
$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json)
Hash identifier: tSu2oOqJmgW1yiSebTjyaQgbtqVx05DPEKYffwuHOOU=
Subject key identifier: 05:09:67:A9:D0:B0:02:A8:AD:DA:76:ED:E1:DB:DE:5D:2D:C4:FA:D6
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial: 02AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
Manifest number: 02A8
Signing time: Mon 02 Mar 2026 02:44:29 +0000
Manifest this update: Mon 02 Mar 2026 02:44:27 +0000
Manifest next update: Mon 09 Mar 2026 02:44:27 +0000
Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: ymqSvOb9VOZJIT1W2/mrKOX0FdIJKXugzqloNhHGWxk=)
2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: qH4NxxqpOA2c5T+RIxBIM6trIh5aFuyiHzxc/Np3eOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Validity
Not Before: Mar 2 02:44:27 2026 GMT
Not After : Mar 9 02:44:27 2026 GMT
Subject: CN=69a4f98d-7fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:0a:7e:bd:39:ec:52:da:f5:d9:ad:e8:6b:
4b:7e:18:27:dd:00:09:6b:86:93:6d:05:42:a1:14:
cb:b2:f2:5e:85:c7:21:14:1b:fc:67:11:0f:fc:23:
85:cf:cb:94:d1:41:f9:15:80:5f:9b:ef:da:e0:cd:
88:2e:5c:56:9d:7b:0e:8a:f3:33:a5:48:3e:b5:c4:
d6:1d:4a:8f:4b:2f:67:07:c3:6e:20:c5:6d:1d:dc:
97:f9:f0:4e:ae:58:a5:1c:32:76:31:0b:34:b3:ca:
55:1a:a1:07:8f:01:85:46:ba:3c:3c:24:c0:5a:ec:
66:4e:7c:6c:86:1b:4e:1b:dd:86:59:3f:84:fe:b4:
44:7d:ff:8f:f9:89:63:38:13:a7:0f:d8:93:b7:72:
2d:2f:06:09:43:bf:71:d3:c1:b7:9e:b3:bd:c1:20:
5d:89:9a:da:a9:6f:67:7c:eb:09:d0:e7:74:8b:8c:
9f:f5:d1:6d:53:d0:b1:dc:94:bb:8b:a9:9c:1d:c2:
0c:41:74:71:23:fc:11:6b:9d:2b:42:18:91:01:ec:
c5:ff:45:aa:93:a1:48:35:68:50:0a:01:63:0b:2a:
c3:34:db:d8:55:fa:a2:3b:ab:89:f3:e5:57:49:48:
5a:e3:b9:27:8d:96:35:eb:48:b2:df:1c:a7:c8:fc:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:09:67:A9:D0:B0:02:A8:AD:DA:76:ED:E1:DB:DE:5D:2D:C4:FA:D6
X509v3 Authority Key Identifier:
keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2b:ea:15:b3:c8:57:3a:d0:0e:17:4c:0a:f1:49:99:b2:6f:
28:f9:61:69:5a:6e:76:3a:5a:22:ed:41:c9:c3:21:68:88:71:
bd:ae:4d:bf:1d:a2:67:0e:81:27:73:81:b8:86:01:9f:00:17:
b4:ea:ae:2a:e3:9f:60:7e:ba:c6:9f:00:f5:d5:f2:74:0f:20:
90:25:80:c1:be:b4:97:92:38:23:82:56:a6:53:e8:b3:82:03:
1f:f0:dc:d7:db:ec:1e:3a:9a:a9:1c:78:e2:60:cd:5b:af:32:
08:64:31:e6:29:a1:8c:e0:fc:cb:19:a0:21:4f:a9:a5:a6:8a:
b9:f9:a5:40:4d:90:42:21:a4:8d:a9:80:08:cc:ad:77:15:2a:
5f:4e:17:1b:d6:e9:3e:8e:5d:a3:19:00:f2:f9:b2:42:4c:40:
52:a8:b0:dc:06:52:71:ce:4e:37:d5:80:97:19:20:1c:42:bc:
01:01:b6:6d:3f:81:92:9c:83:dd:af:74:47:a6:12:07:31:a3:
5b:d5:c0:23:9c:e0:7e:5b:96:89:1e:10:da:a1:ee:72:0d:32:
b1:a2:fa:4d:4e:4b:9d:5a:01:c8:48:27:e1:fd:1a:3c:41:27:
7f:01:cc:cc:78:a7:fa:f1:d6:4c:86:fc:50:8f:f5:08:cd:0b:
bd:97:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:43 2026 by rpki-client