
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json)
Hash identifier: Va+qznSHPH5Bql6Xy6YvgPWxKS/bnE/MHMa+kDeU+Ks=
Subject key identifier: 60:46:F7:E8:B1:42:2B:91:CE:56:26:AD:68:75:A3:1A:26:61:DE:8A
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial: 1569
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
Manifest number: 1542
Signing time: Thu 16 Apr 2026 16:44:48 +0000
Manifest this update: Thu 16 Apr 2026 16:44:47 +0000
Manifest next update: Thu 23 Apr 2026 16:44:47 +0000
Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: Pm1+jjVYJC3QL9s+egh7+P4iWmg86LLaRCoyx61jfGw=)
2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: c3V4is6FxJWguSVJuid3bqOWHNBU9BhpqKFdoluzAPo=)
3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0NwFrvM9IRvJJO9gyp3K+Hhph/Q11YURFU2ihH7vWSU=)
4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: ZmY2QYzyAhSTsePe4zn0H+5k+aBVvIw3u0RjxVpoXEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5481 (0x1569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Validity
Not Before: Apr 16 16:44:47 2026 GMT
Not After : Apr 23 16:44:47 2026 GMT
Subject: CN=69e11200-72ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:af:ee:f6:04:f5:b1:77:19:24:7a:cf:0f:
61:f3:6b:f0:fa:7b:ea:2e:1a:f4:55:78:50:08:f3:
04:2e:4e:d2:d7:a0:47:52:b8:7c:37:d0:72:1c:af:
56:fe:94:c5:1c:d0:1f:e8:c3:5e:40:72:20:d4:0c:
e0:6e:47:e8:f1:eb:d0:a3:36:91:da:50:d1:30:cf:
2a:df:b3:96:2c:5d:69:f2:c6:96:6e:07:71:3b:8c:
77:94:d8:e9:5c:2b:7e:26:6a:96:ae:97:9c:d6:27:
27:a3:d4:dc:76:05:ef:fa:6d:97:4e:5c:d1:ab:dc:
be:59:a2:dd:46:c3:c9:f8:61:80:af:12:84:6c:27:
2a:ac:38:4f:e9:0b:cb:8b:1a:31:33:12:19:f2:c5:
08:59:fc:00:d7:db:64:ce:be:3f:74:92:c2:a7:0d:
19:6f:4a:85:12:8f:f2:1c:76:ef:7e:cf:f1:ba:e1:
34:7a:44:09:e4:fa:95:8d:38:af:3c:38:da:8b:3e:
dd:3e:b4:32:2d:b1:f1:16:33:63:91:5e:5f:85:09:
a6:d1:d6:fb:ac:bc:10:55:87:c1:42:2b:65:b0:e0:
21:95:39:e5:e2:44:76:29:bc:d3:e2:08:20:7e:04:
cf:87:92:6e:1d:74:7a:bc:8e:58:37:23:5c:8c:dd:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:46:F7:E8:B1:42:2B:91:CE:56:26:AD:68:75:A3:1A:26:61:DE:8A
X509v3 Authority Key Identifier:
keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:ac:87:2c:03:9b:51:5b:da:ce:57:9e:7d:14:82:78:44:
1c:bc:91:67:49:f0:4e:7b:ed:34:0c:75:73:d8:ce:13:5d:17:
54:48:10:c8:f6:6f:67:61:5b:77:f1:f2:4e:4a:fc:3d:f6:a6:
03:b1:cc:e3:80:67:07:b1:f0:e8:c5:55:97:d8:53:28:d6:35:
d6:49:67:a0:f7:4e:7a:bb:53:a5:12:5d:1b:8d:4e:b3:3f:c3:
22:5c:96:60:92:23:cb:b3:59:bf:11:79:8d:38:2d:91:ea:29:
95:40:b2:d7:f8:6f:ba:b5:26:1b:d1:17:a3:dd:81:78:91:87:
3f:ed:dc:c0:cc:c1:e7:8f:27:2d:e1:c6:a5:a4:21:8a:f6:e0:
ad:0a:e7:69:ff:e9:78:61:8d:6f:9e:5c:22:78:bc:8e:16:da:
05:fb:51:91:03:59:df:4b:47:06:27:12:c7:67:09:c2:4c:cf:
3b:91:89:70:5e:f2:a4:d0:d8:74:bf:ad:70:ec:4e:79:03:a9:
46:29:26:58:15:45:55:81:e8:e5:e2:7d:d8:ed:b1:2b:45:57:
11:fe:df:60:74:c7:5d:15:82:b0:73:08:49:4e:4c:c2:9a:15:
bf:34:99:76:f0:a9:eb:30:03:b0:86:1e:25:56:d1:f0:16:2e:
60:cf:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:49 2026 by rpki-client