
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json)
Hash identifier: PDp+SB9g5g/4Thu27y5J41S1NL+a4wO/1yXFz6LEl6U=
Subject key identifier: A4:16:D5:63:1F:05:97:15:84:1D:90:EE:12:EA:35:0B:80:34:72:8F
Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E
Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E
Certificate serial: 24D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
Manifest number: 24B5
Signing time: Sun 01 Mar 2026 22:36:35 +0000
Manifest this update: Sun 01 Mar 2026 22:36:35 +0000
Manifest next update: Sun 08 Mar 2026 22:36:35 +0000
Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: tbmOZP1MtvoDM/582Yqdlg8fUwzfOTcpyyKugm3IMYM=)
2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: U8OxEGjdn2Oyo4nAXHMe2uZlkKT+HU2vh2Rj/xEEZGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl
rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9431 (0x24d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E
Validity
Not Before: Mar 1 22:36:35 2026 GMT
Not After : Mar 8 22:36:35 2026 GMT
Subject: CN=69a4bf73-d0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:85:1c:bf:a9:e8:93:b9:d2:fe:69:99:11:
cd:a1:07:27:d5:bd:2a:2d:6d:da:9b:f8:74:ae:1e:
42:b1:56:64:0c:bc:97:d8:97:e0:a0:50:df:6a:54:
f0:b1:de:60:5c:46:bb:99:06:75:5b:51:5c:58:e7:
8f:86:3f:96:2e:1a:ee:6d:a9:48:67:1b:9c:5b:d4:
72:37:eb:45:ca:f0:59:d1:8b:da:9c:74:24:68:9a:
e7:c3:eb:96:34:39:8a:62:0e:ba:09:3f:a8:a2:03:
ab:97:e5:d1:d6:54:61:a8:52:13:1c:5b:3e:8c:77:
51:a2:33:c2:32:b7:eb:b4:5f:2f:22:b7:cd:c4:09:
e6:7b:d7:f0:ef:d8:42:c9:8b:88:4d:26:0d:0c:eb:
f6:9c:b3:27:17:03:4e:62:0e:aa:ea:54:9a:bd:6b:
4f:f3:24:30:fa:c0:3c:fd:c6:ee:d1:bb:21:3f:01:
75:88:c9:ca:b3:40:95:a9:73:06:ab:82:d1:76:d1:
49:d5:a1:6f:12:07:86:a1:d4:53:a4:fc:f1:85:8f:
67:77:e4:e5:62:6b:18:e1:ba:e9:7f:00:de:f1:de:
09:ce:70:58:1b:cc:47:61:4b:9a:89:5d:4a:a0:69:
1a:5d:6a:24:86:e2:bd:bf:d5:d3:35:f0:0c:f8:46:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:16:D5:63:1F:05:97:15:84:1D:90:EE:12:EA:35:0B:80:34:72:8F
X509v3 Authority Key Identifier:
keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:29:cd:8c:4f:5e:3a:0e:b6:1f:b3:95:6c:ca:3a:c7:00:09:
ec:2b:07:0a:98:7d:12:2c:b1:9c:ff:75:0b:89:22:a0:30:df:
5c:65:1a:ec:68:b4:dc:0c:bf:89:24:b5:ae:00:60:26:67:9e:
13:a6:9a:e6:73:69:30:63:19:e0:0c:bb:c1:a9:1a:2f:ee:6e:
05:d8:5c:8c:51:f7:f6:59:27:e1:5f:a9:7a:91:1a:4c:30:a8:
fa:a7:52:03:a9:87:e0:d0:ea:98:28:c5:78:60:67:5f:2e:46:
ca:0c:7b:81:7b:39:2f:ec:52:98:10:9b:c5:8a:90:1b:6e:23:
dd:16:4a:19:37:00:25:df:ba:75:99:b6:7c:f7:e4:77:5c:44:
e7:2c:43:45:4a:74:e1:21:7d:8f:8c:cf:39:df:70:34:d9:50:
25:e4:66:d2:85:1b:6b:f6:34:08:6f:98:a3:88:45:b4:99:8a:
e7:00:71:57:d2:00:64:cf:ac:6c:c1:b0:61:37:80:81:80:31:
c4:49:58:17:1f:4d:63:95:9a:ff:df:85:48:10:40:b0:28:3c:
ba:0c:07:6f:a3:a5:f7:b3:97:ab:fe:a3:6c:4c:33:d8:5b:2a:
63:34:76:8b:ea:6c:e2:10:6b:10:35:e4:ea:a7:09:da:b8:9c:
07:d4:d6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:07 2026 by rpki-client