
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
File: PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json)
Hash identifier: ROD0vceANceoIqQySfAqSVL8Z3nl44O7L3dZyeSRAOI=
Subject key identifier: 53:D1:8C:DB:0B:3D:0C:7C:0A:2B:62:E2:F5:B8:6D:21:A9:AE:A1:4D
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial: 05CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
Manifest number: 05C4
Signing time: Tue 24 Mar 2026 22:46:32 +0000
Manifest this update: Tue 24 Mar 2026 22:46:32 +0000
Manifest next update: Tue 31 Mar 2026 22:46:32 +0000
Files and hashes: 1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: PQAu9NnyeJabwb735ja/hhOCcLRdB973RabjiXx1wvg=)
2: EC7B7E82DFD811F08F00FF64536F56BC.roa (hash: zSiOywbWl0k4o+BoXRQ/u23ZyXMyZjEaX4/Qt8amiLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1484 (0x5cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Validity
Not Before: Mar 24 22:46:32 2026 GMT
Not After : Mar 31 22:46:32 2026 GMT
Subject: CN=69c31448-6ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:a1:f1:4d:61:31:cb:69:2c:50:a2:74:7b:
40:c8:75:a2:d4:c9:69:44:b6:3f:00:09:e3:54:cd:
f4:5d:85:84:01:32:19:48:99:69:6e:82:59:01:4b:
ec:8c:51:0d:3a:39:ff:9f:7c:6e:87:2c:87:71:71:
4c:8f:60:bd:9d:91:aa:01:89:11:69:4a:4f:9f:9f:
64:fa:d5:3d:52:d7:4b:9c:35:14:00:c6:63:5f:b4:
45:1f:70:08:bd:17:0e:01:53:5e:74:0b:1b:5e:3c:
37:7b:3b:d9:c4:1e:3a:ff:8c:b1:c9:2b:4f:5b:03:
88:b7:33:48:41:3e:a0:f9:90:06:80:1a:b6:c6:43:
66:d8:dd:05:35:b1:b0:df:64:6f:20:09:d4:79:f2:
17:b0:21:3a:55:40:b1:1d:8c:36:06:25:6c:8e:e0:
88:b5:c5:98:06:12:6a:4b:34:b2:b8:97:9c:5c:3f:
a0:a5:fc:4d:19:94:d0:10:7c:fc:8e:c1:8c:d7:d9:
a0:f7:f9:9b:43:6e:ae:59:5a:dc:70:05:1c:90:af:
06:20:19:36:f8:73:46:9a:92:6a:d2:f7:ed:96:26:
70:a5:9d:31:e9:09:c4:12:71:49:77:8b:cd:16:43:
4c:34:6a:e6:fa:c0:78:cb:e1:f1:bd:bb:b9:ed:a5:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D1:8C:DB:0B:3D:0C:7C:0A:2B:62:E2:F5:B8:6D:21:A9:AE:A1:4D
X509v3 Authority Key Identifier:
keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3d:66:42:d5:cd:c1:b6:cf:7d:35:9a:3b:02:69:4a:93:fb:
69:ea:ad:d6:72:2a:e9:cf:2c:dc:6e:3c:2f:a5:7e:00:62:76:
d7:75:65:ce:83:02:30:6b:33:84:2f:bc:d6:92:41:9d:99:a7:
bb:f6:9c:df:d0:92:9f:e9:b5:88:52:e4:67:f7:77:ed:9b:0c:
8e:7e:22:7c:df:f5:a1:f8:30:3c:9f:ea:dd:5e:d0:7e:1d:ff:
b0:53:65:85:4c:cf:bb:26:90:e2:36:df:61:a5:f6:1c:c7:8d:
63:19:04:b6:8c:d1:f2:67:fe:fe:bd:1c:55:4d:62:49:a1:b5:
bc:ec:43:49:32:c7:fd:4b:c3:b3:c7:94:68:63:28:c2:de:f6:
5c:e0:af:47:8d:28:29:8b:3b:c6:61:41:46:c8:3f:ed:ca:4f:
30:0e:f2:84:44:90:9b:4b:ab:d5:c2:3b:e5:aa:40:ed:52:d4:
b0:65:3f:17:28:a1:e9:7b:4b:0a:62:39:2a:c6:ba:cd:42:ca:
26:b5:b3:18:ac:9b:2f:24:bf:62:59:12:5d:17:82:9d:f8:bc:
31:34:97:b9:a1:87:82:35:00:0e:91:c1:78:d5:9b:59:77:62:
e4:ba:cb:bb:2f:c1:2c:11:a4:21:02:bd:48:59:7d:84:1f:37:
60:0c:e4:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M4MUMxMTAvBgNVBAUTKDNGM0IyRjVCM0JBRTUyQTZCNTY5MkNBRjkyQTI1NTRC
MDZEQTg2M0QwHhcNMjYwMzI0MjI0NjMyWhcNMjYwMzMxMjI0NjMyWjAYMRYwFAYD
VQQDEw02OWMzMTQ0OC02ZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+Sh8U1hMctpLFCidHtAyHWi1MlpRLY/AAnjVM30XYWEATIZSJlpboJZAUvs
jFENOjn/n3xuhyyHcXFMj2C9nZGqAYkRaUpPn59k+tU9UtdLnDUUAMZjX7RFH3AI
vRcOAVNedAsbXjw3ezvZxB46/4yxyStPWwOItzNIQT6g+ZAGgBq2xkNm2N0FNbGw
32RvIAnUefIXsCE6VUCxHYw2BiVsjuCItcWYBhJqSzSyuJecXD+gpfxNGZTQEHz8
jsGM19mg9/mbQ26uWVrccAUckK8GIBk2+HNGmpJq0vftliZwpZ0x6QnEEnFJd4vN
FkNMNGrm+sB4y+Hxvbu57aXaiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPRjNsL
PQx8Citi4vW4bSGprqFNMB8GA1UdIwQYMBaAFD87L1s7rlKmtWksr5KiVUsG2oY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzgxQy9EMTlBRUUzRUZG
MTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVxYTFhU3l2a3FKVlN3YmFo
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B6c3ZXenV1VXFhMWFTeXZrcUpWU3diYWhqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzgxQy9EMTlBRUUzRUZGMTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVx
YTFhU3l2a3FKVlN3YmFoajAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOj1mQtXNwbbPfTWaOwJpSpP7aeqt1nIq6c8s3G48L6V+AGJ213VlzoMCMGsz
hC+81pJBnZmnu/ac39CSn+m1iFLkZ/d37ZsMjn4ifN/1ofgwPJ/q3V7Qfh3/sFNl
hUzPuyaQ4jbfYaX2HMeNYxkEtozR8mf+/r0cVU1iSaG1vOxDSTLH/UvDs8eUaGMo
wt72XOCvR40oKYs7xmFBRsg/7cpPMA7yhESQm0ur1cI75apA7VLUsGU/Fyih6XtL
CmI5Ksa6zULKJrWzGKybLyS/YlkSXReCnfi8MTSXuaGHgjUADpHBeNWbWXdi5LrL
uy/BLBGkIQK9SFl9hB83YAzkLQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:19 2026 by rpki-client