
$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json)
Hash identifier: YPdE4oeRkRt4uA3m+CCX55/Kdz1QF3wQ2KSRr4Bm1pE=
Subject key identifier: 05:23:E3:D6:2A:4F:43:72:14:68:16:86:DC:0E:81:85:FD:2F:E4:A2
Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Certificate serial: 24EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
Manifest number: 24DC
Signing time: Thu 16 Apr 2026 15:44:13 +0000
Manifest this update: Thu 16 Apr 2026 15:44:13 +0000
Manifest next update: Thu 23 Apr 2026 15:44:13 +0000
Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: WanMRaPKwFTt+/BAV7A/DN2cHc5cp+E6cP3RY8Uefa8=)
2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: 0nVh716qMxf5T71PANX2QzmNBRMbCGmc3vAqRWcki7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9454 (0x24ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Validity
Not Before: Apr 16 15:44:13 2026 GMT
Not After : Apr 23 15:44:13 2026 GMT
Subject: CN=69e103cd-2218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:bd:54:73:73:b7:0b:e7:bc:9d:f2:c6:27:
48:d7:5a:e3:5e:17:98:3a:e0:d1:28:1d:85:05:91:
e6:6b:e3:33:18:ae:e9:f9:6d:22:5e:b8:18:0f:3c:
ce:80:33:34:38:6f:3a:57:6e:2a:cf:26:7a:49:27:
35:05:7d:15:c1:77:82:c2:2a:5b:39:e2:f5:1d:a8:
31:6b:0b:c1:0c:62:78:9c:fd:7a:23:01:95:bc:eb:
b0:05:c2:55:1c:c7:9e:42:cc:6f:78:19:1b:36:9d:
6d:eb:6a:f0:60:5d:47:d0:ba:39:5b:0b:cf:5d:66:
bb:94:0c:74:d2:ac:7d:a9:41:ee:09:bb:d3:12:26:
ba:da:0a:ad:19:20:be:06:ec:ff:fd:e2:12:63:25:
ec:80:75:9d:0b:69:4a:b3:38:60:2f:9a:ef:5e:e3:
51:ea:34:42:ca:f9:79:89:9e:f1:70:22:f8:57:6b:
51:68:7e:e9:d7:47:81:ce:24:4b:6b:47:a3:65:ad:
4a:21:50:90:ea:31:ae:2b:80:e9:e2:b3:06:79:07:
8e:70:fe:a7:f2:ea:4c:56:26:9c:e1:fb:2f:ea:79:
66:c3:ee:80:08:fb:d3:26:03:bc:c6:6d:47:12:9a:
02:dd:63:a4:58:f5:bc:b6:23:7e:d8:59:06:23:4c:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:23:E3:D6:2A:4F:43:72:14:68:16:86:DC:0E:81:85:FD:2F:E4:A2
X509v3 Authority Key Identifier:
keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c4:fb:3f:29:07:5c:64:d2:63:20:ff:75:04:2c:18:d2:26:
f4:57:eb:ab:55:9e:0c:b9:bc:77:f9:9b:84:5f:f5:19:4b:9a:
6b:4a:ff:4c:de:ba:28:b0:82:de:3a:8b:95:04:72:4f:93:e2:
92:09:da:92:7f:b6:79:85:bc:7a:ad:fb:9c:d3:be:dd:b8:35:
97:d9:07:da:37:ca:66:33:40:ab:37:26:16:32:25:29:ce:37:
92:08:f0:00:4f:8f:59:fa:a1:6b:8b:82:1a:76:70:84:95:e1:
1f:35:89:3d:bb:e1:dc:63:1c:cd:ec:01:5b:e5:b6:70:ff:42:
77:ac:83:1d:90:81:e9:c8:f4:43:b9:fd:db:4e:0c:c7:50:82:
5d:5e:a8:75:b0:a6:32:d9:9e:23:49:6a:18:8b:79:e9:5d:94:
f8:f0:2b:a0:5f:85:45:60:6c:fb:35:a1:61:5f:31:a8:6d:9a:
3a:3d:4f:33:99:45:95:b9:c6:81:0b:0d:d1:38:8b:23:b0:70:
f5:8e:62:09:11:16:74:7e:8e:b9:3c:76:49:b8:b3:89:df:d6:
85:13:17:48:a7:4e:94:1f:77:f0:d2:e7:1c:a1:c8:b4:c1:7b:
da:03:41:b6:f7:89:da:4d:9d:d1:a0:23:6e:f5:44:cd:79:56:
03:cc:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:37 2026 by rpki-client