
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
File: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json)
Hash identifier: 4J4gJRbX28APFqj0fEvU2EXQHI+9PSS+AjcpujBKDv8=
Subject key identifier: F1:73:C9:A1:A7:41:3F:D1:61:E0:CC:BF:27:D6:71:C7:5E:BF:61:BA
Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
Certificate issuer: /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
Manifest number: 35
Signing time: Sun 01 Mar 2026 09:59:26 +0000
Manifest this update: Sun 01 Mar 2026 09:59:25 +0000
Manifest next update: Sun 08 Mar 2026 09:59:25 +0000
Files and hashes: 1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: Q3XZcqfUpW/CQNeLDd1P7o1LU4BkXaFlNhXS2nmwULM=)
2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: qhmDYrXSka0BnnAzbzb+vh6r8WiWcCMdpJjXHDEOqUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Validity
Not Before: Mar 1 09:59:25 2026 GMT
Not After : Mar 8 09:59:25 2026 GMT
Subject: CN=69a40dfe-2923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:33:d7:c6:a2:67:8d:bd:fc:ed:1f:8c:b6:
d2:00:ff:17:59:16:f2:9a:67:9f:f2:fd:8e:f2:e6:
87:09:67:7f:9b:b7:49:54:86:a5:e9:84:48:68:d9:
4e:aa:c3:56:5a:3f:b8:14:c7:4a:e8:88:7c:82:b6:
bf:d8:21:fd:50:fc:3d:fa:a5:73:e6:d8:72:e7:13:
3a:28:f5:c5:a8:34:08:e5:d9:e3:6f:f3:bb:d1:1a:
49:cf:8d:d8:96:81:47:bd:4b:a8:4a:34:54:c8:3c:
e1:08:fd:4c:47:19:f6:81:83:f8:8a:17:09:88:3c:
eb:c3:d4:74:bc:0a:72:ff:f4:85:01:5c:6d:f6:5b:
18:90:ff:21:1d:fa:a1:d3:47:43:03:16:ac:33:03:
b4:b7:df:0b:a7:ec:63:57:57:8a:e2:16:84:f7:52:
55:f7:64:d7:7d:f8:9c:f8:d7:be:a3:9f:f5:6d:b0:
c8:29:42:ee:d0:e8:d1:8d:d3:fa:d1:1d:d0:48:3a:
09:28:4c:de:7f:53:5e:d2:f1:e6:25:00:2a:c4:6e:
cc:ee:7f:d2:34:21:31:d2:bd:ef:61:f4:cd:8d:15:
ea:a9:bc:ba:01:e5:3f:90:d0:8e:f5:35:28:61:93:
94:ac:0a:30:1d:0b:57:f3:81:a8:bc:ee:ca:05:50:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:C9:A1:A7:41:3F:D1:61:E0:CC:BF:27:D6:71:C7:5E:BF:61:BA
X509v3 Authority Key Identifier:
keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:22:f6:49:09:35:26:c4:2e:c8:14:55:d0:21:1e:d4:d2:38:
c3:0a:7a:00:91:19:ad:e8:44:78:ea:2d:f4:93:f4:dc:49:de:
47:8b:bd:6e:bf:48:2a:6b:27:22:4b:d6:38:17:78:8d:25:40:
12:ce:b9:c4:0d:b8:cf:02:ef:a5:cb:7d:d0:4d:26:cf:09:6a:
3e:1d:b8:a9:94:e2:34:ef:0a:e3:a5:4d:49:0d:0b:c8:4c:ff:
eb:bc:b6:ff:1e:96:f0:c0:f3:2a:b3:44:48:e2:38:00:57:e2:
8f:2a:97:1a:21:bf:04:8d:61:d1:df:7f:b1:8a:10:9f:23:08:
57:d6:84:ea:bc:9a:06:1f:be:22:e7:45:a7:b7:cb:26:24:b8:
07:d8:13:a7:70:24:38:fe:87:82:6f:5b:0c:c9:22:19:b6:38:
22:44:47:88:6d:1b:60:0f:44:36:af:81:e3:d3:a5:d9:c1:55:
37:0a:57:15:86:bb:c6:d0:95:ef:25:04:bd:48:a4:e1:91:6c:
4e:5e:61:bf:49:ac:98:26:09:4c:c9:1e:66:2e:0c:4a:06:07:
37:7f:bf:fd:4a:04:40:cd:66:72:21:1b:d5:82:cb:59:01:88:
b7:b4:ab:f8:d4:80:42:34:26:97:9f:3e:50:b8:f3:dc:73:3d:
3c:be:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:55 2026 by rpki-client