
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier: oxdnqVlPTsKDJ8dnbO2S2PRIZRkPrDv1d7bI8DmpQYc=
Subject key identifier: 1E:7F:83:61:E5:46:1B:AE:52:6B:BD:F1:65:17:37:6B:DE:9F:3B:9A
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial: 03EA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number: 03EA
Signing time: Sat 28 Feb 2026 20:57:21 +0000
Manifest this update: Sat 28 Feb 2026 20:57:20 +0000
Manifest next update: Sat 07 Mar 2026 20:57:20 +0000
Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: IqN1tYz29idkLq4nTS5eei93C998z+tCJcGF25Q+IJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1002 (0x3ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Validity
Not Before: Feb 28 20:57:20 2026 GMT
Not After : Mar 7 20:57:20 2026 GMT
Subject: CN=69a356b0-a359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:f5:66:4e:84:b3:63:93:db:6f:20:a1:e7:
29:f1:2b:ac:d8:5d:6b:e4:7c:33:ca:23:b8:35:58:
57:72:16:b3:ec:af:5f:15:a4:80:3d:f1:25:05:69:
33:49:ce:c8:f0:7c:3c:77:5e:1e:bd:d1:da:69:52:
a7:9c:a2:0a:4e:b4:fa:b6:ff:c3:e5:fa:a5:18:29:
ea:3d:f0:d7:10:e4:49:1a:5f:22:d3:10:8c:02:88:
73:ca:9d:88:1c:06:65:0a:dd:f3:90:0d:23:e5:00:
25:71:bf:26:e6:76:f3:bc:66:27:0e:63:4a:40:a9:
22:90:a5:a2:d9:b7:e6:1d:b4:02:a0:ff:69:d1:e2:
41:58:fa:c0:99:e6:66:c7:7b:fc:3a:81:18:b0:6f:
8a:7f:3f:cd:a0:5a:c5:de:8b:12:58:0f:04:71:a3:
6b:1a:46:a8:5e:40:53:35:71:47:45:7f:31:a1:2d:
f3:22:b0:df:b4:59:37:72:69:af:9b:a9:34:02:a8:
4a:0e:1c:88:12:71:4c:d5:df:a5:ee:39:3c:8a:4e:
39:af:bd:d5:c5:b4:eb:70:41:ab:ed:f1:f5:29:54:
26:cb:a7:3f:ac:42:06:79:55:21:79:bb:02:a7:fb:
fc:8c:ae:a7:1b:3c:7c:23:58:9e:a6:6e:10:55:2e:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7F:83:61:E5:46:1B:AE:52:6B:BD:F1:65:17:37:6B:DE:9F:3B:9A
X509v3 Authority Key Identifier:
keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:de:03:c2:da:c8:3e:be:25:0c:97:2f:ac:37:9f:e4:e2:12:
ce:0c:54:d4:42:e7:ec:36:7c:3b:ae:b0:5d:06:11:ea:23:c3:
92:93:1e:28:40:aa:54:01:5d:53:e1:d8:64:be:03:8b:df:63:
cb:19:39:fb:d6:a1:e2:42:e1:98:fc:0d:74:54:a1:08:82:a7:
21:51:b5:40:ec:2c:94:2e:01:06:27:2d:ef:7e:ed:a4:fa:ee:
e0:9f:f7:86:72:c3:18:91:5b:da:21:bc:4c:bf:55:3c:0d:0d:
6d:97:3e:17:b0:37:4e:f1:a1:53:bb:29:59:d7:99:fc:56:11:
a7:f2:33:bf:95:67:96:6c:cf:f3:25:d5:ba:4b:f0:5a:b2:fb:
d8:05:b8:f8:fb:84:2c:95:67:75:98:d6:36:8e:d4:d1:b4:ce:
45:ec:bd:a5:94:03:f0:75:cd:2a:a6:47:9d:c7:ea:e0:81:cd:
04:c9:c5:a8:19:a4:c0:b2:db:0b:e3:1f:70:e5:cb:7f:bf:f5:
f9:fe:78:fd:55:e3:2d:e3:e6:31:99:d9:90:0a:ee:04:38:9a:
83:3f:95:ab:9d:ec:d7:a1:66:ec:1e:6b:72:8c:7a:f6:7d:31:
97:fe:4d:5f:98:2c:1d:7b:77:2c:5d:5e:4f:95:75:16:4a:d6:
5e:f2:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:14 2026 by rpki-client