
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json)
Hash identifier: cD9FqRrN5fyuasaiglHBzSBGZe4v7HIrIWJOBHgjYUI=
Subject key identifier: DB:95:24:94:E7:A8:A9:5D:92:BA:B5:CB:D7:CB:D9:95:2B:9F:79:D5
Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
Manifest number: 019D
Signing time: Fri 17 Apr 2026 03:58:13 +0000
Manifest this update: Fri 17 Apr 2026 03:58:12 +0000
Manifest next update: Fri 24 Apr 2026 03:58:12 +0000
Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: g8fpJKh0nOlOpFQQppeFQS86ip6OB8bMlUN4DiMhIXs=)
2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: GLrzVbO/eZPffRoT3cGz+iLpJergigCKe+VSGEBiwVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Validity
Not Before: Apr 17 03:58:12 2026 GMT
Not After : Apr 24 03:58:12 2026 GMT
Subject: CN=69e1afd4-77bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:57:68:c9:b4:b5:14:4e:04:7f:30:0d:8c:
fe:03:09:ba:85:45:fd:53:de:b8:8b:e5:f5:1f:a3:
02:f5:9e:53:1d:54:75:51:cd:23:be:a0:47:f0:25:
2d:76:8f:0a:70:dd:6b:39:71:45:54:53:83:bc:7a:
7a:f9:1b:5d:65:e0:11:97:a7:b1:b1:78:5e:76:3d:
89:87:a6:1f:2b:08:f8:2f:b6:fc:12:f2:ac:de:40:
95:91:47:89:74:b7:60:48:6d:e1:c5:49:62:cd:42:
07:87:d0:22:31:80:48:25:0a:8f:ea:a8:d2:0b:07:
0f:55:90:77:f4:be:cc:4e:36:c0:f6:50:e4:1b:74:
15:85:a9:b5:d6:20:a8:23:1d:62:a9:ce:77:bf:e1:
5f:61:e7:9a:af:3a:ef:fd:cf:af:7a:98:64:47:69:
26:bb:b2:c2:9e:fa:3f:78:cc:8e:6b:46:d9:e7:ea:
d4:1c:2b:8d:f0:39:27:e4:60:d6:26:f3:bd:64:72:
41:0d:50:9f:9c:c0:3e:2b:14:c3:8e:5e:e2:50:6c:
84:28:38:b8:fe:46:55:6e:a7:5b:79:f8:2d:36:af:
1b:1f:1b:3e:b6:54:74:e0:d0:19:b0:3f:8e:00:aa:
d4:40:3d:cf:90:97:d5:72:ec:58:62:89:71:95:a8:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:95:24:94:E7:A8:A9:5D:92:BA:B5:CB:D7:CB:D9:95:2B:9F:79:D5
X509v3 Authority Key Identifier:
keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:32:d5:9d:28:c1:96:9f:31:fb:97:1d:1d:83:5a:b9:e1:bd:
30:a0:37:a0:26:cc:e9:77:d7:dd:97:4c:e2:d2:3f:6f:11:02:
27:89:a7:bb:38:5d:24:d7:7c:bb:c9:69:32:9c:83:5c:25:7e:
75:00:13:c2:d2:02:3b:52:5f:5a:ea:95:31:9f:10:ba:e9:20:
d8:39:55:32:fa:c7:2f:f3:54:44:b7:f0:46:0f:95:5b:69:27:
15:35:31:80:14:f5:6e:3e:67:6a:65:0c:61:0b:b0:b3:f0:bd:
49:d9:66:3b:d7:6d:5a:da:c4:29:88:a4:f9:1b:3f:a7:f2:03:
ca:b0:9c:7c:52:6d:d4:e1:65:48:a8:e3:9d:49:00:c2:20:be:
24:36:fd:56:be:fb:84:d2:18:6e:f0:e4:20:82:03:d4:7c:43:
6f:b0:13:8c:ba:7f:57:e7:89:86:67:ff:19:44:b1:a3:e1:4b:
60:c3:94:aa:db:4c:c0:78:fb:13:a2:30:c1:0b:3f:6e:fd:3f:
8d:b8:72:74:57:ac:0a:58:71:06:ba:88:73:de:13:8a:26:c0:
5c:70:a5:12:ce:fc:ae:d2:a5:e1:88:52:ba:a3:df:2f:b5:d2:
0e:21:24:a7:5b:a7:0c:ac:69:c9:dc:47:47:e5:0e:14:95:4a:
80:e8:8f:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC
MkQ0NTBGOTgwHhcNMjYwNDE3MDM1ODEyWhcNMjYwNDI0MDM1ODEyWjAYMRYwFAYD
VQQDEw02OWUxYWZkNC03N2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhnhXaMm0tRROBH8wDYz+Awm6hUX9U964i+X1H6MC9Z5THVR1Uc0jvqBH8CUt
do8KcN1rOXFFVFODvHp6+RtdZeARl6exsXhedj2Jh6YfKwj4L7b8EvKs3kCVkUeJ
dLdgSG3hxUlizUIHh9AiMYBIJQqP6qjSCwcPVZB39L7MTjbA9lDkG3QVham11iCo
Ix1iqc53v+FfYeearzrv/c+vephkR2kmu7LCnvo/eMyOa0bZ5+rUHCuN8Dkn5GDW
JvO9ZHJBDVCfnMA+KxTDjl7iUGyEKDi4/kZVbqdbefgtNq8bHxs+tlR04NAZsD+O
AKrUQD3PkJfVcuxYYolxlajdowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuVJJTn
qKldkrq1y9fL2ZUrn3nVMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1
RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD
dmMxTmktcFFPRW15MUZENWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQzLVnSjBlp8x+5cdHYNaueG9MKA3oCbM6XfX3ZdM4tI/bxECJ4mnuzhdJNd8
u8lpMpyDXCV+dQATwtICO1JfWuqVMZ8Quukg2DlVMvrHL/NURLfwRg+VW2knFTUx
gBT1bj5namUMYQuws/C9SdlmO9dtWtrEKYik+Rs/p/IDyrCcfFJt1OFlSKjjnUkA
wiC+JDb9Vr77hNIYbvDkIIID1HxDb7ATjLp/V+eJhmf/GUSxo+FLYMOUqttMwHj7
E6IwwQs/bv0/jbhydFesClhxBrqIc94TiibAXHClEs78rtKl4YhSuqPfL7XSDiEk
p1unDKxpydxHR+UOFJVKgOiPpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:06 2026 by rpki-client