
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier: 41E83yS9GmSNSZbfEt5nbon243CkC85kRyZEdxcxMm4=
Subject key identifier: 00:21:60:43:3F:58:5E:F3:BC:F5:62:42:B1:89:92:89:B6:F0:0C:45
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial: 0827
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number: 080B
Signing time: Thu 16 Apr 2026 21:06:10 +0000
Manifest this update: Thu 16 Apr 2026 21:06:10 +0000
Manifest next update: Thu 23 Apr 2026 21:06:10 +0000
Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: NEIRdGmdjTxayaGqnHUayox2gIcveBPlmM22VJYWqIg=)
2: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: EZxaNB8Cg1CajysGL+HI5uVaed24iixfpfYF8glfmow=)
3: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: uC8BC8FOfX07Bz7LL4CTmAUAe/spoS+Jn5Z7MYh3ovQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Validity
Not Before: Apr 16 21:06:10 2026 GMT
Not After : Apr 23 21:06:10 2026 GMT
Subject: CN=69e14f42-93cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:91:0f:64:d0:d6:1a:f7:63:ba:3a:15:8a:
15:84:c4:43:08:ca:40:fe:09:c0:60:a9:e8:c2:bf:
c1:78:2d:17:e9:cd:95:46:55:b4:27:13:09:2a:dd:
01:04:3a:2d:33:14:2b:4e:be:43:92:7a:54:78:69:
a0:fc:7f:40:2f:78:1e:fb:b5:97:66:20:2d:c7:23:
ef:6f:fc:7b:8a:1c:c8:6f:c6:d8:41:a2:2b:5d:6d:
80:2c:a5:cd:47:64:8d:8d:fa:55:7b:ba:30:25:86:
c6:a2:8a:c7:62:6a:cb:0f:15:c1:7d:12:ce:f0:41:
0b:41:fb:4c:66:fd:ae:93:29:61:36:e2:a9:f3:78:
0d:30:c3:4c:18:e6:8b:6a:36:1b:cd:dc:41:c2:e3:
be:d0:7d:49:61:64:a2:07:39:1f:16:ca:8a:4c:25:
76:6e:71:cd:39:eb:ad:9c:3f:d2:32:a2:0e:7e:25:
01:be:e3:e7:e1:f4:8f:52:d1:12:4f:c3:e4:79:e5:
3b:35:4d:0d:2f:e1:c0:d6:5f:cf:f6:5f:22:43:86:
f1:17:43:7b:f5:26:6f:f6:ad:7c:19:8a:67:ae:2e:
3a:0a:ef:56:2d:e7:a1:2e:2c:6a:70:d9:55:ca:ed:
7f:26:e5:dd:4e:1a:50:ae:d7:0d:8d:8e:17:13:f0:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:21:60:43:3F:58:5E:F3:BC:F5:62:42:B1:89:92:89:B6:F0:0C:45
X509v3 Authority Key Identifier:
keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:4c:08:85:52:4d:2c:52:75:0b:ce:2c:ee:87:a2:e6:25:e1:
9d:a7:c0:9d:6b:77:09:3a:07:2b:93:56:74:49:c3:a6:e3:10:
3e:79:3e:c1:fa:d9:7c:0e:55:9d:2e:3f:73:03:9b:d6:d9:72:
01:a5:11:c8:4c:c4:e9:4e:bd:28:84:75:a1:6e:5b:b6:1f:36:
ae:55:af:73:3f:c7:da:37:a4:87:0a:fb:7b:72:73:26:1e:7b:
53:87:67:5e:d2:23:2a:7a:14:f9:6f:93:6b:79:c2:9e:73:95:
61:f4:b3:fd:8a:c4:a0:3b:bc:d9:34:76:a1:fd:a2:f5:09:68:
a1:e7:99:f0:d5:76:99:e2:91:34:b6:c3:2f:1f:a5:e4:d3:ab:
91:3b:25:18:80:6a:38:2e:6d:2e:a5:0a:30:dc:e8:b0:82:5e:
8f:b6:e9:22:e4:0a:4c:35:ef:4f:28:94:c5:f0:a0:7d:d7:7d:
bd:e5:28:41:52:6c:ba:f2:19:fb:d2:10:15:41:af:b8:39:28:
98:05:67:d9:89:d4:05:f3:18:b3:56:e9:78:ee:dc:76:35:0c:
69:e9:2f:82:89:05:59:5a:ef:72:4f:e5:d6:c1:3d:ca:c1:cd:
9d:9b:17:c8:70:c1:6d:13:77:77:e1:7c:9a:90:1a:aa:28:ee:
67:b8:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:17 2026 by rpki-client