
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json)
Hash identifier: /CRx4/yiYXGL+Tgb0GlZ6QRjuzMkgpK7KIW1M2bYr78=
Subject key identifier: 62:D5:98:00:14:7E:A1:44:D1:91:20:E5:51:B4:12:ED:11:6E:46:8D
Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
Manifest number: 012F
Signing time: Fri 17 Apr 2026 05:14:26 +0000
Manifest this update: Fri 17 Apr 2026 05:14:26 +0000
Manifest next update: Fri 24 Apr 2026 05:14:26 +0000
Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: sQMEtnKwcuaBtUEkKucxy2uTdi0tk01SMmR7pIZsrmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Validity
Not Before: Apr 17 05:14:26 2026 GMT
Not After : Apr 24 05:14:26 2026 GMT
Subject: CN=69e1c1b2-8028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:c0:39:8e:14:e9:e8:f5:96:d0:56:bf:4a:
24:8e:29:b8:38:eb:f6:73:4c:61:22:a6:66:27:c4:
cf:e3:ea:7a:c6:97:69:28:0f:16:d9:b8:20:0b:97:
cd:d8:2c:1f:c6:f1:48:73:47:1c:4a:bd:3f:20:a6:
56:82:4b:8a:1e:e5:98:51:de:1e:64:79:4b:46:9f:
55:da:34:16:f4:7b:e0:d8:53:ec:aa:2c:46:ba:f6:
bf:76:5e:a7:47:c1:9e:9f:3a:c0:0f:c7:ee:37:22:
3a:87:b2:fa:d2:8f:9e:44:41:63:76:6c:c3:be:b9:
3c:e6:e3:15:ba:a1:2b:39:e9:ff:52:0b:b3:4d:c4:
5d:b9:99:74:b0:0f:1b:ca:37:63:f1:ce:fe:8a:2c:
75:f0:31:7e:a6:60:95:dc:df:9b:d2:84:39:09:0b:
6a:85:b3:32:93:45:98:86:99:c5:da:8b:18:ba:6d:
e8:cc:fa:3c:52:e2:ed:e6:29:e9:c0:f5:36:42:98:
4e:71:fc:1a:8a:51:9d:59:73:f2:ac:43:6d:fa:ea:
86:02:b4:4c:c9:45:0c:4d:0a:c8:fe:ed:de:e9:b5:
1f:74:ee:26:b9:0c:ac:c7:19:5f:28:4b:c7:1f:c1:
28:d4:91:20:72:a1:40:bc:1f:af:89:b4:3e:53:80:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:98:00:14:7E:A1:44:D1:91:20:E5:51:B4:12:ED:11:6E:46:8D
X509v3 Authority Key Identifier:
keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:aa:f2:f5:43:ed:34:42:7f:3c:90:92:01:8f:0f:94:0d:ed:
c7:f8:38:d5:eb:e3:3d:ba:e3:92:c1:08:be:33:4d:25:90:78:
f3:6d:b6:22:29:28:05:8f:f3:3e:39:ca:88:15:a5:1f:19:90:
07:46:47:8c:be:ac:cf:26:0f:f7:01:82:79:15:c3:23:55:7c:
32:a8:34:90:3e:ae:a3:13:15:3b:80:db:09:12:e9:2d:df:c6:
6d:87:35:10:6c:66:a2:13:46:5a:3b:ba:33:22:8e:38:d7:e8:
e0:3e:58:c1:c1:1d:e8:f8:d9:4f:7a:61:f1:d0:ab:93:01:d5:
59:f0:f7:37:fb:83:74:1f:3f:7f:10:32:b2:e3:c5:2d:c2:ab:
4b:8d:90:25:a0:3e:91:1b:95:93:c4:3e:f3:f1:db:2d:56:6d:
1d:0c:87:c8:6e:bc:7c:94:bf:10:90:83:f7:cf:20:17:4d:a6:
91:22:08:33:3e:7c:4e:87:fc:9e:e6:6e:7a:9c:86:4d:b3:b8:
68:8e:eb:18:f4:3d:51:14:e5:c7:1d:c7:01:28:d0:ee:f2:4a:
59:89:c1:29:3a:c5:5f:f9:15:ed:a2:85:b3:86:37:f1:b0:2f:
40:22:23:3e:8e:1c:37:bf:56:df:50:db:af:44:4e:7e:33:97:
60:de:0b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:35 2026 by rpki-client