
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json)
Hash identifier: bU+eeUEq4iqMfsAuINimL8tt7OssGwyjlLbfSe9zKYQ=
Subject key identifier: 29:04:8D:AF:A3:CF:70:47:61:34:FA:1E:52:CE:2F:97:F5:82:DE:30
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
Manifest number: DF
Signing time: Mon 02 Mar 2026 00:46:14 +0000
Manifest this update: Mon 02 Mar 2026 00:46:12 +0000
Manifest next update: Mon 09 Mar 2026 00:46:12 +0000
Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: 6DPzwpxhYD2FUIy2/nnTwCB7b7TgRsWQeeeWMR80BgY=)
2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: 7P9pyFCTS/t0qweS0jyrRCsqRn3dhSbxLGM4XwOvypc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Validity
Not Before: Mar 2 00:46:12 2026 GMT
Not After : Mar 9 00:46:12 2026 GMT
Subject: CN=69a4ddd5-1789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:a5:b3:55:7c:dc:f7:9d:f5:86:87:20:f6:
18:00:90:92:f6:4f:14:88:58:2c:b6:b1:47:3f:49:
03:e2:4e:dc:a6:9c:40:00:c9:54:89:ee:b1:3d:00:
da:b8:f7:bd:7b:cb:10:76:b8:58:2d:20:4e:ba:2c:
f5:25:41:7f:5f:f1:e0:a7:7c:6e:ff:24:41:bf:bf:
1a:b7:d7:52:99:b9:5f:7b:23:5e:32:fc:ed:65:b6:
4e:3c:98:5a:a9:77:66:ec:c6:8d:de:e1:03:a3:99:
67:e3:c1:b9:c2:9a:ac:9b:e4:f3:6a:44:fd:0b:b4:
b3:f7:9d:3d:68:93:36:eb:3c:b9:1e:52:af:7a:fd:
68:c6:25:21:06:ac:c2:43:fe:b0:da:d1:53:d7:43:
da:0a:38:0b:bd:5a:be:e0:5b:ed:e3:a5:36:9f:43:
a9:42:f1:cd:34:f1:ad:39:57:8e:1a:b0:38:d1:3e:
56:78:5e:e8:55:b5:51:60:4f:a9:6d:c8:f9:e5:f1:
71:59:9d:3b:17:c6:40:c8:82:b7:62:77:12:4c:db:
a5:97:24:a7:7f:b9:a3:0a:1e:8f:cd:da:e4:b0:da:
91:43:ca:b7:0c:74:ea:82:a1:8c:22:09:1c:21:64:
f7:b8:78:e7:31:22:5e:54:27:ca:95:cd:5e:7d:69:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:04:8D:AF:A3:CF:70:47:61:34:FA:1E:52:CE:2F:97:F5:82:DE:30
X509v3 Authority Key Identifier:
keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:3c:d4:ec:0e:27:4e:5a:c7:11:9b:fc:f4:3e:e5:2a:05:ea:
54:57:5d:a7:39:3c:46:71:34:28:d8:f8:82:fa:35:a5:29:cb:
f9:eb:25:60:20:86:3c:a4:93:14:24:cd:14:27:5b:f6:cb:f7:
c6:98:46:94:6e:2f:cc:d0:6d:82:58:3e:dc:86:0a:32:b7:dd:
49:95:79:9e:15:be:19:1c:fb:0d:39:f5:65:9c:bd:87:77:89:
d4:71:d5:e8:f9:b9:88:17:d0:c5:27:bd:66:9d:9f:71:3b:47:
74:37:b6:f9:60:9a:48:2e:56:dc:16:17:3d:0f:9c:5d:13:e1:
de:02:a7:ef:34:98:ec:d4:7e:d1:d5:a2:5e:da:9b:60:eb:00:
a1:3c:c6:a9:5d:49:dc:4b:f4:db:11:93:0d:b4:dc:75:62:8c:
e1:cc:2c:50:3c:c4:91:75:3d:e6:b2:66:50:75:c3:bf:64:98:
86:c7:c5:b3:89:70:a8:48:ba:6f:29:4e:b9:b5:0f:ba:42:0c:
5d:85:21:07:bc:60:35:89:7e:06:c9:2c:d1:8a:c5:56:14:85:
60:72:08:d9:1f:f7:23:c4:ff:7c:f8:68:2b:7f:13:41:1a:52:
8e:12:fa:a2:77:71:ba:95:95:cd:b3:16:e2:2f:37:b9:50:a0:
9e:f7:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:45 2026 by rpki-client