
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
File: zPWB9MM8pEQeGAfjlsXv51-oLdA.mft (raw, json)
Hash identifier: TFDV+ZuWNg6fyFJIFfUNDonfTfGKv5Eywvz3tUpjI9I=
Subject key identifier: D1:E6:1F:9B:95:F7:80:79:F6:F5:0B:92:6C:84:D4:53:09:ED:94:7A
Authority key identifier: CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0
Certificate issuer: /CN=A9111A27/serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
Certificate serial: 0AC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
Manifest number: 0ABD
Signing time: Sat 28 Feb 2026 19:43:21 +0000
Manifest this update: Sat 28 Feb 2026 19:43:20 +0000
Manifest next update: Sat 07 Mar 2026 19:43:20 +0000
Files and hashes: 1: zPWB9MM8pEQeGAfjlsXv51-oLdA.crl (hash: PXhc3O4uPdZVrBT/KVAvYXQnBdjusw4H+736Xd75cKs=)
2: EECBCEBE6E3511EABDE26D73C4F9AE02.roa (hash: tiW51zPCEni34tefKfGb0te4DWKoSNtDHrcuOGks1io=)
3: 4A644958BA0311F084B11F0DC4F9AE02.roa (hash: Clegtkn9PCF2aAQpIGyhbE89o6/DeR6UqKiXB0Quw9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl
rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2761 (0xac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111A27, serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
Validity
Not Before: Feb 28 19:43:20 2026 GMT
Not After : Mar 7 19:43:20 2026 GMT
Subject: CN=69a34558-8490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:22:d3:35:86:46:2f:97:2f:70:03:8d:10:
c3:5f:93:78:c1:45:98:5e:fd:19:58:12:7c:9f:3b:
3d:bc:2b:fd:da:b0:8b:12:f6:e8:1b:af:3c:5a:40:
e5:65:91:b8:a7:fb:d0:c3:e2:32:a9:87:07:a0:f6:
1c:4e:9c:c5:97:50:77:83:d5:7c:41:e7:71:45:75:
d6:bb:40:bb:0e:dd:fb:14:9f:3a:9a:a4:ff:27:a1:
8c:7d:44:46:15:c9:52:30:50:06:63:00:9b:61:c6:
c4:c2:5a:92:4f:05:48:87:92:c3:93:63:23:10:57:
e0:4a:78:2a:b9:4d:58:7f:71:8a:d6:c8:9e:30:4c:
5c:5d:23:dd:a4:d4:82:24:e0:c2:aa:f4:7c:ba:de:
f8:0d:53:9f:59:2f:4a:18:6a:ab:01:19:69:87:0a:
f6:bd:40:74:e1:39:53:ef:73:72:21:a9:d5:0d:f0:
78:88:9c:b6:93:9b:3f:0d:d3:b2:e2:1e:5d:fb:89:
cd:89:9b:db:6b:16:81:6e:0c:c7:0b:27:8f:0d:21:
44:7b:43:9f:78:9f:64:4f:64:66:d5:a9:f9:24:c7:
93:6a:71:f2:b5:e2:a6:ba:3d:f8:df:4e:bc:19:6f:
da:4e:5a:70:92:fb:58:cc:e0:f3:07:ed:34:f4:52:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:1F:9B:95:F7:80:79:F6:F5:0B:92:6C:84:D4:53:09:ED:94:7A
X509v3 Authority Key Identifier:
keyid:CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:d4:e2:ae:c0:47:f2:22:9d:7a:3b:02:37:f1:80:55:60:5b:
14:d8:33:83:dd:fd:4b:23:1f:e1:cb:2a:0f:60:a9:c1:a2:ff:
ba:53:da:fb:f6:8f:1f:46:1e:4c:3e:ca:3a:93:f6:5b:a3:68:
b3:2f:31:35:a1:1b:3a:af:75:fe:53:31:69:a4:ce:56:2a:54:
b5:27:1a:97:10:0c:95:3c:cb:b2:4c:40:d9:42:e8:05:1b:fc:
74:0d:47:e3:df:fa:ed:0d:7a:a6:f1:26:ba:9c:b1:60:7e:34:
b7:48:48:a0:b8:1f:36:fa:58:94:a9:7c:e6:f8:e4:2f:8d:35:
0f:a3:d6:6c:59:ac:36:1c:a1:b5:9a:b4:3c:64:c1:69:98:3d:
b6:91:6f:ed:2a:7b:d9:18:2a:85:3d:2e:7b:c7:c8:08:66:00:
e3:5f:35:6c:a2:e7:5d:d8:4d:d6:04:bf:e4:2c:3e:87:20:fc:
49:bb:e1:65:23:b1:00:13:b0:10:b0:e5:87:31:91:4c:e9:e9:
e7:62:f2:5a:5e:4a:b8:af:7b:82:25:29:1e:9c:b2:ef:96:63:
51:b0:1c:08:54:3b:1d:b3:d1:96:00:db:20:8a:bc:78:2b:45:
57:fb:32:2d:5a:79:f7:e6:8b:6d:68:98:39:14:82:42:ea:93:
ea:78:df:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFBMjcxMTAvBgNVBAUTKENDRjU4MUY0QzMzQ0E0NDQxRTE4MDdFMzk2QzVFRkU3
NUZBODJERDAwHhcNMjYwMjI4MTk0MzIwWhcNMjYwMzA3MTk0MzIwWjAYMRYwFAYD
VQQDDA02OWEzNDU1OC04NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmci0zWGRi+XL3ADjRDDX5N4wUWYXv0ZWBJ8nzs9vCv92rCLEvboG688WkDl
ZZG4p/vQw+IyqYcHoPYcTpzFl1B3g9V8QedxRXXWu0C7Dt37FJ86mqT/J6GMfURG
FclSMFAGYwCbYcbEwlqSTwVIh5LDk2MjEFfgSngquU1Yf3GK1sieMExcXSPdpNSC
JODCqvR8ut74DVOfWS9KGGqrARlphwr2vUB04TlT73NyIanVDfB4iJy2k5s/DdOy
4h5d+4nNiZvbaxaBbgzHCyePDSFEe0OfeJ9kT2Rm1an5JMeTanHyteKmuj343068
GW/aTlpwkvtYzODzB+009FLuDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHmH5uV
94B59vULkmyE1FMJ7ZR6MB8GA1UdIwQYMBaAFMz1gfTDPKREHhgH45bF7+dfqC3Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUEyNy82NjI1MThCRTZF
MzQxMUVBODQxRDQyNkVDNEY5QUUwMi96UFdCOU1NOHBFUWVHQWZqbHNYdjUxLW9M
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pQV0I5TU04cEVRZUdBZmpsc1h2NTEtb0xkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUEyNy82NjI1MThCRTZFMzQxMUVBODQxRDQyNkVDNEY5QUUwMi96UFdCOU1NOHBF
UWVHQWZqbHNYdjUxLW9MZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB9TirsBH8iKdejsCN/GAVWBbFNgzg939SyMf4csqD2CpwaL/ulPa+/aPH0Ye
TD7KOpP2W6Nosy8xNaEbOq91/lMxaaTOVipUtScalxAMlTzLskxA2ULoBRv8dA1H
49/67Q16pvEmupyxYH40t0hIoLgfNvpYlKl85vjkL401D6PWbFmsNhyhtZq0PGTB
aZg9tpFv7Sp72RgqhT0ue8fICGYA4181bKLnXdhN1gS/5Cw+hyD8SbvhZSOxABOw
ELDlhzGRTOnp52LyWl5KuK97giUpHpyy75ZjUbAcCFQ7HbPRlgDbIIq8eCtFV/sy
LVp59+aLbWiYORSCQuqT6njf6Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:27 2026 by rpki-client