
$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json)
Hash identifier: wQaSwCUH9RWiZvu0LdKOsNDXjQ/7oZg3XkZk7OBzM5I=
Subject key identifier: 46:CA:18:A0:2B:49:73:FC:AD:51:65:7B:B1:71:63:2F:E3:C8:F2:99
Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Certificate serial: 24D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
Manifest number: 24C4
Signing time: Mon 02 Mar 2026 00:39:29 +0000
Manifest this update: Mon 02 Mar 2026 00:39:29 +0000
Manifest next update: Mon 09 Mar 2026 00:39:29 +0000
Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: ge2lGYKfVvnwAIGrqyUIU1IbbgOgOk92EpvQxoWCImE=)
2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: 0nVh716qMxf5T71PANX2QzmNBRMbCGmc3vAqRWcki7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9430 (0x24d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Validity
Not Before: Mar 2 00:39:29 2026 GMT
Not After : Mar 9 00:39:29 2026 GMT
Subject: CN=69a4dc41-1bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:29:7f:85:da:06:96:d6:4b:17:10:2a:c3:
13:71:30:13:b9:9f:fd:ad:7d:f0:c9:4a:39:43:51:
15:c6:87:78:5c:68:12:f9:42:5f:49:ce:d3:6e:1f:
d2:c2:0f:3a:e7:41:74:f0:73:ec:7b:0f:e7:62:16:
79:c9:56:ea:9b:c2:b1:ab:7c:5b:b0:fc:7b:8a:8f:
1d:7c:a5:08:5a:e0:8a:be:5a:18:8c:7a:1d:8a:81:
49:b9:63:c8:1f:6b:06:c9:b6:3f:2b:3e:27:de:09:
ff:4f:c9:e2:3f:09:1e:50:f4:b4:d9:c2:21:26:ce:
e5:63:93:20:55:b5:35:07:96:c7:38:15:1c:63:02:
3b:d0:35:fe:ca:dc:4f:8e:a9:53:ac:ac:a1:00:7b:
5b:b5:ff:b5:f0:41:14:63:e9:f7:88:5e:ac:01:94:
0a:7d:94:87:30:65:88:a8:67:04:e5:eb:e7:0a:93:
57:e6:84:82:c1:af:4e:33:d2:42:da:53:da:9d:8b:
d0:96:a9:3e:e4:d5:e2:49:15:e8:16:29:c3:cf:1a:
1c:df:57:ca:20:70:08:0e:76:c4:f3:e7:ed:7f:69:
58:f2:9d:c6:1c:08:a7:41:26:83:bc:17:8c:6b:d1:
31:7b:15:a6:8b:70:cf:d3:ab:b2:af:0f:f3:b9:d8:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CA:18:A0:2B:49:73:FC:AD:51:65:7B:B1:71:63:2F:E3:C8:F2:99
X509v3 Authority Key Identifier:
keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5f:3b:0d:af:7d:26:75:36:87:f1:23:29:8d:bf:d2:11:58:
72:79:01:9d:34:ea:6e:81:fc:b3:2d:fc:73:c6:96:37:53:d5:
22:aa:59:cc:d6:b2:80:7b:06:f3:30:95:19:2a:e9:36:1f:45:
45:6c:56:60:87:f5:ce:02:d4:5f:57:f8:ea:7d:1c:62:c4:a9:
4b:06:00:25:f1:50:2d:06:e9:f8:bd:cf:70:43:6a:6f:f9:ee:
b3:7a:7a:6c:69:a8:de:7c:c2:47:e9:10:a2:91:cb:7d:7b:41:
57:62:8e:c1:9a:43:37:c7:c8:e9:79:71:48:40:36:49:ed:63:
78:e3:e5:6d:cd:ee:92:52:74:d9:92:24:d5:cd:04:24:21:22:
54:38:a1:e8:f3:e8:1b:a1:4e:33:c9:c6:30:b2:51:7c:45:de:
3b:23:56:28:69:29:33:7e:42:07:b7:bd:74:c0:fe:25:ac:66:
a7:bd:64:83:08:5e:ec:37:bf:8b:02:de:c5:35:7a:a9:ce:06:
69:c3:dc:68:bd:3e:d9:86:16:38:56:41:3d:83:ff:45:3a:ca:
5a:33:43:f9:fa:5f:93:9a:ba:13:bb:8c:8e:cb:33:0c:72:97:
6f:5b:fa:8d:cf:ac:f9:b0:b5:77:95:1c:3c:80:4b:b2:72:64:
9e:0e:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:29 2026 by rpki-client