
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json)
Hash identifier: qlMAlTI5WLVNbUlTMy40spXz7fxwC8lhyRfniBqWHlk=
Subject key identifier: 93:D1:7D:0C:16:D0:25:A2:1A:D3:21:14:01:20:E5:E4:AA:F1:D0:07
Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
Manifest number: AF
Signing time: Fri 17 Apr 2026 06:49:06 +0000
Manifest this update: Fri 17 Apr 2026 06:49:05 +0000
Manifest next update: Fri 24 Apr 2026 06:49:05 +0000
Files and hashes: 1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: hK2PvCSmaBBbgsllBKZ8TqCWarWrfaxsycHISTuJHG4=)
2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: eJNqSsgVwpcsQg2beMNYNXlFNiDiSYEYUWJ9Bn6L/vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Validity
Not Before: Apr 17 06:49:05 2026 GMT
Not After : Apr 24 06:49:05 2026 GMT
Subject: CN=69e1d7e1-62cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:df:7d:df:9a:4b:07:17:e1:4f:b3:f2:f1:
65:0d:14:89:ed:4c:cd:35:df:86:53:58:41:7e:88:
3f:9f:e5:6e:2b:37:50:17:2d:0f:1a:1f:d9:6d:dd:
38:1c:b0:2d:57:fa:83:7f:71:b3:fb:13:1e:de:83:
7a:1d:a9:35:37:c8:a8:90:6d:f9:39:75:df:35:25:
35:9f:83:84:94:e2:fa:00:72:20:58:e3:b9:e7:30:
a0:d0:83:2c:6b:eb:78:20:4e:87:8d:fc:05:ee:63:
24:6e:97:9d:d9:c2:4f:4d:72:4a:1d:6f:1e:5f:60:
3f:a1:ce:46:9b:7f:8e:84:bd:d8:4b:63:32:d8:8f:
15:2a:6b:03:e6:ac:d1:ae:8a:0f:40:bf:da:9d:72:
87:5d:01:b2:ad:d7:9a:b6:0b:18:f2:0f:de:b9:13:
88:eb:01:1f:da:4a:1a:fa:c5:5f:a0:64:b7:47:e8:
e3:10:6e:96:44:2b:2a:36:4a:9f:2e:9e:ad:a9:f2:
63:8c:1e:2b:e1:d9:b9:c6:8a:7c:2f:72:46:8b:f3:
17:97:3a:1b:90:28:ed:b5:af:d0:a3:cb:19:ff:11:
d4:fe:51:19:02:e2:c4:9e:21:cd:84:4b:b6:a2:da:
84:86:b5:6e:40:11:a2:cf:99:ca:54:dc:d8:91:40:
e0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D1:7D:0C:16:D0:25:A2:1A:D3:21:14:01:20:E5:E4:AA:F1:D0:07
X509v3 Authority Key Identifier:
keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:4b:49:00:a5:bb:c4:b4:9c:6b:a5:9d:21:78:34:03:df:93:
16:0b:91:13:ce:c8:94:0e:de:3b:f3:e0:90:65:e4:62:eb:43:
bc:b1:4e:12:fe:a0:4a:ed:32:24:0b:2a:e1:f6:e5:d1:af:44:
68:57:7b:f9:7c:6e:29:e0:a9:5d:61:5b:dd:e9:00:81:9c:f1:
45:44:9b:ad:e7:87:1e:a7:3d:65:50:e5:3b:4b:aa:f6:43:ed:
ec:e2:91:95:60:e0:dd:36:4b:93:0f:61:82:c6:8b:da:47:b3:
bd:3a:dc:42:9d:fb:1c:9b:29:be:dd:af:d9:30:34:78:7d:7a:
f5:70:6b:5f:54:aa:72:1a:2e:82:34:07:9d:71:0b:37:65:f2:
b8:b4:03:5a:0b:e0:b0:c6:13:bb:ee:11:f7:fd:d8:8e:ed:91:
a0:20:fb:2e:1b:18:ec:61:9c:87:03:7b:c7:15:dd:ca:76:74:
91:20:e8:5c:c9:82:53:fe:2a:43:72:25:47:2d:ee:fd:1c:24:
8e:f0:b1:ef:12:b8:ae:d3:06:88:a7:91:a3:c3:52:c2:c1:ef:
22:25:35:c8:61:05:08:9b:cc:f7:f5:94:a2:d3:c9:6d:75:8f:
d9:91:f6:59:ca:42:f7:bf:d6:03:86:31:38:ff:1d:fd:b3:f4:
06:0f:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:06 2026 by rpki-client