
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft
File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json)
Hash identifier: S6ATcFrwY5TUILq84hZOhbG5/DvmsR2eCSunhglIxUE=
Subject key identifier: 88:6B:54:A9:DE:B4:37:63:EB:BF:B0:44:67:5E:B2:DF:5B:45:62:58
Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9
Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9
Certificate serial: 0319
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft
Manifest number: 0319
Signing time: Fri 17 Apr 2026 01:03:37 +0000
Manifest this update: Fri 17 Apr 2026 01:03:36 +0000
Manifest next update: Fri 24 Apr 2026 01:03:36 +0000
Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: VKPIl5l2xgeyAwpP04Ip92v5b+R3C0dQY/TTCP7eTR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl
rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9
Validity
Not Before: Apr 17 01:03:36 2026 GMT
Not After : Apr 24 01:03:36 2026 GMT
Subject: CN=69e186e9-e203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:ab:bd:c4:23:cc:7e:b2:db:30:8d:01:e8:
db:81:34:f5:18:20:f7:2d:69:d1:ec:e6:c9:b0:5d:
5f:15:09:1f:27:68:16:af:b8:5d:21:6b:a6:d5:84:
5f:f7:79:aa:15:4a:84:3e:e7:e7:28:c5:fe:fc:a3:
ba:eb:d0:2e:b5:d8:77:0d:ed:db:3b:81:61:f0:f0:
f2:40:9d:46:7d:fe:9b:8b:fb:be:9e:7e:dc:97:b8:
85:cc:0f:f2:73:31:13:bb:5b:22:30:cc:f9:08:47:
2e:26:3a:56:34:32:f4:76:08:ca:9c:73:44:b9:5b:
09:f4:93:47:e2:dd:77:44:00:ad:14:70:51:11:8b:
e0:07:9d:42:b7:55:5d:bd:6c:e8:de:a5:68:8c:21:
5e:1a:27:8d:4e:97:e2:51:b7:4a:03:65:31:30:53:
04:8f:dd:9a:f9:27:87:33:e8:50:e8:30:4d:7a:9a:
32:a8:c8:ef:dc:4b:8f:2f:42:a9:cf:22:c5:64:d5:
14:e8:af:7f:85:0c:41:ea:e1:69:ee:29:f6:1b:a7:
79:ac:30:65:cf:b5:91:33:cf:62:e7:40:7f:25:73:
09:81:68:dc:92:e4:76:3c:ae:e4:a2:29:77:2d:a8:
10:6d:df:b6:da:40:63:b8:1d:cc:89:a7:1a:ee:45:
9f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:54:A9:DE:B4:37:63:EB:BF:B0:44:67:5E:B2:DF:5B:45:62:58
X509v3 Authority Key Identifier:
keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6a:0b:44:32:80:45:90:7b:94:d4:56:24:c7:98:83:b4:d2:
a0:ec:61:09:49:20:9e:24:e9:35:d1:f3:91:a3:72:87:6a:b2:
a9:26:a3:cd:5d:4c:8d:cc:b4:4b:95:53:31:a4:d1:55:4a:aa:
8b:01:3f:7d:c2:ef:1a:8e:5a:1a:ea:17:3f:36:ff:33:e6:b5:
75:59:6f:2f:10:a8:f9:32:3c:d4:08:bc:57:17:87:88:00:62:
3f:2a:3c:11:0f:96:ea:55:a6:31:1d:90:a1:15:07:65:b9:3d:
3d:dc:04:bb:d1:88:59:0b:ff:9d:43:3e:04:7b:8e:88:3f:d7:
c6:61:61:fe:29:1f:8a:a0:a8:e4:e3:4e:b1:81:24:8a:0b:97:
11:79:29:14:db:51:89:2e:81:2b:ff:d5:c9:91:e2:64:12:b9:
6b:4e:c1:ef:d5:81:be:8a:c0:8d:0f:99:fe:35:91:e7:8c:89:
0d:34:a6:67:36:7e:c1:0f:7b:1a:61:d5:0c:dd:e2:8a:cf:2b:
ab:66:60:ff:a1:65:d4:b1:cf:10:d0:75:62:dd:0f:f6:35:e8:
a7:c8:a9:8b:f6:58:65:ef:6d:89:dd:a5:58:68:92:ba:dc:f5:
e8:60:1d:28:df:47:09:35:7c:60:86:c4:b9:17:ce:b8:1b:16:
ed:f2:4b:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4
NUVFOUFGRDkwHhcNMjYwNDE3MDEwMzM2WhcNMjYwNDI0MDEwMzM2WjAYMRYwFAYD
VQQDEw02OWUxODZlOS1lMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqrCrvcQjzH6y2zCNAejbgTT1GCD3LWnR7ObJsF1fFQkfJ2gWr7hdIWum1YRf
93mqFUqEPufnKMX+/KO669Autdh3De3bO4Fh8PDyQJ1Gff6bi/u+nn7cl7iFzA/y
czETu1siMMz5CEcuJjpWNDL0dgjKnHNEuVsJ9JNH4t13RACtFHBREYvgB51Ct1Vd
vWzo3qVojCFeGieNTpfiUbdKA2UxMFMEj92a+SeHM+hQ6DBNepoyqMjv3EuPL0Kp
zyLFZNUU6K9/hQxB6uFp7in2G6d5rDBlz7WRM89i50B/JXMJgWjckuR2PK7koil3
LagQbd+22kBjuB3Miaca7kWfrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhrVKne
tDdj67+wRGdest9bRWJYMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF
ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By
OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204
NHgzWk5QcEF5QXlGN3ByOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxGoLRDKARZB7lNRWJMeYg7TSoOxhCUkgniTpNdHzkaNyh2qyqSajzV1Mjcy0
S5VTMaTRVUqqiwE/fcLvGo5aGuoXPzb/M+a1dVlvLxCo+TI81Ai8VxeHiABiPyo8
EQ+W6lWmMR2QoRUHZbk9PdwEu9GIWQv/nUM+BHuOiD/XxmFh/ikfiqCo5ONOsYEk
iguXEXkpFNtRiS6BK//VyZHiZBK5a07B79WBvorAjQ+Z/jWR54yJDTSmZzZ+wQ97
GmHVDN3iis8rq2Zg/6Fl1LHPENB1Yt0P9jXop8ipi/ZYZe9tid2lWGiSutz16GAd
KN9HCTV8YIbEuRfOuBsW7fJL/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:44 2026 by rpki-client