
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
File: ZwbZhOcxaBICGI0pntNfAFsBdYA.mft (raw, json)
Hash identifier: OssgU44opokerKcyxmEeLbIGHovHI/bfoM3Cz3vaX2s=
Subject key identifier: 67:EE:37:BF:BF:F9:D0:E1:66:66:02:88:4B:12:72:C2:DA:5B:CC:10
Authority key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
Certificate issuer: /CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580
Certificate serial: 352D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
Manifest number: 352D
Signing time: Thu 16 Apr 2026 14:41:06 +0000
Manifest this update: Thu 16 Apr 2026 14:41:05 +0000
Manifest next update: Thu 23 Apr 2026 14:41:05 +0000
Files and hashes: 1: ZwbZhOcxaBICGI0pntNfAFsBdYA.crl (hash: DaXjDupG/RXN5U8iA1KMpKkY8+DZaqy6NPbXZLq4IGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl
rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13613 (0x352d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DCDA, serialNumber=6706D984E731681202188D299ED35F005B017580
Validity
Not Before: Apr 16 14:41:05 2026 GMT
Not After : Apr 23 14:41:05 2026 GMT
Subject: CN=69e0f501-66f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:0f:39:9a:b7:af:02:a9:d5:5c:1b:86:7d:
c0:bf:f9:75:4b:83:b1:49:a5:b5:bc:0d:79:50:3d:
05:95:68:8a:52:80:14:5d:e7:34:8a:28:25:b0:e9:
53:fa:7a:4e:39:d3:8a:05:47:6f:6a:00:ab:09:5c:
05:af:7e:d8:77:ad:39:62:05:48:2f:79:83:81:35:
78:2c:2b:3a:84:8f:3c:1c:70:b5:a7:eb:56:a0:d2:
2f:39:e6:5d:a9:6a:5e:9b:6a:3a:37:3d:82:77:81:
4e:43:a7:93:78:7a:47:88:3b:9b:c8:b8:5a:e7:3d:
ab:77:64:de:10:98:b2:f2:0e:5c:54:80:b9:52:04:
f5:a0:c9:7a:cb:f7:3e:61:1c:bf:cd:29:d8:27:da:
c8:3a:3a:a8:24:a9:4a:54:5a:4f:4f:b4:ba:b0:87:
cf:dd:1f:49:3e:25:ca:25:62:16:fe:3f:f7:b3:bc:
6d:49:a7:b5:68:b8:07:d4:d0:7a:07:aa:33:b8:59:
ce:54:f1:bb:15:35:ec:ff:fd:3c:91:39:6b:7a:70:
83:6c:96:75:65:15:a9:59:2c:bb:4d:6e:55:40:a7:
d3:79:ce:d2:05:4d:5c:2e:94:e7:76:04:ad:f7:7f:
ab:6e:72:f2:a4:6a:c5:5d:26:ec:f5:3c:05:aa:f2:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EE:37:BF:BF:F9:D0:E1:66:66:02:88:4B:12:72:C2:DA:5B:CC:10
X509v3 Authority Key Identifier:
keyid:67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:b1:3d:85:ec:0d:be:83:0f:70:e0:d5:3f:b2:0e:65:92:e6:
20:b7:42:b0:74:e0:a2:c0:f5:98:a4:3f:68:1c:63:03:30:ab:
94:83:53:ec:a6:25:f8:aa:2d:ac:07:95:86:1a:75:31:ad:ec:
1b:31:79:ee:54:e4:a2:47:65:da:39:b2:84:54:76:fd:09:26:
49:1b:7d:14:c7:16:00:a6:95:5a:70:4c:78:06:06:ec:b0:40:
4a:a3:28:3a:e2:48:0d:8e:c9:2e:6e:27:11:e2:45:fc:ec:5d:
09:f9:77:c5:6a:3d:8e:1a:7c:df:93:ca:bc:6f:ef:d2:3b:3b:
6d:d7:d6:5f:3a:fd:cc:02:8c:eb:f3:60:fc:50:1c:9e:df:a2:
02:73:7c:0b:1a:1c:31:05:6e:d1:40:ac:3b:61:e2:d5:af:75:
e3:e3:f0:84:59:e1:ba:36:b1:c0:ca:9d:f5:3c:a9:4d:d4:6d:
5a:ec:bf:27:34:74:46:7a:60:d9:a0:18:26:d2:d8:dd:39:fd:
71:6d:fa:cc:95:50:7c:ef:72:61:1e:f0:56:77:ac:b7:10:62:
99:e2:49:bb:e0:e4:8f:ad:6b:ac:d2:2d:18:d3:8e:9a:e8:c6:
4b:36:07:e5:c2:fb:98:8a:ea:76:82:3a:30:8c:5e:c1:64:83:
58:5c:e5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:11:15 2026 by rpki-client