
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
File: pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json)
Hash identifier: uIDnmV9lR8XXiR7qti9VhbQ2v+DlV0deNXVhyNsUJug=
Subject key identifier: D6:26:CE:9E:1E:88:B2:9F:44:4A:4C:82:24:1A:14:F5:3A:AB:E4:83
Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Certificate issuer: /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
Manifest number: 011A
Signing time: Fri 17 Apr 2026 05:32:24 +0000
Manifest this update: Fri 17 Apr 2026 05:32:23 +0000
Manifest next update: Fri 24 Apr 2026 05:32:23 +0000
Files and hashes: 1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: 3CTTMNz/Ck5W5B9fkoWjdP+2LoZm9/S1rphV6uGbY5I=)
2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: WPfdAXefVfZ1Z8B0KAdDL3U8aL68A120XQbVokS39W4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Validity
Not Before: Apr 17 05:32:23 2026 GMT
Not After : Apr 24 05:32:23 2026 GMT
Subject: CN=69e1c5e7-cdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:8d:2b:09:36:ff:ad:58:2e:c2:03:19:23:
b1:b9:d7:b1:eb:12:4a:6c:f7:80:51:bf:83:33:4f:
c1:5d:b7:cd:e7:ba:4e:8d:5b:90:6a:c1:c0:13:70:
fd:06:ba:75:98:28:86:cb:94:2a:bc:a7:3e:04:c8:
81:a1:e1:21:c5:28:7f:82:39:cc:cf:94:96:5e:68:
3a:3d:aa:ab:46:6d:70:ed:1b:4c:6b:67:2c:5c:d2:
e5:02:76:6c:e4:ab:5b:68:91:5e:18:23:59:8e:48:
04:00:8c:9e:b8:06:3c:8c:68:5e:ad:2d:b4:94:42:
e3:cc:f4:5a:28:4e:67:cc:0f:ca:60:42:f5:51:70:
18:51:0a:46:84:d7:fd:f0:a8:96:a6:1f:4d:21:58:
5a:67:87:10:60:ba:80:3b:8a:c6:91:7a:d1:07:39:
6c:f1:28:5a:dc:a7:d4:a2:ba:41:00:20:90:3e:91:
b8:b6:2b:8c:df:56:75:60:cd:80:af:ec:76:11:c7:
76:3d:5e:26:b5:9e:01:2d:84:c9:dd:01:b6:93:fb:
75:c2:d0:7c:2b:a1:6c:c9:ce:2a:2b:6d:21:e6:b2:
a6:1e:74:9d:51:b5:ca:f9:7d:e7:6a:e0:bb:72:ea:
30:90:19:07:a3:47:95:fd:65:96:16:3e:81:6b:94:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:26:CE:9E:1E:88:B2:9F:44:4A:4C:82:24:1A:14:F5:3A:AB:E4:83
X509v3 Authority Key Identifier:
keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:8b:58:d7:76:d2:4d:ef:1d:e2:32:62:f6:77:bf:c6:0b:79:
3a:b3:b4:1a:47:5b:30:91:55:71:11:3b:cd:77:85:6b:6f:c5:
e9:8d:2a:48:25:55:0e:8a:af:5f:4c:45:db:96:4e:c1:98:94:
50:dd:bc:e6:74:4a:a7:db:4a:5c:8f:29:36:ba:2e:59:94:1a:
d5:b0:15:ca:9e:f1:dc:ab:f0:2b:33:48:c5:08:42:67:7f:63:
e9:c7:3c:43:fe:5e:f0:77:8e:5f:57:5a:b3:34:75:b3:b5:6c:
1d:36:08:f9:76:b0:8a:9b:ed:f1:d2:7d:46:dd:17:3b:2d:56:
78:d4:21:29:89:dd:73:b1:6a:5b:07:57:5c:ff:79:b8:7d:74:
f8:f6:79:5b:98:b5:3a:4b:cd:dd:82:6e:0f:86:4a:81:48:14:
76:29:ee:c4:27:37:44:01:ad:b3:a6:b0:ad:a5:cf:21:ed:f3:
df:c1:7b:0d:1e:7a:01:af:8f:2e:58:a6:ed:e5:20:f2:1b:d2:
a4:be:72:a7:a7:ca:91:6d:d7:1b:a5:17:36:e7:33:83:51:01:
9e:11:d0:73:1b:15:be:f3:d8:a8:e4:5e:50:bc:29:6f:0a:5a:
3e:b1:6a:8b:dc:0e:e6:bf:12:05:65:4a:ef:52:3b:01:66:1f:
77:59:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:35 2026 by rpki-client