
$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json)
Hash identifier: L9PXb4gB94QlbXS/9VTOxeo6rtCd+6Aj/7VZgNbwum0=
Subject key identifier: FE:08:D1:EE:B0:0D:FA:ED:1A:CA:1A:50:66:3F:99:18:0C:DA:02:0E
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial: 02C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
Manifest number: 02C0
Signing time: Fri 17 Apr 2026 01:19:18 +0000
Manifest this update: Fri 17 Apr 2026 01:19:18 +0000
Manifest next update: Fri 24 Apr 2026 01:19:18 +0000
Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: t2gYOZJWd62wV3aQJwQzmjlrwaQCxioKT4v3XAWCpEQ=)
2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: qH4NxxqpOA2c5T+RIxBIM6trIh5aFuyiHzxc/Np3eOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Validity
Not Before: Apr 17 01:19:18 2026 GMT
Not After : Apr 24 01:19:18 2026 GMT
Subject: CN=69e18a96-abdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:2d:12:4a:e4:fc:b5:74:79:31:72:c8:48:
a4:d2:14:43:ab:3c:a7:ee:82:9a:60:37:1e:f1:23:
27:47:e2:08:16:75:d3:b9:19:4a:35:f2:25:e7:7b:
46:64:87:10:ac:eb:05:8a:7f:a3:99:fa:49:93:a2:
e5:69:3f:6f:a5:9c:17:97:6a:71:ce:a5:2f:ad:e6:
af:12:cb:cb:7f:17:43:56:52:de:7d:60:82:dc:b3:
c0:d3:1d:94:e1:3b:85:4b:16:33:13:0b:b2:f4:67:
16:f8:bc:70:2b:bf:85:96:70:13:2e:a9:aa:3a:a9:
6f:09:44:06:3f:b3:18:ca:e4:a1:d7:7a:39:6e:59:
5a:c7:23:b6:fc:53:dc:8b:a9:8b:b5:df:5a:a3:2e:
be:1c:43:12:38:49:fa:4a:09:f4:0d:06:eb:98:a2:
af:fb:70:10:44:ae:b7:63:b4:51:60:74:29:84:35:
c8:7f:b3:41:1b:01:d0:85:9e:3f:8c:02:98:d6:a6:
95:8c:c8:9c:8f:24:84:0e:34:dc:fb:d1:92:f9:b3:
8a:0f:bb:d4:90:76:8a:f0:71:ca:30:61:06:a7:09:
92:57:39:50:d1:6f:0b:d8:b8:dc:1e:f6:f9:39:28:
e7:01:09:f8:8d:08:73:2b:8c:71:7f:55:af:f6:19:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:08:D1:EE:B0:0D:FA:ED:1A:CA:1A:50:66:3F:99:18:0C:DA:02:0E
X509v3 Authority Key Identifier:
keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b6:e6:b0:d9:fd:12:78:5c:93:7c:e0:4f:a3:c2:95:c6:51:
9f:67:d8:68:ef:83:f5:96:a5:19:8a:09:9c:00:53:b3:0e:cf:
1a:4a:13:50:77:2d:93:b0:d6:51:1c:03:58:e0:a7:61:a7:ec:
fe:52:59:c7:2f:db:b2:9d:12:56:a6:9b:3d:6b:53:7d:cd:a9:
4d:1e:e4:17:53:62:6e:12:c2:93:3a:9a:50:b3:94:ae:ac:75:
24:c4:3b:f9:97:60:6c:6c:b0:1b:b1:98:8d:b1:2f:3f:7f:ce:
dc:6b:a1:03:0d:5c:19:1d:30:50:32:2e:a7:be:91:83:02:08:
42:f4:0c:60:95:50:a7:5a:29:9f:36:62:cc:a4:fd:bb:bf:fd:
64:0a:5e:e6:70:d1:79:71:8b:d2:07:55:5a:9c:3f:8b:70:10:
5b:37:55:fa:f2:e6:84:07:bf:6f:5a:75:1d:6d:aa:b7:bf:84:
1e:87:e3:83:3e:30:d0:d2:d4:62:9a:71:83:e6:3a:a0:fb:3c:
75:0e:e1:23:ef:0f:4f:3f:ee:17:c3:6b:e2:8b:23:d7:92:cb:
d3:f9:d0:8b:64:f7:79:92:9b:ce:3a:5e:7d:70:c9:42:9e:39:
fe:29:5c:c0:d8:be:30:75:98:4a:91:38:c2:af:f3:20:dc:94:
76:5a:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:08 2026 by rpki-client