
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json)
Hash identifier: pMspB7hT/EOyUm8tOg5nZosAwZiZMCSRhk7JGmS2xFA=
Subject key identifier: 6F:44:06:E5:EB:92:BC:33:AD:28:D7:0C:89:69:0B:FF:27:EE:54:0C
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial: 18F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
Manifest number: 18D5
Signing time: Thu 16 Apr 2026 16:24:45 +0000
Manifest this update: Thu 16 Apr 2026 16:24:45 +0000
Manifest next update: Thu 23 Apr 2026 16:24:45 +0000
Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: frV5TcmkXhaSBRsGDXtr0vHjgOKIzSGFXNfZYyWojyI=)
2: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: WT/ztJBPCnRbXAsKTFdhvipVvTOzMSRJMa+AX6jQ8aU=)
3: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: pqDSzaWYlQqUrgyay2m9Z4YNozIYTNWuZnCi/imo924=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6387 (0x18f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Validity
Not Before: Apr 16 16:24:45 2026 GMT
Not After : Apr 23 16:24:45 2026 GMT
Subject: CN=69e10d4d-6b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:63:8d:8a:05:8f:14:56:55:9a:ec:3a:83:
da:b1:b1:3b:d7:41:0b:9c:56:b9:eb:ad:65:33:84:
bd:50:d9:d4:1e:45:76:f0:7f:91:e5:70:f4:21:b8:
fc:89:18:d2:3a:67:ff:b9:3d:91:96:af:5d:eb:84:
d7:c0:4b:f5:39:78:ba:b5:02:32:67:cc:b8:20:31:
ee:a6:5b:39:9f:f9:b5:1e:5f:91:8e:aa:08:6e:58:
a1:dc:ad:81:21:fe:e8:f0:c2:3b:9c:7a:50:45:0c:
5a:9c:03:b4:d2:33:c8:10:c5:cf:dd:fc:1d:49:ee:
a6:89:18:d8:be:9a:1c:c3:a4:b9:cd:36:38:2a:8b:
a9:f0:3a:a2:83:2c:68:52:72:f3:02:ef:80:c9:72:
1d:0c:19:4d:d0:bd:27:01:d2:6d:c9:92:dd:08:75:
c8:d2:78:d2:06:8f:cd:b3:93:cf:7e:01:f6:f7:02:
74:81:7d:ce:91:6d:90:79:74:ae:aa:9f:c7:ba:1e:
34:84:f1:f0:d1:9e:d3:bf:fd:c1:c9:aa:ba:06:54:
1f:e5:7c:e5:9a:8f:3c:4c:d8:fc:64:23:bd:69:81:
ca:80:84:0f:f3:29:53:f7:64:49:89:90:56:83:59:
f2:b2:a4:04:e4:06:e8:20:e1:b8:fd:6b:98:e9:18:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:44:06:E5:EB:92:BC:33:AD:28:D7:0C:89:69:0B:FF:27:EE:54:0C
X509v3 Authority Key Identifier:
keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d8:70:41:5f:22:d4:dc:ee:10:a4:db:0d:a8:52:c1:2b:f7:
0a:9c:81:a4:6a:75:17:f3:65:39:1a:3e:0a:e7:0d:3f:3d:3d:
33:bc:f4:8e:53:8a:d8:64:f7:4f:f9:61:f2:79:0e:0f:be:1f:
e4:4d:a6:d7:7e:7b:2f:94:b0:50:81:7e:1b:cf:e3:91:10:8a:
9e:c3:79:ac:82:9f:88:ec:af:6b:4d:79:2c:94:29:e8:0a:ef:
5a:75:ec:77:d9:da:66:22:87:7f:ae:97:33:5b:9a:5d:b7:3b:
b8:63:cc:0c:2c:d1:e9:f4:37:ff:01:71:ac:78:0b:71:d9:e9:
90:09:8c:01:61:da:cc:1a:e1:eb:71:2d:d0:63:73:ad:a7:43:
9e:66:31:a4:2f:85:a3:67:57:4f:c8:d3:56:01:57:bd:33:b1:
8f:1f:b6:1c:cf:49:14:6c:62:14:25:08:f7:dd:ac:58:30:30:
c7:d8:0a:a9:35:7b:98:51:a4:28:9c:5b:4d:65:bf:b8:9c:1c:
20:c7:f6:ec:ce:2f:ef:ee:e7:01:09:da:c9:a3:c9:0e:ff:b4:
a5:00:32:2c:93:2d:b6:0e:56:71:f9:fc:5c:1d:8b:16:49:a3:
f5:17:94:e4:af:a6:b8:6a:45:8a:39:65:52:1f:d7:15:80:da:
b7:27:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:25 2026 by rpki-client