
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
File: Kz24XvlSI40ZLc8XDua-scjbA6k.mft (raw, json)
Hash identifier: nGxntXTIARiHBUtt5R94lymhq/gzIURxG0JY/nvrncE=
Subject key identifier: 5C:2E:76:D0:3C:5C:AF:82:E8:F2:67:B1:0E:C6:27:99:86:47:FD:97
Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
Certificate issuer: /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
Manifest number: 0125
Signing time: Fri 17 Apr 2026 05:25:17 +0000
Manifest this update: Fri 17 Apr 2026 05:25:16 +0000
Manifest next update: Fri 24 Apr 2026 05:25:16 +0000
Files and hashes: 1: Kz24XvlSI40ZLc8XDua-scjbA6k.crl (hash: hcXwV3/udqt/ixV3xpERFuNtefOGdfK1W64HFpBv4iY=)
2: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (hash: 5c1TL3vggB7b/Lb9+UAnKonPpLIhOsGZdJvjdfxywjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl
rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F525, serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
Validity
Not Before: Apr 17 05:25:16 2026 GMT
Not After : Apr 24 05:25:16 2026 GMT
Subject: CN=69e1c43d-9709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:0a:ad:a1:f7:55:30:48:cb:79:28:79:2f:
1f:3e:2b:9f:07:b6:17:8f:3f:f3:c5:9e:e1:10:59:
80:a5:b2:01:95:cc:17:b5:25:0b:42:a8:01:9f:9e:
42:b5:be:4b:f8:f1:fd:4f:28:75:65:ca:95:b5:93:
d8:7a:2e:e3:78:95:b9:3d:28:95:23:83:6c:9f:27:
6b:95:49:0f:df:16:e3:95:f3:5c:92:c1:12:d9:bc:
33:b9:22:2b:8d:64:7d:29:f6:05:f1:1c:6a:5d:cf:
9f:5f:6f:12:a6:b2:0d:15:f2:68:20:91:2f:e8:72:
c3:91:a8:19:2e:6c:60:65:da:ae:6c:63:ac:a1:87:
ac:9d:ae:58:08:00:f1:6b:00:97:eb:f1:2b:a3:d3:
f5:21:c4:5a:4d:20:38:9e:65:6e:10:9d:69:0e:bc:
4a:13:cc:a1:13:86:51:d5:84:32:d3:1f:07:fd:ce:
5a:92:21:63:73:e3:5e:f2:b3:a1:d7:b8:a1:49:43:
72:01:41:da:88:17:ac:ac:bf:aa:33:0f:32:4e:17:
21:d5:53:38:9b:36:4c:18:2d:19:a7:20:28:80:49:
13:80:2d:18:c9:b6:aa:ba:ef:41:7d:43:aa:26:f1:
8c:59:78:8c:02:17:95:96:cb:3e:9e:36:ab:f4:46:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:76:D0:3C:5C:AF:82:E8:F2:67:B1:0E:C6:27:99:86:47:FD:97
X509v3 Authority Key Identifier:
keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:54:5c:53:eb:ca:77:f8:e3:0a:54:de:b0:74:e0:83:6c:11:
27:c4:e3:ea:37:eb:02:2b:8d:41:66:ac:7d:7f:a8:5b:54:69:
22:b7:7a:8d:08:1a:c9:ad:84:6a:db:86:2d:59:9a:22:fe:1e:
ec:21:00:59:6c:5a:bc:a3:1b:61:66:54:72:65:d2:4c:87:dd:
3f:07:24:d9:5e:25:e7:09:b7:9b:59:af:2b:cd:c4:d3:36:cc:
26:73:79:2c:9b:8d:79:2e:e5:a5:d5:c7:fa:e5:5a:f1:4a:9a:
26:65:4b:91:50:de:aa:53:ef:71:94:b7:80:df:05:53:68:ef:
17:ed:92:2a:ac:d4:ea:f7:b7:5e:45:cb:4b:93:ed:42:9f:fd:
2b:49:56:b7:69:d0:b4:09:9f:91:ae:1a:72:af:de:3c:f2:a3:
8c:6a:cb:58:ff:82:a1:3f:11:c3:2b:38:4d:35:05:7e:e5:7a:
d1:cf:12:d4:65:f0:d4:cf:0d:dc:15:ac:f1:16:34:a2:f4:ab:
eb:0a:e0:e3:b0:40:da:75:83:32:78:03:f4:94:e9:22:47:52:
13:04:ed:8d:8d:5b:77:a6:04:0c:1a:ee:fd:97:49:fa:a2:35:
95:4e:74:7d:9b:c3:81:0a:25:00:18:42:00:d0:1a:ed:96:6d:
42:81:d1:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY1MjUxMTAvBgNVBAUTKDJCM0RCODVFRjk1MjIzOEQxOTJEQ0YxNzBFRTZCRUIx
QzhEQjAzQTkwHhcNMjYwNDE3MDUyNTE2WhcNMjYwNDI0MDUyNTE2WjAYMRYwFAYD
VQQDEw02OWUxYzQzZC05NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNYKraH3VTBIy3koeS8fPiufB7YXjz/zxZ7hEFmApbIBlcwXtSULQqgBn55C
tb5L+PH9Tyh1ZcqVtZPYei7jeJW5PSiVI4NsnydrlUkP3xbjlfNcksES2bwzuSIr
jWR9KfYF8RxqXc+fX28SprINFfJoIJEv6HLDkagZLmxgZdqubGOsoYesna5YCADx
awCX6/Ero9P1IcRaTSA4nmVuEJ1pDrxKE8yhE4ZR1YQy0x8H/c5akiFjc+Ne8rOh
17ihSUNyAUHaiBesrL+qMw8yThch1VM4mzZMGC0ZpyAogEkTgC0Yybaquu9BfUOq
JvGMWXiMAheVlss+njar9EbFPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwudtA8
XK+C6PJnsQ7GJ5mGR/2XMB8GA1UdIwQYMBaAFCs9uF75UiONGS3PFw7mvrHI2wOp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FMTg3MTc3Njg0
RUQxMUVGQjlGRjJENUFDNEY5QUUwMi9LejI0WHZsU0k0MFpMYzhYRHVhLXNjamJB
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0t6MjRYdmxTSTQwWkxjOFhEdWEtc2NqYkE2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjUyNS9FMTg3MTc3Njg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi9LejI0WHZsU0k0
MFpMYzhYRHVhLXNjamJBNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjFRcU+vKd/jjClTesHTgg2wRJ8Tj6jfrAiuNQWasfX+oW1RpIrd6jQgaya2E
atuGLVmaIv4e7CEAWWxavKMbYWZUcmXSTIfdPwck2V4l5wm3m1mvK83E0zbMJnN5
LJuNeS7lpdXH+uVa8UqaJmVLkVDeqlPvcZS3gN8FU2jvF+2SKqzU6ve3XkXLS5Pt
Qp/9K0lWt2nQtAmfka4acq/ePPKjjGrLWP+CoT8Rwys4TTUFfuV60c8S1GXw1M8N
3BWs8RY0ovSr6wrg47BA2nWDMngD9JTpIkdSEwTtjY1bd6YEDBru/ZdJ+qI1lU50
fZvDgQolABhCANAa7ZZtQoHRVg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:17:28 2026 by rpki-client