
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json)
Hash identifier: rIRVcwcPjQp7sLtTNVZUrLGHMVWlxQRovj1yzNxWrBI=
Subject key identifier: B8:9B:91:74:18:8E:BA:2A:E0:B6:74:91:E7:7C:A9:86:04:86:64:ED
Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
Manifest number: E2
Signing time: Fri 17 Apr 2026 06:16:11 +0000
Manifest this update: Fri 17 Apr 2026 06:16:11 +0000
Manifest next update: Fri 24 Apr 2026 06:16:11 +0000
Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: Qu4NNOMCIz5MIcAwL8PkO35cCl4o60se7+OohQvmxwk=)
2: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: ILjG6j0hahE7eMi9C3vJ2iRVu5oKmSFIClvho3Bi50s=)
3: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: 1dR8cu3JeKWiVz0aJKgDN3j35TtK4bIh995eeCzg8so=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Validity
Not Before: Apr 17 06:16:11 2026 GMT
Not After : Apr 24 06:16:11 2026 GMT
Subject: CN=69e1d02b-9d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:68:46:f7:07:a4:3a:9c:0f:ed:bc:d8:74:
b9:ea:3c:7c:43:0b:f1:2f:d8:67:5a:7c:20:ac:46:
7f:a9:50:f2:5a:14:aa:b8:d8:39:8b:f8:12:51:23:
39:7a:13:93:e8:6a:bf:40:d2:ae:6b:87:b2:75:83:
5b:3a:ee:3a:93:05:0a:5e:87:33:46:c3:62:f6:ac:
b3:b9:75:38:22:cb:a9:21:b2:f8:bf:86:01:cb:07:
48:70:a7:1d:8f:ec:97:b8:4f:f3:af:1d:88:5b:87:
35:d5:44:af:9e:7d:28:0a:3f:b3:32:c6:fe:e7:11:
ee:e8:3b:21:6d:a4:8d:b8:ec:2f:49:25:12:c5:35:
c8:de:37:af:3c:15:d4:08:4a:96:d5:26:06:79:a0:
a1:27:00:85:17:21:03:ef:d1:a3:e1:1b:6c:cc:7d:
5d:1d:62:2f:a3:da:4e:42:d6:de:de:ff:55:79:b4:
60:00:6c:e8:f7:15:2f:5d:18:ac:29:c3:4b:e1:40:
0f:40:00:5c:27:9e:23:1b:7b:33:73:0c:b8:e1:f8:
15:b7:65:ad:2a:e3:9d:99:c1:38:88:f2:c8:36:f7:
0c:3a:e7:3a:71:7b:66:13:4e:f3:07:56:bc:d7:64:
96:09:22:c3:0b:33:c5:a8:61:2f:58:af:34:ec:c2:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:91:74:18:8E:BA:2A:E0:B6:74:91:E7:7C:A9:86:04:86:64:ED
X509v3 Authority Key Identifier:
keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:55:40:a8:9f:54:43:35:2d:68:e9:03:d3:d4:3a:3d:81:e8:
d6:8f:7c:6c:3c:ca:26:8b:08:30:dd:1b:e3:59:0b:f8:0e:90:
cb:97:f5:f5:44:e4:af:6e:74:ef:bb:ae:60:7d:2c:e6:bd:f4:
2f:27:fc:17:18:0c:21:57:89:e2:dc:3d:20:36:68:b1:93:64:
87:c4:27:ce:19:9f:f7:e7:4b:95:bc:53:a4:3c:f8:45:1e:41:
21:3e:f4:1b:bd:a6:d2:38:75:3f:99:9c:9e:24:41:8e:41:07:
09:23:3b:c2:58:5a:06:cb:1d:7d:af:42:02:a9:fe:88:62:62:
0c:06:ac:ef:fe:83:a2:e1:48:43:0c:5e:6f:9c:38:d8:ac:5a:
cb:cf:bc:17:51:c9:08:55:8e:ba:73:9e:4c:76:ea:42:aa:9b:
df:e7:5a:3b:ac:92:45:3d:0f:58:a5:ab:e9:75:8e:d8:93:af:
37:77:6c:81:c0:0f:c5:c3:ff:01:ae:60:5e:37:a9:14:de:f6:
69:b5:f4:86:cb:97:7f:4b:af:16:0d:99:e5:a5:4b:22:b8:cb:
56:fc:f3:c0:9e:2e:c2:0b:af:48:0e:a8:a3:ac:93:88:7a:84:
e4:cd:5f:ba:4b:c7:78:37:a8:39:f8:51:7c:f0:c5:17:e7:65:
f2:57:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:17:51 2026 by rpki-client