
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
File: ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json)
Hash identifier: 30RpeZasEe1sC4Mcc25pHGB820aT/o4bkvM3rFcXEWI=
Subject key identifier: B2:20:3B:01:94:05:B8:F1:0C:97:46:E3:FB:06:E6:BA:71:96:BA:79
Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
Certificate issuer: /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
Manifest number: 5B
Signing time: Fri 17 Apr 2026 07:46:54 +0000
Manifest this update: Fri 17 Apr 2026 07:46:54 +0000
Manifest next update: Fri 24 Apr 2026 07:46:54 +0000
Files and hashes: 1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: zxzcIX9h/p/x+A0mtBXJ1p5oUg3MM873uuw8YU40qRg=)
2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: 4o6d3Mckrzy48+xLI8bsyNkRAk7N9AqNPet+OzlxVP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Validity
Not Before: Apr 17 07:46:54 2026 GMT
Not After : Apr 24 07:46:54 2026 GMT
Subject: CN=69e1e56e-e20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:5f:6a:65:20:51:15:6f:51:76:42:42:e1:
f8:f3:7c:6c:4c:29:22:5b:70:a4:cf:85:c4:ba:f1:
86:ba:cb:34:c9:16:4f:75:f0:79:c5:10:8c:e3:71:
ac:68:c9:7c:7a:72:85:99:f6:19:31:71:11:c3:70:
2c:6c:4d:5d:64:8d:36:04:7c:f5:eb:d6:a4:0e:4f:
45:47:34:62:3f:1f:2d:a0:e3:55:ae:a2:c7:f3:1d:
e8:60:08:9e:ff:95:2c:4e:94:86:fd:58:ba:0d:2a:
21:11:87:9b:97:98:5f:b4:e2:b7:c1:80:51:14:ce:
15:bb:d4:00:4b:92:05:a9:e3:6e:6b:68:79:f9:d5:
2b:92:c3:46:6c:fd:9f:8b:d0:e2:01:cd:86:df:99:
5d:92:1d:be:d1:e6:f9:1e:45:f4:ca:49:d7:14:55:
51:f0:0c:e5:b7:99:31:3a:7c:7b:95:1c:69:77:d7:
90:27:b2:f9:77:25:a9:cd:63:1a:f5:3a:41:50:53:
f8:66:79:47:aa:23:d6:ba:7f:73:87:d5:05:50:28:
c6:2d:fa:f0:43:42:f6:f5:df:7b:f7:a4:bd:b6:c7:
86:f0:70:09:fe:ac:c5:6c:f2:4f:60:97:35:b7:f8:
ea:78:5d:69:f2:28:b2:39:bc:5c:4b:42:a8:c3:58:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:20:3B:01:94:05:B8:F1:0C:97:46:E3:FB:06:E6:BA:71:96:BA:79
X509v3 Authority Key Identifier:
keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:45:4d:fc:da:ea:d7:0f:49:af:6b:f8:a4:71:26:bd:ea:23:
82:3c:39:78:6b:1c:60:de:44:c0:e0:6b:12:0e:d2:0c:73:b0:
27:df:37:14:95:56:7c:15:45:25:88:93:ba:9c:b8:4b:c7:b7:
17:7a:2c:10:6c:7b:02:21:86:03:ea:fd:39:f7:b6:b4:25:18:
f8:b0:90:d4:30:7b:47:98:66:16:34:79:e5:db:e9:74:68:f7:
a5:08:79:c6:8b:8d:0c:a6:ce:38:d0:37:da:74:55:79:44:5a:
9b:37:2a:92:7e:11:c7:2e:34:c8:9c:c6:7b:80:a5:b5:1d:90:
80:83:bf:5d:5b:cb:b7:79:9f:0a:dc:b4:bc:68:4a:1f:c4:3a:
96:80:35:02:f7:21:a0:f2:01:ef:04:0d:0a:bc:34:31:25:5a:
e8:2f:53:34:1f:d9:c1:db:6a:48:44:c7:a6:51:19:ea:9b:a6:
7a:73:af:3c:0f:b2:ed:b8:03:ab:0d:d4:a6:c7:60:a4:a9:6d:
a8:78:1c:6b:bf:6c:d1:19:0b:8a:e9:13:bc:10:6f:ad:32:51:
5e:da:09:e3:1a:28:f9:40:6e:ed:cf:d6:ac:0c:48:ef:a9:fd:
65:2f:5b:8f:97:f6:d7:7f:6b:f0:d2:ca:b9:54:d2:71:1e:2b:
f6:2b:ce:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:48 2026 by rpki-client