
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
File: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft (raw, json)
Hash identifier: K0LrbHGJfCT4wi0t6IMcRIZopNe4iZfXTKPIMMvHEb4=
Subject key identifier: A8:A5:F5:4E:51:31:03:86:A1:49:EA:8B:EA:34:5C:BB:0F:9E:21:5D
Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
Certificate issuer: /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
Manifest number: 8C
Signing time: Fri 17 Apr 2026 07:26:34 +0000
Manifest this update: Fri 17 Apr 2026 07:26:33 +0000
Manifest next update: Fri 24 Apr 2026 07:26:33 +0000
Files and hashes: 1: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl (hash: F1bI7hMQdrjG2dpU16Bn8fP/pWotGCwNGw4h1VTzKLc=)
2: 9D2C024A96AC11F0AFADA123C4F9AE02.roa (hash: Va/KecTHSqGqStSgmBLK50Bj4LC+kYguO3MOtGhkk90=)
3: CB09977AFB0D11F08355CD12746F56BC.roa (hash: Y6DTASD2URCdLE3oTBxAyH1XxTWqmt689U3qro6bvnY=)
4: BA3B98B2FB0D11F098EF6A0C746F56BC.roa (hash: sp3MAA+6GdhSt6kFlIphgRJHq15Fvj4xCYLoWlCB5KA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Validity
Not Before: Apr 17 07:26:33 2026 GMT
Not After : Apr 24 07:26:33 2026 GMT
Subject: CN=69e1e0aa-5fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c3:9c:1b:fb:71:8b:90:ac:74:61:6f:da:b1:
5c:d3:47:09:a1:d9:ba:a2:23:56:24:1e:80:69:98:
63:e2:1f:5c:2f:c9:3d:0f:f3:7b:ed:f3:a3:3f:fd:
74:a4:63:03:36:3b:c5:d4:4b:64:47:19:e1:07:a5:
1a:3b:09:33:5a:29:2a:50:b5:0c:0c:64:cf:e1:51:
b9:0e:43:66:13:01:40:94:39:01:e1:06:a2:22:4e:
69:07:58:e1:ca:0a:58:13:4d:c5:24:5a:30:a6:d2:
c3:07:1d:51:98:a9:4d:4f:36:1b:e8:17:ae:e1:94:
21:5a:3f:48:f2:37:76:ea:52:ea:4d:43:2e:fa:45:
18:53:33:3d:0f:7f:5d:e0:9e:30:46:e5:70:67:7b:
17:5f:dc:b9:20:92:c9:3a:44:dc:b0:64:75:0b:a1:
ca:98:f7:5d:2b:c2:5a:c0:91:99:f5:44:ef:cf:cc:
e6:11:13:98:23:f7:df:c3:59:6b:40:68:cd:20:fb:
b2:64:d5:cf:71:1c:d9:1d:5e:55:75:4d:b2:f5:06:
a2:84:ee:0b:06:ef:33:46:20:c1:bb:71:17:6e:fe:
2d:08:58:09:3d:1b:03:2b:d4:42:e5:71:62:e6:00:
3e:22:5a:63:90:11:d8:02:85:5a:f3:3e:04:92:e3:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A5:F5:4E:51:31:03:86:A1:49:EA:8B:EA:34:5C:BB:0F:9E:21:5D
X509v3 Authority Key Identifier:
keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:21:b3:b1:c4:38:bb:6f:33:b4:46:53:b0:d1:5c:59:a2:87:
37:6b:8d:3f:d7:38:ad:d6:fb:b1:c8:57:32:28:60:e0:69:83:
a0:44:37:7f:66:ac:1a:2a:60:cb:8b:75:b3:a9:fd:7c:93:06:
8a:d9:95:63:10:d6:62:ff:39:59:66:5e:9a:89:dc:74:fe:62:
12:a1:a0:8b:0b:be:d9:12:07:6f:4b:2f:ae:37:1e:4d:97:27:
9d:b0:a5:f4:66:b4:3f:71:c0:19:31:9f:06:a9:8e:7a:2a:b0:
db:2c:25:de:18:08:64:f6:77:fd:c9:3a:f1:f4:9c:cb:c9:07:
43:ca:2f:70:5f:51:1b:75:75:94:11:3e:30:c8:ca:c1:35:51:
8b:20:13:46:4d:02:44:84:69:6b:36:de:15:24:a3:56:f4:4d:
9e:ec:b9:da:41:7c:f1:60:ac:d6:61:1b:b0:51:c0:ec:cd:54:
97:44:9e:f2:01:10:b7:5f:53:4b:47:44:03:c3:a1:f5:ad:85:
da:c1:ee:a8:ba:ad:1a:a1:d4:f9:f1:53:5b:5c:e0:6e:fb:2e:
94:b4:75:2b:40:56:e4:7e:11:0a:b5:b2:02:f9:11:8d:48:a3:
16:26:12:f3:9d:b5:07:ad:c2:40:3f:9b:95:d5:5c:53:b4:63:
be:ac:4f:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzMwNjUxMTAvBgNVBAUTKDY1NEJDRkQ3MEFCQzYwQjU0MTM5Mjg1MzA1RUZEMEUz
MTVDMzM2OEUwHhcNMjYwNDE3MDcyNjMzWhcNMjYwNDI0MDcyNjMzWjAYMRYwFAYD
VQQDEw02OWUxZTBhYS01ZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg8OcG/txi5CsdGFv2rFc00cJodm6oiNWJB6AaZhj4h9cL8k9D/N77fOjP/10
pGMDNjvF1EtkRxnhB6UaOwkzWikqULUMDGTP4VG5DkNmEwFAlDkB4QaiIk5pB1jh
ygpYE03FJFowptLDBx1RmKlNTzYb6Beu4ZQhWj9I8jd26lLqTUMu+kUYUzM9D39d
4J4wRuVwZ3sXX9y5IJLJOkTcsGR1C6HKmPddK8JawJGZ9UTvz8zmEROYI/ffw1lr
QGjNIPuyZNXPcRzZHV5VdU2y9QaihO4LBu8zRiDBu3EXbv4tCFgJPRsDK9RC5XFi
5gA+IlpjkBHYAoVa8z4EkuOM+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKil9U5R
MQOGoUnqi+o0XLsPniFdMB8GA1UdIwQYMBaAFGVLz9cKvGC1QTkoUwXv0OMVwzaO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzA2NS9EQjM1MTRCMDgy
MzMxMUYwOTM5QkZGM0ZDNEY5QUUwMi9aVXZQMXdxOFlMVkJPU2hUQmVfUTR4WERO
bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pVdlAxd3E4WUxWQk9TaFRCZV9RNHhYRE5vNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzA2NS9EQjM1MTRCMDgyMzMxMUYwOTM5QkZGM0ZDNEY5QUUwMi9aVXZQMXdxOFlM
VkJPU2hUQmVfUTR4WERObzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdiGzscQ4u28ztEZTsNFcWaKHN2uNP9c4rdb7schXMihg4GmDoEQ3f2asGipg
y4t1s6n9fJMGitmVYxDWYv85WWZemoncdP5iEqGgiwu+2RIHb0svrjceTZcnnbCl
9Ga0P3HAGTGfBqmOeiqw2ywl3hgIZPZ3/ck68fScy8kHQ8ovcF9RG3V1lBE+MMjK
wTVRiyATRk0CRIRpazbeFSSjVvRNnuy52kF88WCs1mEbsFHA7M1Ul0Se8gEQt19T
S0dEA8Oh9a2F2sHuqLqtGqHU+fFTW1zgbvsulLR1K0BW5H4RCrWyAvkRjUijFiYS
8521B63CQD+bldVcU7RjvqxPag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:07 2026 by rpki-client