
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json)
Hash identifier: 4cSyMZAbhLK2GAAITf+UVsY8oxPL4ATerrqUt5x11w0=
Subject key identifier: 02:C5:96:75:38:28:D4:D9:3C:84:38:26:D4:85:5B:A2:43:F3:C5:07
Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
Manifest number: 0235
Signing time: Thu 16 Apr 2026 22:53:02 +0000
Manifest this update: Thu 16 Apr 2026 22:53:02 +0000
Manifest next update: Thu 23 Apr 2026 22:53:02 +0000
Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: y/VqtsKiCeDnmrmvqZ/AINgb8tkGraGKKKZ0SQOfBLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Validity
Not Before: Apr 16 22:53:02 2026 GMT
Not After : Apr 23 22:53:02 2026 GMT
Subject: CN=69e1684e-62d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:93:b9:1d:3f:cf:94:ef:e7:bb:61:b8:2e:
62:91:c5:f6:f4:25:21:be:d0:cf:77:15:6d:95:67:
b7:3b:8e:3a:52:bf:44:9f:6d:d4:ec:34:f0:a1:f9:
9e:15:3e:b1:f0:65:1c:cd:1a:27:c2:80:e2:cc:ec:
63:36:a1:2e:cd:4e:bf:91:de:0a:e3:1d:41:c1:a1:
73:42:53:35:bb:69:f2:02:44:a4:4c:fc:51:51:cd:
46:5b:d4:b1:7c:ce:ba:82:9d:06:d1:eb:33:c4:c2:
02:83:02:c8:93:1f:cd:35:1a:63:ee:5b:77:84:cb:
af:31:88:f6:a3:11:f8:cd:8a:9a:1d:69:83:07:6c:
21:4e:72:ef:e8:ee:76:79:78:b7:68:a3:27:65:9b:
46:9b:9c:9c:c7:45:45:94:19:0f:d3:af:99:c0:ef:
ed:71:26:8a:69:5b:b7:6d:ea:48:f0:7a:41:79:c4:
7d:1b:45:94:ed:d4:ac:e5:81:f9:a5:f8:35:14:c3:
c4:2f:38:18:f1:12:ef:4c:12:80:f0:61:16:4b:73:
81:8e:67:61:58:e9:f4:de:b6:c1:68:c4:46:e1:b7:
9e:43:b2:56:48:8b:93:69:a3:94:05:c3:a8:fd:96:
bd:b8:40:49:b5:5f:6b:e7:a9:cf:4a:2f:57:6f:fa:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C5:96:75:38:28:D4:D9:3C:84:38:26:D4:85:5B:A2:43:F3:C5:07
X509v3 Authority Key Identifier:
keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7a:8d:a5:8a:d5:4e:e6:f1:9e:3c:ec:76:d8:db:5b:0e:02:
fd:67:be:2e:68:17:e0:b4:04:70:05:1a:e5:6b:ca:4c:01:49:
4f:a6:17:c6:17:38:f2:85:be:c3:0b:cb:78:a3:ba:4d:58:8d:
7c:b4:8b:2e:10:e8:30:0e:52:58:f0:3d:d3:03:fc:91:3f:cb:
96:d4:6f:84:43:50:cb:6f:a1:f5:c3:98:9c:08:d0:be:4f:d1:
c8:e6:3e:33:73:67:2b:dd:5b:a5:26:1f:e4:98:87:e8:b8:4d:
ee:61:26:ea:f7:7b:1e:7f:c8:c6:af:e6:33:7e:47:83:9a:16:
f8:13:75:8d:45:96:f5:8b:64:a1:51:d1:57:a4:66:33:79:37:
2d:61:80:10:a6:61:5b:dd:c3:4a:dc:b6:9e:5e:be:3b:74:63:
7b:33:a3:ed:7f:28:db:da:7a:f6:1a:e9:ab:d9:b1:0c:30:1e:
b0:a2:ea:95:af:e9:e2:f2:bd:f7:1d:ba:31:ef:51:87:6c:d4:
1b:8b:75:e4:7f:a2:63:5f:a3:a3:f4:a2:f5:35:34:3f:a5:37:
de:72:fb:23:c6:23:80:92:e9:c0:9a:48:5d:91:bf:11:42:5f:
a7:04:2a:c0:58:a7:a8:53:97:78:21:ec:59:ea:c4:94:41:b6:
76:8d:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:54 2026 by rpki-client