
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json)
Hash identifier: gd8s8NvFNfO9G22DBM9XgxHESui3LSkCpgRUexA5H+Q=
Subject key identifier: 80:90:8B:9D:BA:93:DC:FC:D0:B2:65:24:0C:5D:51:7B:A8:44:01:F2
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
Manifest number: 0233
Signing time: Fri 17 Apr 2026 02:29:37 +0000
Manifest this update: Fri 17 Apr 2026 02:29:36 +0000
Manifest next update: Fri 24 Apr 2026 02:29:36 +0000
Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: dpVG364mNL0EDN0frvnb1y1K3R22lypc3sYboD9ZWM0=)
2: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: f58bvx3dukaGpN5ndoezdAfl/VXBXL0ui+Vo9iVwwM8=)
3: 118AB342249511EFBF275B73C4F9AE02.roa (hash: NqwTwG+Agr5XJi4bwI9im7xWQxdq8IuBPwpMhYcCze0=)
4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: B+OeWoqQTwfm38iUF7sb5sL9h1ZJ6wXXxhu4Wl/m0EM=)
5: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: UaAm3ns+UzSlENWFg3alL8LgQQM37DkVyV1vadmtNwg=)
6: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: rEWhYy1UCSjrp88bbpBi55rBTDmAa96ZWrodZhYuVDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Validity
Not Before: Apr 17 02:29:36 2026 GMT
Not After : Apr 24 02:29:36 2026 GMT
Subject: CN=69e19b11-3b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:1e:37:e1:00:ae:49:ba:8c:9e:3c:c2:73:
f7:78:f5:af:08:11:9f:0e:ce:e3:d2:9b:9d:f8:a4:
cb:d6:d8:54:95:0c:f2:1c:98:71:41:d6:a1:68:cb:
cd:16:5d:d0:ba:f2:a4:ec:a9:5a:1a:28:cd:4a:88:
27:99:f9:14:a8:ab:02:69:d1:5d:2b:7a:05:bb:b7:
8a:5c:1d:fa:14:a6:cb:eb:aa:16:fa:f0:96:8e:f6:
a4:ee:c0:99:7b:f3:62:2e:b1:44:aa:5d:a7:0d:b9:
f0:d3:e0:89:f2:fc:66:c9:ff:ab:4a:28:ed:9f:5f:
70:da:3d:47:88:02:f1:61:5f:7f:e2:ea:ba:a0:19:
01:38:aa:96:f9:6e:6b:09:c4:80:ee:f0:ea:d1:7d:
e7:37:16:61:60:07:f8:6c:7a:b5:56:20:83:fb:63:
93:16:89:54:4b:07:54:e2:17:95:ab:60:33:64:d6:
ea:70:1c:9f:09:c9:d8:fd:da:b9:4e:ee:c3:76:6e:
80:6a:eb:e6:8e:53:73:34:ec:d6:1e:0d:23:b2:b3:
1f:f0:85:26:9d:38:04:b6:54:3d:92:aa:db:c4:88:
cf:28:7f:83:70:53:d6:68:b4:fe:70:99:8b:9c:0c:
2e:2a:c9:a5:df:23:d2:12:0f:db:0d:a7:05:66:bd:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:90:8B:9D:BA:93:DC:FC:D0:B2:65:24:0C:5D:51:7B:A8:44:01:F2
X509v3 Authority Key Identifier:
keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:24:7c:57:96:47:e0:f9:64:c4:ca:b9:2f:b0:75:8a:e6:02:
80:95:e7:a8:64:e4:f9:14:7c:30:9b:6f:57:6b:5d:36:3e:ba:
5a:2a:8d:55:31:c4:44:fc:e1:ec:b4:7a:f1:0e:9a:d9:cd:b6:
9a:f3:c8:39:4a:ea:3a:ec:17:24:ae:bf:f5:b8:d6:26:ce:e2:
c7:25:ce:11:1d:90:d4:a6:cc:18:2c:0b:05:23:f7:b0:ff:75:
9c:65:99:da:f2:e1:19:9b:06:2a:21:c7:65:97:09:87:dd:f2:
e3:04:27:25:f9:2c:99:d3:73:01:43:87:c3:a9:94:99:30:a0:
7b:29:61:69:16:75:a8:45:de:c1:59:53:53:7d:a0:b2:a4:f8:
c8:1a:45:f2:2e:a6:4a:8b:d0:bd:35:2e:35:9f:ec:de:02:d6:
df:5e:d1:c7:6b:26:b6:8f:b9:c8:6b:2e:6c:88:57:3a:7f:28:
ab:3c:06:49:5d:5f:1f:f6:80:3f:f9:c6:3b:ae:c4:5f:09:9e:
a3:ad:ef:f2:4c:32:49:dd:f9:59:39:06:f0:3e:68:ac:92:a1:
9e:84:c8:16:14:38:f4:77:70:0d:4b:5b:05:a5:81:9b:cc:ab:
40:1c:36:66:0c:de:b7:fc:0a:2b:54:70:88:46:1e:97:a4:2a:
6d:81:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:17 2026 by rpki-client