
$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
File: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json)
Hash identifier: ZhFEeQtVW+YT4/Qa7EkPC08lmeImAq7Xr5w6vN+0YXo=
Subject key identifier: 92:85:A5:D2:9F:42:57:6E:63:47:80:21:7F:C8:48:BF:F4:FD:BD:D2
Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41
Certificate issuer: /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41
Certificate serial: 0720
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
Manifest number: 0715
Signing time: Thu 16 Apr 2026 21:54:18 +0000
Manifest this update: Thu 16 Apr 2026 21:54:17 +0000
Manifest next update: Thu 23 Apr 2026 21:54:17 +0000
Files and hashes: 1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: Ojaz07K2SaRHdtVO02bbotGlxkxchcvzNj3knnnAOhY=)
2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: kfNHjmM4llhwfmGMMRHrrJHm+acq8kgyjCe1MOK7NGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl
rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1824 (0x720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91795CA, serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41
Validity
Not Before: Apr 16 21:54:17 2026 GMT
Not After : Apr 23 21:54:17 2026 GMT
Subject: CN=69e15a8a-5b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:0f:fa:fc:a9:70:5d:d6:30:5e:72:94:b9:
18:69:2d:e1:24:ad:36:f6:45:11:fa:f5:b3:10:43:
59:a7:36:8f:00:fa:bb:84:51:2c:a4:b1:5e:da:60:
cc:cf:b1:cc:62:8d:e3:f2:57:cd:dc:59:a0:e6:12:
5a:ee:41:e4:6c:22:07:2a:52:24:78:24:3e:52:fa:
5b:ce:b3:7f:f6:6f:48:d3:10:7c:ad:30:39:3c:90:
a8:a9:0f:4e:1e:67:20:a5:15:c4:70:62:29:2b:ec:
86:92:6f:96:31:e7:5e:76:76:56:6f:ca:a1:f4:54:
9e:02:a9:fc:8d:60:75:fd:b6:c8:54:7c:93:ed:03:
0a:f3:5e:5e:5e:ae:69:df:d3:ff:20:b3:ea:d6:35:
0f:33:26:9b:d3:78:d4:f7:d3:b0:a9:13:b5:5f:5b:
fe:da:41:57:ff:fa:ec:ea:8f:00:3f:60:c0:f5:81:
92:fe:29:d9:fd:8a:1d:2d:53:10:7f:91:6e:4b:c5:
c1:2f:25:ad:9f:36:ce:6a:86:26:52:b1:03:47:75:
37:5d:09:db:a1:35:d6:b1:d6:94:b1:18:ca:94:11:
b3:5d:61:40:ee:1b:f6:66:d9:c1:15:81:ff:1f:80:
c7:4e:89:c7:2f:c6:a8:aa:fc:ec:f2:81:2e:a3:c0:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:85:A5:D2:9F:42:57:6E:63:47:80:21:7F:C8:48:BF:F4:FD:BD:D2
X509v3 Authority Key Identifier:
keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:fc:ea:ee:0f:cd:60:6d:c9:bd:01:52:97:83:11:23:6b:c2:
33:0c:d6:a8:4c:9a:89:d7:ba:39:b2:9c:7a:a5:cf:2f:15:d0:
23:8a:27:61:78:17:8d:1f:83:de:3c:8f:fd:46:75:79:74:f0:
4b:9b:2f:31:16:83:8b:bd:f7:c6:07:b2:9f:1d:e7:da:d9:22:
f4:ba:75:a7:d0:c4:ca:fe:c4:d8:5a:1c:59:1f:c7:a8:73:fb:
dd:89:c9:4c:d7:9f:13:b8:d2:4c:26:b2:d5:5b:a9:25:2f:d4:
6e:fd:7c:d8:09:68:5f:56:f1:92:9a:94:a9:c9:34:1c:df:1d:
d3:98:e2:c5:5a:3c:77:4a:13:02:39:8a:9f:05:4e:fc:18:c9:
68:d6:a7:a0:c3:bb:3e:b6:fc:4b:ed:3b:a4:12:48:31:f0:a5:
1c:8f:80:61:d5:a1:af:a8:7d:31:3c:71:c3:03:42:ee:cc:32:
87:81:32:58:53:50:73:28:e7:d4:0e:82:d7:de:60:fa:a1:9c:
48:fb:b2:7c:88:4e:4c:34:6e:44:29:b3:47:8a:d9:63:e9:51:
8b:c0:1c:88:53:aa:99:c0:dd:c9:eb:f2:e7:b3:56:6a:e4:51:
e3:da:c6:a5:dd:95:49:6a:c8:6a:fd:ed:c0:aa:6f:55:96:40:
db:c4:00:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:23 2026 by rpki-client