
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
File: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json)
Hash identifier: W0ZtWXhdajMAY324Z8fzVBC/iUIzSZzrWCOHoFOGyrQ=
Subject key identifier: 73:1F:E1:39:BC:1D:0B:FC:0D:FA:E0:F7:D8:D1:3A:FF:82:2B:CA:A6
Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
Certificate issuer: /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
Manifest number: 4D
Signing time: Fri 17 Apr 2026 07:57:05 +0000
Manifest this update: Fri 17 Apr 2026 07:57:05 +0000
Manifest next update: Fri 24 Apr 2026 07:57:05 +0000
Files and hashes: 1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: okbe/pmCeK5fU/WdtiZJpsQqQSpaCnEUt+ZvFaBSJ78=)
2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: qhmDYrXSka0BnnAzbzb+vh6r8WiWcCMdpJjXHDEOqUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Validity
Not Before: Apr 17 07:57:05 2026 GMT
Not After : Apr 24 07:57:05 2026 GMT
Subject: CN=69e1e7d1-71fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:9a:af:4b:a5:5a:82:53:0d:3d:f9:b4:56:
a2:bf:93:09:e0:87:9f:4e:86:0a:a4:11:37:ba:c3:
b3:a2:81:0f:ca:13:45:72:fd:60:e6:d6:7a:45:9a:
cb:d1:39:05:db:54:ea:0b:aa:94:42:bb:cb:98:4c:
05:4b:fd:ae:cd:c1:19:64:30:8e:2b:55:0e:80:3e:
67:34:cf:dd:25:2c:2d:eb:2e:41:0d:e4:bd:2d:51:
dc:8f:50:7f:36:77:42:56:d1:4f:01:03:bb:55:ca:
69:c5:62:07:dd:15:d8:92:84:47:fd:a1:0d:32:bb:
0c:74:26:2d:11:ab:0b:a7:35:8a:ba:b2:49:0f:50:
be:27:3e:a5:13:d5:0a:6f:ce:a2:2d:b8:6e:1e:fb:
5c:96:18:c3:e4:54:d2:2e:88:aa:6d:a3:1b:63:b1:
b4:91:05:98:d4:68:bb:36:2c:35:ed:25:0d:5a:33:
a8:ce:0c:d9:46:cc:98:b6:c1:71:d4:e0:69:78:ca:
ac:b0:55:57:df:0d:f6:67:22:bc:16:4c:a9:a9:00:
e8:34:f2:89:b9:0f:b2:1f:7a:eb:89:2e:cb:74:04:
8b:21:e0:c8:40:34:d3:ab:3b:1d:65:5e:f7:c7:9d:
02:e2:94:2e:62:6b:a0:8d:da:81:e9:22:22:56:f0:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1F:E1:39:BC:1D:0B:FC:0D:FA:E0:F7:D8:D1:3A:FF:82:2B:CA:A6
X509v3 Authority Key Identifier:
keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:26:42:24:b4:6a:0f:58:15:9e:4e:b2:7e:b8:88:ae:b8:b7:
0d:48:89:a0:20:d9:35:1f:ca:46:41:95:40:7c:56:c8:b5:74:
f2:17:35:67:08:30:e6:b9:d5:52:ba:af:5e:62:d1:35:cb:3e:
07:5c:69:2b:96:43:c4:a9:92:88:bd:70:bc:95:d4:6d:a2:47:
de:c3:3a:cd:2e:07:65:e3:b6:ec:ec:2c:d1:e6:a3:a2:f5:4c:
31:11:91:35:35:bd:9c:67:9d:69:10:be:b5:77:f4:e6:be:7c:
c6:37:3f:d6:6c:89:93:fb:1c:dc:28:1b:c0:18:ed:6d:22:ad:
cc:58:82:bd:13:87:2d:80:94:08:91:72:bc:9c:fc:42:a8:18:
9f:a2:c4:70:30:01:8b:ae:f3:f2:cc:c7:64:bb:cd:3f:dc:56:
00:ad:06:e5:58:57:0c:88:87:dd:07:62:90:0e:a3:31:a0:04:
c9:6a:03:b0:de:f7:32:4b:e2:33:07:c8:01:5c:e2:7c:de:63:
b1:04:92:97:8d:83:0f:3f:b3:9c:9b:fa:32:33:1a:a7:6a:e8:
50:92:64:be:e3:c5:fa:f4:1a:62:ad:6c:e1:e0:5c:8c:7b:2f:
87:e7:69:c7:8f:99:2c:e3:4a:52:c9:03:eb:af:83:f0:ae:3b:
b2:c0:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:09:08 2026 by rpki-client