
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
File: ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft (raw, json)
Hash identifier: Zv3oh5a8jwr4tdLN90DHiijhwdvJ5mjYvANyxwLBj58=
Subject key identifier: 3D:D5:9C:FD:9D:E4:3F:16:02:3C:57:C3:0F:4B:53:12:B8:81:05:27
Authority key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
Certificate issuer: /CN=A9129738/serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
Manifest number: 13
Signing time: Sun 01 Mar 2026 10:37:35 +0000
Manifest this update: Sun 01 Mar 2026 10:37:34 +0000
Manifest next update: Sun 08 Mar 2026 10:37:34 +0000
Files and hashes: 1: ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl (hash: sKwcuPcERHY0m0mNqUOqNWTLCSGTs0AepTkMfmf9ADA=)
2: FF37A9C6067311F19CC2DF5A3C3D8C67.roa (hash: akXIyXKSlGQbrbnUU2jBHiZmnKYaf6Ilg9Ms7qBI0fc=)
3: FFB68BF6067311F19CC2DF5A3C3D8C67.roa (hash: 8cA0fOFO62XKSpsfEyzbTtPTMw04sul0y2y3dBzMzf8=)
4: 6BBEB632135F11F18A7710FA2D3D8C67.roa (hash: Q+VrPRa1Hf4fhFT9esGVsHr0n0IGZhGWKBLNYcr/kv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl
rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Validity
Not Before: Mar 1 10:37:34 2026 GMT
Not After : Mar 8 10:37:34 2026 GMT
Subject: CN=69a416ef-e6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:0b:68:02:60:33:0a:79:9a:63:1c:e7:5c:
0c:18:99:79:ad:fa:28:ff:ea:1c:86:71:3e:33:89:
17:c1:3d:e3:23:0b:4c:45:32:04:89:fa:aa:aa:f1:
99:1b:eb:4a:e6:d7:46:c0:54:84:f3:b3:1b:cd:ea:
74:f3:51:ee:70:6a:a2:5d:75:eb:b9:d0:04:10:d6:
16:2f:e7:c8:08:58:43:83:4d:d0:5f:ed:90:db:b4:
c7:9b:ca:a3:8b:6b:8a:18:19:63:fa:44:99:e5:e4:
77:7c:ad:2e:05:4f:75:3c:e4:f2:ea:6f:de:ff:9a:
4c:18:e1:06:3c:af:e6:e9:55:54:db:40:21:d6:6d:
49:ab:ef:9f:22:42:bd:ad:e6:d0:f1:fe:97:c2:46:
bd:fa:46:c7:d0:7e:9d:3f:41:34:75:97:2b:eb:a8:
14:3f:4e:3c:ce:50:03:4d:94:f6:fa:0e:8c:c6:7d:
0b:b1:8a:b2:d3:b4:28:2f:a3:aa:f2:39:95:15:87:
7b:2f:76:b5:7c:21:33:4d:56:7b:45:5b:cd:78:f2:
94:e9:78:75:3a:2f:a6:6c:c0:15:0b:af:4d:37:35:
d7:a7:8c:ea:c7:2e:56:56:a0:60:ab:04:95:a4:df:
4d:9e:a8:b0:3c:1a:76:4d:0f:4b:57:4e:ef:1b:95:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D5:9C:FD:9D:E4:3F:16:02:3C:57:C3:0F:4B:53:12:B8:81:05:27
X509v3 Authority Key Identifier:
keyid:66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:42:59:34:8d:93:15:fb:b1:89:26:83:23:b0:37:d3:8e:b1:
af:e1:4e:e5:ec:2f:b8:bb:68:df:aa:30:82:a4:75:2a:5a:27:
7a:89:f6:b6:00:ab:2e:bc:eb:5b:66:35:50:aa:01:00:f0:f9:
11:90:be:68:f1:72:33:0c:f9:d0:eb:38:c2:c9:22:14:83:b8:
e7:ea:fd:64:dc:78:5e:3e:11:44:69:40:53:39:95:f8:57:18:
ca:64:84:e3:df:48:18:87:cf:ff:db:60:eb:c6:f3:60:66:7e:
9f:62:62:46:ee:e5:cb:91:45:26:a0:23:f2:c8:42:50:14:a2:
f3:78:cb:d4:a7:a8:ff:52:df:77:cd:ff:08:be:cf:fc:72:5d:
72:1c:00:10:f3:78:80:2c:1f:b8:db:14:02:96:93:75:ac:8e:
f0:62:81:49:f6:34:f1:b3:ab:b4:e8:8f:77:55:86:48:4e:60:
38:48:51:7c:a2:09:3f:65:fe:cd:c6:fb:6d:41:e9:83:80:ed:
9f:53:d0:6d:51:04:7d:a3:f4:1f:a1:0f:f3:70:99:fd:b1:a2:
4a:f5:a8:1c:a4:31:9f:9e:dc:df:6f:3d:ac:af:8a:e9:6d:9d:
4c:6e:db:7b:51:05:1a:b6:19:22:b5:dd:45:f8:8f:ad:38:30:
75:7d:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:18 2026 by rpki-client