
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json)
Hash identifier: nxDb0ViLYdz5rZji5qOeyE8e2GxsaTBY1rIbAatCcek=
Subject key identifier: 60:C6:83:94:E2:24:A2:E8:E9:A2:05:DE:95:87:11:5E:5C:31:EC:85
Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Certificate serial: 1647
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
Manifest number: 163D
Signing time: Fri 12 Jun 2026 16:40:14 +0000
Manifest this update: Fri 12 Jun 2026 16:40:14 +0000
Manifest next update: Fri 19 Jun 2026 16:40:14 +0000
Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: nkcv8VwDWF2fEBC36NlfXUV8QJ5Do0tdAyLJjoXgGrY=)
2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: XBmIpP4qinSeA1jzcuT6oilOKIYCzxkHKIGJU/Du2l4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:40:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5703 (0x1647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Validity
Not Before: Jun 12 16:40:14 2026 GMT
Not After : Jun 19 16:40:14 2026 GMT
Subject: CN=6a2c366e-a58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:7f:ac:22:d3:50:38:5e:92:1b:49:e4:6c:
82:da:67:4f:d7:a3:80:5f:e6:d9:a3:13:27:1a:03:
02:b5:d5:17:29:4e:c3:3c:6b:2d:2c:30:36:4f:1d:
15:c4:d2:28:7f:bf:3f:c2:75:9a:cf:1a:07:95:55:
f4:fa:36:f6:81:97:38:6a:a3:bc:ce:27:67:ab:3b:
a2:bb:4e:45:e0:4e:38:75:36:c6:45:3c:47:be:8c:
88:ef:a3:84:8b:f9:42:21:63:79:35:3d:90:2f:65:
cf:a6:9a:10:83:a4:fe:0d:34:e7:19:c5:7d:1c:d3:
4b:48:26:d7:28:c9:6d:7e:a4:41:97:f9:08:28:17:
9a:02:ea:45:68:45:42:46:82:71:2c:63:6d:5b:b1:
97:58:52:47:12:e6:02:43:b8:42:09:15:57:25:90:
a5:69:ba:e8:45:1f:d2:2d:5c:74:d1:a3:50:e9:28:
65:17:3b:48:4b:a7:2d:36:cd:fb:5d:cd:8f:7d:36:
fe:b8:b5:df:44:06:3f:83:ab:72:bc:84:26:4b:72:
74:b8:5d:e6:9d:e3:5c:1c:9d:89:0d:0f:85:43:7b:
70:58:25:1b:30:fb:1f:38:4a:0c:a2:54:f0:31:48:
fa:8a:ec:9d:f2:e5:00:07:a8:56:d4:b4:2f:f8:7c:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C6:83:94:E2:24:A2:E8:E9:A2:05:DE:95:87:11:5E:5C:31:EC:85
X509v3 Authority Key Identifier:
keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:85:ff:9b:7f:94:0b:1e:5e:ff:1e:c8:d3:9a:50:3f:6f:b9:
da:93:5e:b5:8b:46:ea:1d:b7:78:85:f2:23:42:28:2e:f9:a3:
12:c2:7b:6a:0d:dc:cc:54:60:71:05:8e:bb:92:a3:e7:e0:78:
0d:d7:b9:7f:86:e6:12:a7:2d:00:a6:a5:44:af:49:db:c1:88:
8b:72:f0:e1:17:a6:68:94:85:df:75:f0:4a:41:dc:37:71:ee:
70:9d:66:17:52:a2:89:a1:28:5e:41:4d:16:37:f0:40:77:20:
9e:b1:73:66:d8:56:31:68:50:b9:df:aa:3f:11:07:92:40:1b:
5a:0c:64:05:5a:65:a3:0b:d8:b7:4a:b2:d8:2e:e1:39:bb:a3:
48:91:1a:9a:d1:cb:78:f0:2f:77:33:a9:8e:f9:87:3c:9c:98:
26:86:84:05:ca:69:ca:73:7d:4c:40:87:2c:96:97:23:74:c0:
e6:ca:09:9e:f4:35:a3:7b:88:e1:50:d7:d3:8d:22:26:99:7c:
5d:d1:bb:ad:83:7e:a5:2e:9d:ce:d1:00:e8:73:72:55:d5:ec:
44:61:88:12:9e:50:f2:79:56:47:5a:19:3c:d9:21:5e:82:71:
08:2b:c8:03:a4:52:8c:1e:31:4a:cd:30:cc:ee:77:de:35:14:
df:a9:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:46 2026 by rpki-client