
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json)
Hash identifier: XCg8d0BY23v7YMD+kQSl6kzdcIIiPfveUnuNnBGkKrk=
Subject key identifier: 3F:E8:E2:07:91:DB:73:01:45:74:15:A4:6F:5C:A6:BA:E4:E4:74:38
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial: 0E1F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
Manifest number: 0D77
Signing time: Thu 16 Apr 2026 16:46:11 +0000
Manifest this update: Thu 16 Apr 2026 16:46:11 +0000
Manifest next update: Thu 23 Apr 2026 16:46:11 +0000
Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: oEM5Y08V7eObS/Mog9rMUqHBggf3hoaTcLNjgb7FByA=)
2: CCFA7454F04611F087BCEF76546F56BC.roa (hash: HCXtiXKgHVhMpaTnQurvVC//OqVn5AKyKkMTKhQsmjM=)
3: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 8GqLPEK+8+LiDMs6TXQYM/u72383yuqkd4BLQepKcQg=)
4: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: /3UCOZyy7IRWOhuU35PtgiVAbTlyg5NR99z+gedGo9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3615 (0xe1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Validity
Not Before: Apr 16 16:46:11 2026 GMT
Not After : Apr 23 16:46:11 2026 GMT
Subject: CN=69e11253-ccac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:26:91:26:25:b9:43:6a:bb:6d:3a:a5:d9:
38:f1:7a:30:ba:1e:d5:69:67:cb:ac:1f:e0:02:4a:
f7:39:f4:01:64:e9:e3:67:5e:6b:0f:c5:b2:7b:1b:
4d:36:ea:32:41:6e:19:fc:cf:f7:9b:14:e7:65:bb:
25:28:70:de:8a:4f:eb:67:f0:34:2f:9d:bf:11:13:
eb:8a:f2:a2:f4:67:ac:df:69:ea:b9:ac:09:7a:5d:
75:ee:91:7a:eb:a6:a5:a2:24:ba:fb:b4:18:7d:a3:
07:32:b6:9d:ec:42:e3:6e:c1:ab:92:87:2f:32:df:
13:9b:e6:d9:3e:f5:c9:2a:38:4e:b6:72:d8:96:cb:
2c:26:29:f4:93:b4:7a:5f:32:bf:6b:7f:52:56:bb:
b2:75:9c:e4:ee:c3:e2:7d:5f:0f:98:7c:5e:4a:c2:
06:1f:bd:40:0c:98:cb:98:26:10:dd:37:3e:a0:48:
d1:a7:d8:c1:5d:a1:2d:8c:11:f3:bf:6b:85:d4:85:
7b:f8:f4:bd:92:f4:82:64:ac:fe:34:eb:a8:d5:2c:
48:ed:ae:72:8c:27:76:1c:b1:7d:eb:4e:93:58:22:
e9:6c:96:cf:95:fe:8d:51:b6:71:b8:73:36:6d:f9:
45:da:0a:38:9e:b1:23:59:bc:fc:6b:1e:d6:b4:54:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E8:E2:07:91:DB:73:01:45:74:15:A4:6F:5C:A6:BA:E4:E4:74:38
X509v3 Authority Key Identifier:
keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:cf:0d:f8:06:88:97:af:4f:73:75:f2:59:98:31:a6:f1:a1:
7d:f4:f0:7c:56:70:61:9d:02:13:92:7f:de:b3:87:69:93:03:
d5:b3:ae:fe:75:a6:7c:83:53:d4:61:1b:0f:82:26:9f:1b:7e:
77:41:4b:82:96:93:50:c3:1f:53:1c:ea:c2:39:65:87:d6:01:
73:18:69:e5:0c:9c:43:21:1f:32:0b:4b:bd:c8:35:c3:03:01:
94:ce:39:e4:7a:79:b8:10:c7:d1:70:8d:8a:30:21:0a:fb:02:
3a:62:2f:48:0d:37:ac:49:e0:0e:11:64:01:d2:5b:2a:a9:a4:
a5:83:1a:a7:7f:71:4a:4b:74:2a:f2:f4:e6:de:8d:b4:f1:5f:
bf:e6:16:07:2d:39:c9:61:e3:32:1c:b0:1e:cf:6d:b3:2f:64:
da:ae:ab:5a:9c:f3:a1:fa:f8:e4:45:47:a8:a6:05:19:a3:1f:
8b:cd:d4:4c:a1:5e:cb:50:5b:ef:50:01:da:b0:4a:e6:b4:02:
2f:dd:9e:e4:23:68:50:71:d4:46:2c:0f:19:04:a6:d1:e8:e9:
0c:83:39:37:c8:16:22:d8:65:2a:36:58:c8:40:ae:19:65:c9:
c2:c1:b9:86:3f:8a:64:b2:87:d3:91:6b:57:d6:3b:4f:14:af:
f6:b5:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:50 2026 by rpki-client