
$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json)
Hash identifier: shyAP8Gc7nSSzo19cBDGxDDfB+7HCWOuN/FMozCZ/+k=
Subject key identifier: 2C:50:28:8F:D9:5B:65:BE:84:E8:55:76:01:61:2C:FC:FA:02:E5:32
Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4
Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
Manifest number: 017C
Signing time: Mon 02 Mar 2026 00:54:46 +0000
Manifest this update: Mon 02 Mar 2026 00:54:44 +0000
Manifest next update: Mon 09 Mar 2026 00:54:44 +0000
Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: BkZezwEkOux06e0QUbU91sUQfq0Hm+MbUinDLjx24gM=)
2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: bDk0dTCcXXwoyGNHG7dXikKHkNDvJb46kkua1d0llpM=)
3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: tLouppKY1O/6GXH+SdYfoILqmDN1F4xwDCVD59ai06g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl
rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
Validity
Not Before: Mar 2 00:54:44 2026 GMT
Not After : Mar 9 00:54:44 2026 GMT
Subject: CN=69a4dfd5-7cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:bc:cf:e1:38:af:90:0f:bc:5b:ad:78:92:
5e:20:6a:9d:74:b7:22:e7:13:c8:cb:ae:50:22:7a:
df:04:d8:4f:17:63:d6:76:85:27:94:a7:ed:3b:b6:
b2:2e:76:ca:76:42:9d:33:de:2e:fc:d8:4a:f5:06:
fb:fd:f8:48:8a:41:5f:7e:94:80:7c:a5:1e:99:a8:
6d:84:53:39:fb:cb:b9:25:10:88:06:6e:84:12:13:
50:f8:ed:5b:d3:1b:7e:78:60:13:76:ba:28:bc:f1:
f0:27:b0:6c:68:a5:cd:8e:ea:80:ff:08:6b:65:59:
11:86:4b:0c:1a:87:98:ff:a1:2e:b0:9f:7a:36:6e:
3e:65:bf:9b:4d:eb:e8:72:4b:4e:73:e7:5c:f6:66:
10:65:cf:5c:c5:35:06:4c:8a:cc:a7:9c:9f:df:a8:
f9:cc:95:ab:01:ee:98:c4:bb:b3:f7:33:1c:d9:3d:
36:fe:80:c3:68:2d:36:83:9d:e2:33:49:15:da:1f:
39:5b:5f:30:b0:57:6c:c3:a5:d5:2d:d3:48:e1:9f:
85:23:8a:a1:c1:f6:51:b0:42:94:f5:fd:37:af:62:
aa:a1:d5:61:1d:80:76:d2:c9:62:92:92:91:53:40:
1b:e5:10:9e:86:e2:60:14:f6:1a:cf:89:b9:41:12:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:50:28:8F:D9:5B:65:BE:84:E8:55:76:01:61:2C:FC:FA:02:E5:32
X509v3 Authority Key Identifier:
keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c8:a0:bd:de:02:db:39:6e:c2:ba:93:8b:c7:b7:fc:39:1e:
74:35:ed:0e:e4:37:bd:b7:dc:87:eb:e1:63:89:00:2e:98:3e:
05:26:2e:2d:56:6a:34:77:02:aa:bf:9a:ab:7b:04:72:ad:11:
39:eb:d1:2d:b2:32:92:d3:76:62:21:ad:72:7a:b4:29:df:f7:
e5:6e:38:6c:80:b0:52:d2:2f:5d:ff:b9:8b:88:52:32:27:d0:
1f:a3:5c:cf:66:48:43:19:00:85:b6:94:05:27:88:43:17:52:
ee:25:e5:75:a2:23:f8:5b:6d:7e:1a:86:88:8e:d9:51:2a:e7:
c4:11:8e:fa:d0:d3:68:65:6d:9e:74:9a:2b:72:b1:5f:f5:7c:
c0:6c:08:c9:3d:fc:b8:3a:6a:59:6e:80:54:0d:8e:8f:d9:c7:
0f:ed:54:a5:08:87:b6:1c:fc:f0:92:b4:f2:54:f4:cf:9d:91:
82:80:be:0d:f4:ab:c1:53:f3:16:e5:c3:90:a8:a5:74:bb:cd:
5c:fa:64:2a:87:92:ef:da:98:20:60:f3:da:18:41:35:0a:29:
7a:74:5f:3e:74:2f:71:01:78:c2:f9:c3:4c:8c:82:0d:f9:5b:
91:3b:e0:27:d3:95:0d:55:7f:02:98:ae:04:63:39:3c:89:c7:
1e:3f:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:17 2026 by rpki-client