
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
File: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft (raw, json)
Hash identifier: QGXtZ9mV04OBLB13RDL02he3e0UeapIe94MvA0y0K6I=
Subject key identifier: 85:9E:80:01:FB:61:BB:CC:B9:F6:94:12:42:82:D4:77:2A:B7:89:51
Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
Certificate issuer: /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
Manifest number: 74
Signing time: Mon 02 Mar 2026 01:00:42 +0000
Manifest this update: Mon 02 Mar 2026 01:00:39 +0000
Manifest next update: Mon 09 Mar 2026 01:00:39 +0000
Files and hashes: 1: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl (hash: GCaIuXz4Dx9JclKkfqRgw5feoziiHarMZEaf9eW/OJI=)
2: CB09977AFB0D11F08355CD12746F56BC.roa (hash: Y6DTASD2URCdLE3oTBxAyH1XxTWqmt689U3qro6bvnY=)
3: BA3B98B2FB0D11F098EF6A0C746F56BC.roa (hash: sp3MAA+6GdhSt6kFlIphgRJHq15Fvj4xCYLoWlCB5KA=)
4: 9D2C024A96AC11F0AFADA123C4F9AE02.roa (hash: Va/KecTHSqGqStSgmBLK50Bj4LC+kYguO3MOtGhkk90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Validity
Not Before: Mar 2 01:00:39 2026 GMT
Not After : Mar 9 01:00:39 2026 GMT
Subject: CN=69a4e139-ae02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:ec:b2:45:2b:3e:91:8f:3b:8f:eb:d6:86:
7e:f4:5d:d4:87:af:ca:7c:88:52:f7:22:14:15:36:
2d:20:7a:a2:49:49:af:ef:a4:a0:93:47:53:fa:35:
1b:a5:87:aa:10:59:d5:e7:1c:7c:6c:29:93:4c:68:
b4:2f:63:be:3b:22:72:1a:b1:39:59:d4:39:64:85:
7f:04:eb:18:40:1a:0d:3a:85:ff:59:09:df:9b:51:
e0:50:fa:d3:27:d9:fd:bf:d1:1f:7c:97:ae:c7:ba:
7e:6d:96:0d:a9:62:2c:e0:4e:1f:ce:a7:e1:d1:79:
8c:f5:a8:cd:05:a3:7f:ee:51:21:be:55:b8:10:db:
09:a6:81:2e:25:36:17:9e:99:63:8a:e6:20:45:68:
32:3e:f5:41:d9:dd:02:8c:e3:41:f9:56:03:2e:a3:
f1:b3:31:be:29:dd:09:79:c1:e4:3b:35:1a:89:c4:
3b:d1:ba:04:e9:a5:9b:52:e1:ae:c6:10:e8:ef:53:
97:75:1e:7b:89:fb:42:eb:65:15:84:ca:2c:50:74:
b3:16:91:27:61:c5:da:fe:23:c8:f3:6b:cb:c0:8b:
2c:73:4c:ec:14:ba:e3:ed:ff:20:5d:cb:24:4d:df:
11:f8:26:22:80:11:b8:93:c3:86:7a:fa:60:07:ad:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9E:80:01:FB:61:BB:CC:B9:F6:94:12:42:82:D4:77:2A:B7:89:51
X509v3 Authority Key Identifier:
keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:7f:ca:93:a8:70:0f:e5:ad:f6:2b:bd:6f:a6:fc:1f:4f:35:
43:bb:66:b3:91:e7:18:d2:a5:62:37:ae:04:cf:18:c1:ce:42:
ee:02:89:c6:ae:21:b5:ec:55:69:af:70:de:f5:48:95:13:02:
48:ea:fb:f2:3e:a4:54:23:0a:06:67:8d:fa:b6:30:d0:f4:4d:
9e:92:57:f4:5e:6b:c7:45:af:53:99:4a:c4:0f:63:73:e7:41:
c7:eb:29:83:3d:5e:ca:24:35:b4:8c:74:02:43:39:2b:fa:51:
64:7f:14:30:3a:ec:5c:cc:6c:e5:2b:41:a1:83:0a:4b:8b:ca:
01:12:e8:b5:bf:06:c8:23:22:dc:73:6a:be:6e:ca:d4:09:17:
ef:c6:c5:ab:cf:be:3f:f2:3d:2d:4f:de:e5:11:48:13:ee:7d:
83:ea:b3:d5:5c:a0:d3:36:f0:ef:a9:bb:f9:bf:31:c6:52:71:
ce:d3:0d:6e:1d:85:43:e1:51:5d:5a:97:da:e8:3a:21:65:82:
3d:87:62:98:e5:35:b7:52:c0:3d:0b:7d:d6:be:69:aa:09:15:
b3:78:44:cc:89:3c:50:81:cc:4a:bb:18:c2:58:71:c7:96:1f:
c9:51:9d:6f:99:2b:f2:b1:e6:f3:a5:ea:5e:8d:50:3a:d0:7b:
2b:0a:06:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:12:39 2026 by rpki-client