
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json)
Hash identifier: LeoDiFY/mK5ArtKmYiF68dTNAHeAfI/Zdghz83r7A+g=
Subject key identifier: A0:CF:B6:50:1B:7F:75:DB:7F:92:F2:1A:53:82:4C:7F:EE:BC:BB:A2
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial: 18D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
Manifest number: 18BB
Signing time: Sat 28 Feb 2026 16:32:03 +0000
Manifest this update: Sat 28 Feb 2026 16:32:03 +0000
Manifest next update: Sat 07 Mar 2026 16:32:03 +0000
Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: 1aV27f7Jyb2NblB3hpFzttm220tO13eat2FLuEW38FM=)
2: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: HgBCprvLEMUdtECvNrG2BfQhC3eNx2q8+YWFMo+rJHU=)
3: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: nItOkhbydFyPAlZEYJPQfb/zEW536BhvWuF/r4zUUVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6357 (0x18d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Validity
Not Before: Feb 28 16:32:03 2026 GMT
Not After : Mar 7 16:32:03 2026 GMT
Subject: CN=69a31883-ade4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:73:01:98:2c:df:96:e9:b4:91:c8:80:d2:
9d:84:84:6a:71:29:39:54:c6:ed:05:46:88:48:8f:
51:67:e7:2c:7a:a4:f8:97:d4:e2:f6:6c:de:09:cd:
5c:e3:d4:bf:ff:78:0c:25:58:9f:31:68:5f:cd:33:
36:d1:5f:13:f5:d2:9e:3b:12:fd:79:19:ce:c4:7e:
48:d2:d8:84:5e:87:60:f5:cf:1e:10:80:37:69:ca:
e3:80:da:7b:8e:78:4c:9b:7d:1f:36:c1:61:5a:a6:
e1:4b:69:df:ab:a0:f4:42:17:0f:d5:14:ec:66:a8:
fd:a9:a6:96:5f:00:00:7f:01:7b:53:84:5e:12:7e:
7e:fa:c3:12:1d:5c:22:63:9b:38:4f:a5:19:27:29:
37:ef:2a:51:7e:70:00:3c:c7:dd:5c:07:7d:ff:23:
90:52:f3:4f:21:b0:0f:be:b7:5c:17:4a:9c:23:3a:
55:1d:9e:b5:13:d6:29:c9:22:3c:5f:ad:44:29:dc:
c4:79:88:b9:d8:9e:22:4f:bf:8a:16:c0:39:09:d5:
ee:b8:b5:ee:d7:b3:51:6e:49:4d:d3:ee:fd:e3:e6:
a4:bb:4d:73:02:81:8b:cd:62:c3:9d:81:7b:9e:7d:
e1:e3:27:9c:30:5c:7b:bd:e2:dc:f8:36:4e:de:b9:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CF:B6:50:1B:7F:75:DB:7F:92:F2:1A:53:82:4C:7F:EE:BC:BB:A2
X509v3 Authority Key Identifier:
keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a6:3d:4c:14:ba:e1:e3:8e:50:84:fd:f5:ee:ce:a4:ca:32:
ad:4f:fc:d1:24:0d:bb:a4:fa:d2:2d:97:42:35:41:2a:8e:6c:
2f:4d:74:c5:7c:03:1d:17:90:04:98:04:bf:62:11:61:10:0c:
3e:8b:8c:fe:68:89:88:b9:49:2e:27:4c:7c:13:a5:42:33:0f:
cf:69:f4:ed:e1:97:dc:e7:d7:c8:4c:46:96:e1:01:7e:ff:f5:
6c:ee:07:54:30:cd:b2:0c:99:32:29:5e:b3:0f:c2:d6:2a:3d:
7f:0b:29:93:37:34:cc:cc:e2:f0:05:42:28:53:2b:ab:be:86:
7d:79:bd:5a:02:32:3f:0d:0e:08:cc:49:43:18:a4:93:85:f4:
0b:76:b9:bb:f7:62:84:6a:54:df:d0:e0:3c:1f:fc:6f:70:e4:
ee:6f:d6:d3:b4:bd:30:f6:bc:8f:fc:87:27:55:0d:63:19:de:
08:19:35:5e:30:60:b6:0f:f9:de:66:b9:27:a9:a4:5b:74:94:
92:b7:0d:0d:ec:69:24:cd:72:8a:5d:d0:78:1e:8f:ae:de:14:
3a:18:a2:f8:98:2b:22:57:34:d2:23:f8:a5:4a:ec:f8:12:b4:
66:3a:eb:5f:e2:58:57:f5:9b:70:29:2d:fb:c3:e1:09:cf:65:
bb:9c:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:40 2026 by rpki-client