD3iKZxNhbyY7al4MbUwmoeUCjTTn/VoooaxF/F
6DjmZHYAMJZKZb1fbNdzA3/l0l+k8PAtRMK0LGI8C6HVVipYUWyWOX6GLsCXIhU4
WgaYXI0BHDeNyqmEmCmkvlQlyuZURtCzRa1Zj/zpEaHcumxJKE6rubMgh55AZL62
rO3X29N/xpNsX4q8HPtuwsbYEYyEsuJL5BTAAtxjhjTU80OTVgj03FQkNX1C3MP+
NfNCIBB399TN8y+AoWeGItMYucebFHuamNuzkNAGOkvmNIfS9ntdgkt+qb81iuXC
nHHf5ACTfcZtM6ZTdTMrjvUVHw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:41 2026 by rpki-client