
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
File: PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json)
Hash identifier: suf2PFHJZfGuMaE2oGJtvBQxGmWLJA+gStUE65/jTAs=
Subject key identifier: 48:3B:08:2C:41:D0:67:DE:D7:1C:7B:E5:2E:3E:38:DD:37:6E:18:5B
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial: 05DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
Manifest number: 05D2
Signing time: Thu 16 Apr 2026 22:57:24 +0000
Manifest this update: Thu 16 Apr 2026 22:57:24 +0000
Manifest next update: Thu 23 Apr 2026 22:57:24 +0000
Files and hashes: 1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: N37yUtl8S/VB+9nhwqd5+i1Z9tf6SdynVuXe6XVJmz8=)
2: EC7B7E82DFD811F08F00FF64536F56BC.roa (hash: GBcRPAk26rh6dyuaJcennk1M9baT+ZU2RXBW85It44s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499 (0x5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Validity
Not Before: Apr 16 22:57:24 2026 GMT
Not After : Apr 23 22:57:24 2026 GMT
Subject: CN=69e16954-3bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:c7:b0:e9:fa:f3:79:b7:3b:bf:25:6a:d5:
1e:8c:db:af:5f:ad:0a:3b:40:1d:d1:84:41:17:35:
a0:70:b3:db:66:e5:33:2a:0a:74:d2:55:f2:2c:b5:
fe:0c:20:bf:fd:00:e0:94:ea:df:44:c5:11:f7:57:
0a:50:df:84:b0:a1:46:c7:f4:19:ef:21:ab:78:55:
9e:a0:ef:af:fc:8a:f0:87:eb:50:0f:41:a9:1d:55:
b8:09:91:ce:8a:b5:08:46:66:f7:79:08:de:4a:be:
94:d7:47:4c:2d:66:b2:04:e8:fd:df:50:87:45:2c:
96:cb:be:a8:ad:1e:ba:2e:76:6b:33:5c:d3:99:30:
9a:b0:3c:54:a8:04:ce:4e:42:62:cd:18:02:23:3f:
80:66:a8:5b:11:65:ed:fb:17:dd:23:e3:c7:ab:14:
bf:a9:f9:70:c7:ee:1f:d7:3d:e4:68:c7:f9:ee:64:
ae:c8:46:36:59:1b:9d:75:d2:ec:04:f0:27:6e:94:
de:ea:d5:f2:c8:48:24:39:72:76:f2:84:1c:fd:26:
10:9b:83:7a:fe:c7:1f:73:ba:06:0a:87:73:d8:84:
a5:07:3c:36:2e:24:79:c6:f2:4b:d3:3a:cd:ca:d3:
26:61:bb:00:bc:ee:9f:4f:41:68:e5:7f:45:18:68:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3B:08:2C:41:D0:67:DE:D7:1C:7B:E5:2E:3E:38:DD:37:6E:18:5B
X509v3 Authority Key Identifier:
keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a1:6a:ab:cc:64:27:94:9a:ba:2a:d8:2e:26:5f:42:b0:e3:
5a:87:65:7c:ab:3c:84:db:76:07:6c:4b:5c:74:1a:80:ba:59:
b0:37:d4:ff:dd:66:22:3c:74:0c:e7:22:3b:17:0d:6d:0c:37:
c5:a8:dd:2d:5f:02:b5:7f:cb:13:a5:a0:26:1b:9b:66:61:f0:
95:2e:4a:18:de:62:89:bc:6f:90:58:c2:82:3f:11:a2:06:f8:
95:f4:42:bb:46:40:04:c3:1f:f4:59:45:79:51:41:31:10:8c:
a4:13:02:a5:54:6c:39:96:15:cf:0f:70:1e:9e:4f:b6:1e:9a:
45:61:22:31:78:7c:ab:be:ae:ea:23:9e:28:29:6e:46:95:ba:
88:78:40:4b:e2:b6:fe:9b:16:84:59:77:1e:0b:4a:78:65:b3:
9e:23:f7:24:e2:da:b5:aa:74:01:c5:41:a4:f7:0b:fe:ae:90:
9d:40:6c:7a:87:14:43:92:ea:1d:3a:a2:02:b4:e2:d7:9f:10:
99:26:de:90:73:44:70:d5:06:bd:82:e0:6a:5f:d5:92:e9:bc:
ee:26:74:21:55:8f:1f:5d:b1:c7:d2:82:a7:bf:ad:50:74:28:
dc:bd:9e:9f:a3:88:d9:b8:79:40:b3:38:15:11:d9:d1:15:95:
6c:9d:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:09 2026 by rpki-client