
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
File: znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json)
Hash identifier: 3AZUTKejftWWnjnbLzaaYrdNYYbwBrOm+hSO+Cnthho=
Subject key identifier: B5:2D:87:FC:1D:64:E5:AD:5F:BC:08:73:C5:50:45:B6:F3:FB:8D:F8
Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
Certificate issuer: /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
Manifest number: 74
Signing time: Fri 17 Apr 2026 07:30:43 +0000
Manifest this update: Fri 17 Apr 2026 07:30:43 +0000
Manifest next update: Fri 24 Apr 2026 07:30:43 +0000
Files and hashes: 1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: 97f3DFo63c8xovsKeJ3y1MJzkodZwdKRY5y93KIv2m4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Validity
Not Before: Apr 17 07:30:43 2026 GMT
Not After : Apr 24 07:30:43 2026 GMT
Subject: CN=69e1e1a3-0575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:38:fe:ac:52:ee:9e:f2:77:1f:9a:0b:03:
c8:7b:86:0d:c9:9a:51:97:41:e5:8c:d0:a1:18:37:
41:dd:64:41:f9:bc:4d:f2:e8:0d:9e:de:c1:6d:4a:
0a:de:66:e3:ae:95:e1:38:7b:1c:eb:29:7a:81:9e:
ba:58:95:f3:23:e6:89:03:db:20:72:dd:23:00:03:
e7:ca:69:4e:c5:90:42:0a:c7:6d:5f:90:81:e9:4f:
23:a4:62:92:0d:c0:b1:df:75:9e:47:3b:8e:16:31:
e6:98:26:11:89:15:8c:ff:d8:ae:07:ea:4a:17:b8:
fc:5f:4a:fd:b6:95:6c:32:8a:ab:98:a6:49:57:4c:
df:c8:e8:a1:77:50:6c:ca:8a:04:f4:99:43:65:35:
01:12:57:35:55:17:59:50:e5:ff:30:7d:3a:a9:f6:
ad:a6:2c:8d:60:40:2e:b2:76:38:0d:f8:af:dc:f5:
32:4b:c6:7a:14:91:27:c4:ef:34:c8:ae:61:bb:17:
8b:48:ca:6b:bb:d8:0d:d8:e4:e9:ba:fd:10:d3:ca:
50:21:bd:a5:9a:5d:d0:5e:92:4d:19:06:a8:62:c8:
02:d0:b6:55:53:4f:79:51:21:77:ca:0b:e3:75:cc:
20:a7:8e:e5:30:c0:82:b1:58:a1:f3:18:a3:2a:18:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2D:87:FC:1D:64:E5:AD:5F:BC:08:73:C5:50:45:B6:F3:FB:8D:F8
X509v3 Authority Key Identifier:
keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:39:44:19:6f:4f:33:44:9d:96:c7:8d:76:8a:b7:23:cc:c7:
84:13:7f:1d:b9:81:e9:f6:93:58:da:2d:02:fb:86:09:b0:e5:
40:f3:59:a7:13:a2:11:9e:09:fa:3b:80:01:e2:95:31:07:c5:
83:4e:68:20:05:4f:f7:09:7b:79:b2:f4:ad:d6:ee:0a:3b:20:
c2:d9:40:fd:fd:9f:42:8d:eb:15:03:e0:c5:37:f8:6f:55:aa:
0d:8e:12:96:81:17:7e:23:83:dc:d4:99:88:1f:fd:b8:db:95:
18:b0:31:8f:56:6b:5b:af:88:79:83:0c:86:0a:e8:f2:57:e5:
c5:f6:ee:0c:5c:73:05:e9:41:d7:3b:ed:ff:d2:1f:d6:d2:6b:
45:14:b3:d8:db:64:28:07:21:ed:f0:b7:f6:a1:40:c1:b7:d5:
64:70:bc:15:d6:44:99:b3:f1:c3:3a:95:87:c2:5e:9a:04:5c:
f1:c7:92:02:9a:04:95:65:e4:33:89:94:0a:f4:71:42:54:c3:
ef:9b:f0:52:7c:d8:60:8c:a9:2d:77:cb:b8:51:ba:0a:e5:72:
7e:a4:90:b2:75:ac:8a:db:55:8a:0b:84:87:54:67:bd:dd:23:
bd:e5:af:d9:3b:8f:2e:04:a1:7d:d6:84:6b:f8:69:31:76:a3:
56:a3:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:09 2026 by rpki-client