
$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json)
Hash identifier: wyBFMPyMWb9u3TaZyRu4KyFXJmp573etmhvs/mmTYCs=
Subject key identifier: CC:33:62:43:79:FF:DF:59:59:30:02:00:FC:23:57:91:9C:AB:CF:5D
Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Certificate serial: 02DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
Manifest number: 02D9
Signing time: Wed 25 Mar 2026 00:59:41 +0000
Manifest this update: Wed 25 Mar 2026 00:59:41 +0000
Manifest next update: Wed 01 Apr 2026 00:59:41 +0000
Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: Pll7Q6cIOMix67E9CN+cE0tewGeLsePexwBxFkH1ECQ=)
2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: 1F4/dES4B8G+6y0a23fN5dj1uPv0aDvCIXtab2gQl5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Validity
Not Before: Mar 25 00:59:41 2026 GMT
Not After : Apr 1 00:59:41 2026 GMT
Subject: CN=69c3337d-8163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:38:bd:62:9b:04:52:ad:59:ba:1e:bf:eb:
92:a5:82:c7:58:34:76:77:12:25:18:71:95:22:8b:
fe:4d:30:da:7f:3f:63:d1:bf:4c:3d:05:93:af:b8:
45:a9:98:b9:78:bb:df:ab:52:1e:10:fd:cb:20:f5:
34:69:43:fc:75:8d:3f:7d:69:e6:53:35:86:e7:0f:
ce:9a:28:a5:7e:11:5a:b3:41:11:99:53:5c:6e:8d:
8d:5f:3e:8b:21:79:03:49:82:50:53:cc:e5:0a:70:
8f:ae:d4:01:02:92:be:85:55:89:24:b5:9c:fe:00:
5d:24:be:01:68:ad:0f:09:e4:c1:3f:81:8f:32:17:
43:55:c6:4d:79:56:71:60:2c:4d:e8:f9:7e:ca:8c:
61:0c:23:ff:f1:d4:27:7f:22:75:88:7b:a0:b5:cd:
ed:0b:f2:e1:c2:80:5e:40:79:a4:8a:52:d6:b1:ba:
32:ea:45:64:ed:d2:a3:1f:f4:ff:7d:6b:6e:4b:62:
9e:8a:87:84:1c:77:18:94:c4:25:4e:2d:c6:3d:3a:
5a:bf:23:3d:b5:9d:b2:f4:20:7f:4a:0b:ff:ce:3f:
18:1e:69:de:50:2c:bf:1c:88:9c:8c:6e:19:87:a5:
81:6a:0f:26:16:40:1b:47:96:01:25:c9:0b:3c:3a:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:62:43:79:FF:DF:59:59:30:02:00:FC:23:57:91:9C:AB:CF:5D
X509v3 Authority Key Identifier:
keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:0a:e5:37:cc:b0:ca:62:d0:13:79:4e:70:3a:96:af:12:a1:
15:3d:e4:4a:54:cf:81:dc:57:43:3b:8d:25:6c:32:a0:77:89:
fb:39:df:88:07:d4:60:70:88:15:22:79:3e:8b:50:b1:97:d6:
8d:20:d6:98:78:e8:95:84:c7:63:91:ed:68:a8:28:10:b1:14:
04:15:cf:1a:c1:b9:9a:ec:89:7c:6a:f4:e8:9e:83:d5:cb:57:
bc:e4:20:81:cd:01:c7:31:9c:61:a4:c5:bc:6f:29:71:45:13:
cf:1a:25:a7:f8:cb:d1:16:32:8b:21:b3:05:b5:38:de:c4:a2:
16:d0:5c:1b:5e:fd:ba:32:ab:aa:fc:c1:16:0a:e3:44:75:7b:
89:4c:bb:d4:e1:e6:ef:42:a9:66:ad:ee:05:40:24:7a:8c:29:
47:7f:d3:e6:d2:df:cf:9a:fa:f5:96:92:2d:9a:ea:8c:c9:73:
13:ce:01:d9:62:9b:c6:b1:8c:5b:99:e9:d3:19:3b:b4:a5:b3:
97:00:1f:a7:66:44:75:5c:ba:61:d2:42:12:21:e7:2d:25:4b:
52:1a:a6:34:fc:2a:4c:e1:da:ee:1c:de:13:1d:e4:c3:36:c7:
28:00:1f:0c:fb:22:29:cc:f3:1d:f6:73:bf:6d:af:c9:13:a0:
23:15:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:08 2026 by rpki-client