
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
File: ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json)
Hash identifier: Hs3m6fJ0EYZ3baGfpG+4SquPgiNjJp2YCdeTMtwG3Bo=
Subject key identifier: 49:7F:17:F1:DD:D2:F2:BA:67:7E:2C:AD:1A:23:14:D8:A9:CA:EC:28
Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Certificate serial: 08C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
Manifest number: 08AE
Signing time: Thu 16 Apr 2026 20:27:56 +0000
Manifest this update: Thu 16 Apr 2026 20:27:56 +0000
Manifest next update: Thu 23 Apr 2026 20:27:56 +0000
Files and hashes: 1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: aqNlZsjaNC2UAhldDtFtM8K7KKprleHofUfmdsWtWRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl
rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Validity
Not Before: Apr 16 20:27:56 2026 GMT
Not After : Apr 23 20:27:56 2026 GMT
Subject: CN=69e1464c-be6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:ed:c5:f0:ff:72:15:27:e4:8b:15:67:dc:
2a:ed:70:9d:2f:23:09:c1:72:c4:05:72:e8:10:80:
d6:a7:d0:28:f5:b5:4c:d9:bd:f3:84:cc:48:92:09:
23:80:88:5c:82:8b:e3:1d:2c:25:f7:95:62:d1:9c:
2d:50:94:9b:94:11:0c:cc:f2:ce:e5:02:ab:b1:22:
1a:8c:60:29:1f:9c:61:5b:01:54:0c:e5:51:c9:1f:
5e:e2:61:88:cb:50:54:60:f0:94:38:63:58:bc:ca:
d9:63:80:0d:d5:c5:e2:ff:a5:0e:c8:d9:75:42:28:
bd:8f:a4:bc:42:a6:75:d2:04:3e:39:c0:7f:95:75:
9f:90:bb:ed:e6:39:26:d2:c5:2d:1a:da:aa:6b:ed:
3a:f0:fa:ba:5a:4b:20:33:1b:6f:ad:77:a0:23:bb:
c4:0f:0d:c2:2b:20:0c:da:f5:0b:b1:95:9e:bd:c3:
68:0a:a6:dd:8c:9f:1b:9b:e2:fe:a2:e3:4b:38:68:
8e:6a:f3:3c:e3:cd:14:3f:a2:42:3a:93:97:5a:2a:
b9:26:0a:8f:38:7f:5d:20:49:f2:5c:da:3c:f0:97:
00:c7:38:92:7d:81:6c:23:52:0c:7a:4e:ff:ac:e0:
2f:2c:56:f0:55:a8:7a:43:26:9b:13:d2:df:13:82:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7F:17:F1:DD:D2:F2:BA:67:7E:2C:AD:1A:23:14:D8:A9:CA:EC:28
X509v3 Authority Key Identifier:
keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b7:7d:3b:95:3d:47:7b:37:cd:f4:be:8b:a1:e1:72:77:f0:
f4:72:18:6b:95:3e:22:71:5d:72:05:80:f7:3b:cf:54:08:42:
00:bb:b0:2a:7c:2f:0c:2a:ee:b4:fd:fc:18:6e:02:ad:36:eb:
7c:1d:52:83:37:1e:7d:81:60:6b:8c:2f:2d:91:7a:6d:0b:d7:
27:56:62:7a:2f:85:69:5a:47:8d:09:79:bb:3d:f0:14:52:32:
67:9d:51:4f:85:1c:da:1a:98:ed:58:57:68:50:87:90:96:e4:
8d:56:a5:e1:84:56:03:98:e1:5e:60:79:ae:6c:a5:ae:93:e3:
5e:e6:5f:7f:f3:5b:c6:66:0d:e1:d4:bd:88:b6:da:5c:6c:8b:
13:6c:dc:d9:7d:13:f0:55:57:1e:24:97:6f:4f:63:45:32:2d:
f0:12:f4:fd:d9:69:63:66:d9:a4:53:c3:32:b0:68:01:41:1f:
03:3f:d5:05:fc:06:bf:42:d9:99:5c:18:d6:f3:98:c6:94:73:
f1:81:5d:29:35:5c:67:21:66:b1:7d:0e:fe:cd:d3:44:4f:6c:
27:c9:82:6c:96:24:9b:fa:4f:f3:c5:41:49:c6:e0:b3:b7:38:
3c:67:7f:91:00:52:6c:8e:bc:1d:fc:26:2f:97:fb:bc:b3:c9:
c8:1b:18:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:53 2026 by rpki-client