
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json)
Hash identifier: fLp81TryYTY6CK6SAoTTG9EHBHK8X4sMYr3GK8Nbsko=
Subject key identifier: BC:81:16:86:2E:74:B1:65:DD:FC:54:01:33:A9:FF:A7:1E:1C:B3:DC
Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Certificate serial: 0D5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
Manifest number: 0D52
Signing time: Thu 16 Apr 2026 17:53:52 +0000
Manifest this update: Thu 16 Apr 2026 17:53:52 +0000
Manifest next update: Thu 23 Apr 2026 17:53:52 +0000
Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: 6whugbFOnN4ajgECNwxo6ryogWw/9C0ng07UE6ozges=)
2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: yMGWSYKZJih8aQL2gVilfSresOlgwuqSCV4043Vk2h8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3419 (0xd5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Validity
Not Before: Apr 16 17:53:52 2026 GMT
Not After : Apr 23 17:53:52 2026 GMT
Subject: CN=69e12230-a382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:73:b6:a3:2c:34:a1:a1:4c:33:86:e5:ab:
ba:ba:80:36:e4:7e:42:03:10:2b:0b:77:0f:29:0a:
18:15:69:fd:09:85:2c:53:b7:ed:34:8b:c6:94:bd:
7e:0f:11:c6:f6:9a:2c:71:ec:37:e1:23:b8:d4:81:
b8:38:ec:66:16:3f:7f:94:bf:b6:32:06:9e:54:9a:
70:d8:fa:d4:7a:d5:bf:25:a6:a7:92:d9:4f:b9:56:
f6:fb:12:83:38:00:27:3c:de:90:66:9f:f3:7d:74:
bc:6c:c3:97:2c:dc:c5:53:bb:98:07:9a:f7:bf:42:
2e:5c:f6:4d:53:51:14:43:2e:e9:c6:0d:c0:f6:43:
b8:d5:b5:68:80:cd:b4:0e:94:ac:82:2f:6a:b9:b1:
27:f2:d2:e6:82:91:ce:ae:2f:db:97:19:c5:4d:c1:
e8:d4:61:44:9a:68:4c:2f:50:80:bf:03:b8:d0:9b:
0c:97:e0:f9:d9:a5:4c:6c:f9:78:db:91:97:5a:9e:
37:33:79:c1:de:da:46:2c:3d:1b:7d:df:de:b4:90:
6d:e2:1a:51:68:97:d7:45:67:38:7a:ef:b6:0e:3b:
97:d9:43:57:a4:87:1e:f0:37:95:af:5b:42:1c:98:
46:a8:23:c4:88:83:ad:f9:29:4e:ca:17:f2:af:5d:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:81:16:86:2E:74:B1:65:DD:FC:54:01:33:A9:FF:A7:1E:1C:B3:DC
X509v3 Authority Key Identifier:
keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:5e:d0:bf:22:73:f4:f3:97:5c:a3:36:28:e5:aa:a9:a0:56:
78:0d:6e:95:05:a2:5b:cb:e9:bd:06:d7:34:52:f8:29:e6:4b:
74:9d:72:cb:05:70:51:4a:40:ab:70:8c:e5:0c:f3:b2:cd:4f:
cf:b3:fb:d2:60:bb:03:5f:0f:85:81:c8:d6:f7:f8:8c:88:e8:
f2:d9:5f:21:b2:53:c6:b1:3a:a6:ef:e0:3b:68:8c:16:b9:e5:
be:be:24:34:5f:8f:ad:8d:18:2f:8d:77:9d:20:5a:51:3a:8b:
52:e8:51:e4:3f:3c:ae:f9:04:fd:d2:f5:82:9b:84:03:fb:51:
41:2d:92:e7:09:bd:26:3c:09:40:df:6f:aa:6f:33:e3:af:89:
9e:76:bf:9a:e7:06:89:03:23:28:04:71:54:8f:a1:ea:3e:b8:
43:5c:e5:01:f3:9d:9b:98:3c:d7:6a:a6:0c:74:87:4a:ea:fc:
d0:b0:49:b0:6a:71:c9:85:31:60:1e:0e:c1:0e:12:d4:71:9b:
f8:b0:46:45:c8:30:84:f8:73:50:fd:c5:bb:bb:27:4b:d0:88:
c4:dc:43:48:c7:ad:d9:22:23:0c:8d:70:73:b7:f0:ee:7e:c3:
3c:16:8e:d3:68:36:7c:23:69:3f:e0:0b:09:d3:4b:a2:bd:98:
88:60:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:21:20 2026 by rpki-client