
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json)
Hash identifier: h67EZ2q3j+wdXqy8mDNKEH45j0uLWDuVw4JTAwVtb0c=
Subject key identifier: 7E:73:8F:A4:33:FB:A2:05:0D:C9:73:C5:15:1B:5E:EE:D2:CA:76:E5
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial: 04E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
Manifest number: 04D1
Signing time: Mon 02 Mar 2026 02:30:49 +0000
Manifest this update: Mon 02 Mar 2026 02:30:46 +0000
Manifest next update: Mon 09 Mar 2026 02:30:46 +0000
Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: Tn5oUA0g8HNYlV72ZBwvu3Tr/3TNfrjf3GtX5ALvhjU=)
2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: ynmW2tXKon2Mm9XJxO05TX1KTfoacHd+1EhVNC9kNXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Validity
Not Before: Mar 2 02:30:46 2026 GMT
Not After : Mar 9 02:30:46 2026 GMT
Subject: CN=69a4f658-fb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:dd:14:cb:74:85:ee:2b:fa:15:6d:fe:59:
83:a0:87:11:d0:39:2c:23:0f:26:8a:60:bf:52:a3:
fd:56:8e:20:4b:c0:f5:c7:bf:bf:33:13:64:b3:9f:
51:68:9a:ec:7a:c3:6c:00:59:8c:85:0f:0b:7b:ec:
df:2b:64:e6:de:a9:4b:6b:0f:2b:23:f4:32:43:be:
a2:99:a4:ee:bd:79:9a:77:65:66:f7:02:3c:fe:26:
69:17:97:c7:4a:4e:e4:d3:70:70:4d:8c:5b:41:38:
8b:3d:62:00:06:cc:45:e6:b5:2c:17:11:19:60:25:
c8:39:e8:35:2f:23:b5:bf:10:ed:ec:3a:91:d1:7a:
fe:8c:54:57:45:e7:6e:77:a1:f6:0e:e6:48:2a:f1:
17:28:74:5d:9a:9a:67:eb:a5:e2:a8:9b:a6:a3:27:
a1:26:53:c0:8f:a2:7e:51:bf:92:e8:32:bc:18:67:
91:8d:39:e2:4f:2d:3a:9d:ae:05:5f:1f:87:23:06:
a9:32:c4:db:02:dc:2c:28:45:91:83:24:4f:00:fd:
6d:d1:54:b3:c4:47:52:ee:c7:67:29:74:9b:90:89:
41:39:00:e7:f9:f8:3e:e2:63:e7:14:4a:3c:4f:3f:
79:00:f2:0c:f9:ab:4d:d6:9d:79:f1:e8:f6:9d:34:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:8F:A4:33:FB:A2:05:0D:C9:73:C5:15:1B:5E:EE:D2:CA:76:E5
X509v3 Authority Key Identifier:
keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:4f:af:33:a7:60:f1:08:11:04:82:fb:e5:bb:7e:4d:7d:a6:
7d:a3:21:e1:f8:b0:e7:d7:56:79:d3:5c:91:93:5a:4b:a8:93:
6b:30:44:f5:c5:59:11:5e:f7:9a:c6:cc:cc:bf:fd:06:9f:1d:
4b:ce:ba:8b:81:c0:23:42:09:84:b4:19:4d:53:4b:56:4b:d7:
cb:5d:08:4f:d4:91:37:35:b7:5e:19:5b:79:a6:71:8f:23:71:
b4:41:16:a2:d1:84:4a:2c:a0:a9:a2:d4:bc:2b:51:24:4a:55:
ac:f1:06:9c:22:6c:2a:cd:64:ff:90:0e:04:23:3e:f3:ad:9a:
06:40:fb:2e:76:9b:04:a6:7d:af:88:7b:c8:be:0d:5f:22:2f:
8e:68:95:33:5e:83:09:04:c7:79:eb:9d:54:33:2f:bd:cd:4b:
b7:ca:92:b5:e7:e9:d8:c1:c2:e9:56:4d:51:ff:a3:f8:d2:59:
dc:34:3c:a9:05:7a:d3:bc:fd:33:ce:5d:10:2e:f6:1f:3d:3e:
37:19:c1:96:5e:9a:b1:39:e3:a4:ed:11:0d:19:64:1a:a2:de:
eb:3c:4a:7b:ae:63:1c:78:aa:e4:51:b7:f3:78:9d:ae:65:e1:
a9:7f:8f:aa:b6:29:0c:29:30:59:6c:03:62:fd:f1:8e:66:d8:
c3:85:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:19 2026 by rpki-client