
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
File: ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json)
Hash identifier: XMGQOKnlNrcwzM3FcHu5DW24DyRonWhITOQzI19COag=
Subject key identifier: 35:74:A1:2E:29:A6:0F:70:26:00:A7:3A:28:87:45:AE:93:DC:7B:8C
Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
Certificate issuer: /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
Manifest number: 43
Signing time: Sun 01 Mar 2026 09:48:31 +0000
Manifest this update: Sun 01 Mar 2026 09:48:30 +0000
Manifest next update: Sun 08 Mar 2026 09:48:30 +0000
Files and hashes: 1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: ZCAgt0gRzldEuF4A9mURIEPCo932YqqVV/RWai6W/zI=)
2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: 4o6d3Mckrzy48+xLI8bsyNkRAk7N9AqNPet+OzlxVP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Validity
Not Before: Mar 1 09:48:30 2026 GMT
Not After : Mar 8 09:48:30 2026 GMT
Subject: CN=69a40b6f-94b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:33:01:00:d9:38:71:bb:09:d2:72:c5:af:
ad:a3:56:d6:c1:1c:6e:eb:30:af:1b:7d:06:a5:23:
d1:e8:a3:f9:52:87:b7:95:a5:b5:2d:ad:bf:e3:c0:
f8:4c:f1:48:5d:03:6e:91:8e:b1:d0:54:de:f6:b2:
a4:da:02:4f:ad:49:d3:d6:82:20:57:52:b9:a6:38:
e9:e0:ea:64:3e:f8:1d:e5:09:83:0a:ec:dc:33:12:
53:6f:c0:67:a3:03:33:e3:3a:0a:4f:1c:1f:4a:c5:
80:62:4a:eb:5e:26:8a:7d:be:3a:87:a9:6f:d0:55:
0b:9a:de:95:be:2d:60:5e:6e:03:5f:35:2f:7b:c5:
9e:87:36:a0:f6:13:5c:9b:47:24:21:51:ba:83:b2:
2d:f1:a7:93:0d:3b:40:fb:b4:6f:f8:05:4b:93:63:
df:d0:69:99:4a:34:1a:b1:15:ce:fd:87:67:17:9d:
23:2e:ef:80:09:f2:bc:62:c4:7f:f6:38:ae:cc:13:
b8:bf:48:dd:68:2c:91:37:33:61:62:f0:0d:54:23:
74:4f:52:ac:c0:0a:00:d9:72:9f:10:9e:fe:4a:34:
54:89:c5:9e:20:af:37:9b:06:8d:d4:17:20:5e:58:
73:4b:1c:81:dd:e4:a6:ac:ee:f1:7d:56:d0:af:5a:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:74:A1:2E:29:A6:0F:70:26:00:A7:3A:28:87:45:AE:93:DC:7B:8C
X509v3 Authority Key Identifier:
keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:29:67:ce:96:a8:53:f5:25:86:97:e5:0b:03:f9:e0:a9:05:
d9:70:1b:60:5e:d4:65:41:e5:fc:78:b9:87:78:9e:22:ed:7b:
48:25:99:20:8c:a6:c7:a7:cf:75:16:6e:60:1f:38:f5:aa:2a:
c7:b1:53:8a:06:17:e7:dc:97:ae:9c:4d:c1:da:28:b0:f8:1e:
04:b1:6e:0b:2a:a8:50:c1:c2:74:dc:1c:d6:25:ab:5e:6e:35:
21:3c:47:40:55:25:94:4d:5d:7c:7a:c8:c5:8f:b3:62:11:86:
9c:08:db:55:ce:d4:cc:35:d4:a6:bb:a7:4a:b6:54:74:81:a5:
61:75:b7:bc:ff:0c:35:5b:74:a7:b4:01:2c:90:71:2b:6d:1b:
f4:47:30:3a:87:07:90:b3:f4:2f:f9:b7:e8:d8:2c:6f:57:9a:
b9:61:03:51:a3:b7:a0:4e:8f:a0:6d:4a:3a:71:d5:30:c6:99:
7e:d3:68:b5:d2:d7:20:82:58:4e:33:b6:04:b6:02:00:92:62:
6c:0d:42:a9:6a:91:d0:e5:6e:a2:53:9e:b4:e3:3b:84:88:ca:
c1:80:10:1e:c9:28:83:1f:fd:a1:34:f6:54:b8:21:f1:62:73:
1c:3a:9b:58:41:15:11:92:de:d7:e9:5a:a8:e5:53:2a:f7:c0:
c2:03:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:19 2026 by rpki-client