
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json)
Hash identifier: eIOVuijPkSAW5PpcwDIEilzm3epIU6hY4xNrvAvzyoI=
Subject key identifier: CD:BF:81:35:C1:2E:CC:08:A8:D1:D9:55:54:97:DD:9E:CC:A2:EC:91
Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Certificate serial: 0D3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
Manifest number: 0D38
Signing time: Sat 28 Feb 2026 18:08:39 +0000
Manifest this update: Sat 28 Feb 2026 18:08:38 +0000
Manifest next update: Sat 07 Mar 2026 18:08:38 +0000
Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: Z+GSb4AV137+RQAmF8w0ubVcXiyp6lynb5TXUAH6fo4=)
2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: 7+D+4cviOAlgLCuJEqBcQy12C4EO3koTOsF6GPsHb00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3391 (0xd3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Validity
Not Before: Feb 28 18:08:38 2026 GMT
Not After : Mar 7 18:08:38 2026 GMT
Subject: CN=69a32f26-0ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:72:41:8b:95:4e:81:c0:9a:ab:39:f0:a1:
aa:68:6c:82:47:48:f7:14:58:75:df:22:c8:15:31:
c7:ac:fa:9b:9d:f6:fd:03:36:47:06:9f:5e:d8:26:
7a:0f:48:89:3f:aa:96:ef:82:da:54:be:15:f8:b0:
ce:b3:d3:af:ad:0f:7f:5f:52:4a:e9:47:02:22:df:
22:b2:21:15:7a:5c:ce:c6:a2:65:8a:78:80:66:3f:
a4:e8:ee:5f:54:2f:86:74:0e:c8:f5:55:3e:9a:11:
8b:c4:af:b0:cc:bc:21:86:3a:c4:51:2e:80:20:b6:
a0:25:bc:2b:43:70:6f:88:f3:ed:9c:75:fe:61:54:
46:61:16:7e:ce:8d:cb:f4:2d:46:5c:c7:e8:74:e8:
5d:78:56:bb:ac:55:9a:f8:e0:3f:1b:78:03:7d:8e:
3f:27:c6:7c:77:b0:fd:d7:06:b5:0d:f0:70:4c:4d:
7a:23:64:30:c6:8b:bc:61:62:15:d2:5f:3e:70:f7:
d5:da:82:1a:4f:8d:a1:62:31:a9:dd:9e:e1:bd:de:
1b:31:06:a9:8c:23:63:62:6e:03:80:4b:26:63:05:
a1:ea:32:cc:24:c4:f9:37:b4:f1:9a:43:08:67:c9:
95:e1:62:b7:59:f8:ae:8f:6b:4e:1b:c5:f2:6c:70:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:81:35:C1:2E:CC:08:A8:D1:D9:55:54:97:DD:9E:CC:A2:EC:91
X509v3 Authority Key Identifier:
keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:66:35:05:58:8b:2b:18:0f:3b:01:e8:90:1e:07:f9:f0:50:
19:7f:a3:b5:0b:76:a1:b0:64:03:97:61:2e:ed:23:55:0f:6f:
de:44:e8:74:ef:ea:97:9d:b5:dd:45:ed:0f:9a:44:fd:a8:37:
a5:58:51:df:06:d0:cd:76:a5:5c:ab:81:44:02:c7:4b:79:90:
43:ab:b5:0a:b7:1c:5f:f2:ad:3e:d5:22:e0:df:a0:37:9a:5d:
47:be:34:5d:1f:28:dc:3b:0b:9f:41:3d:f1:47:c3:e2:aa:8e:
6a:a6:19:cb:af:e4:5e:1b:b5:9d:ed:13:74:8b:7d:27:b3:53:
5f:d9:d0:3b:fe:34:b0:9b:bd:e3:01:d4:49:11:2c:fe:3a:23:
3d:02:da:57:7c:50:4a:c7:03:63:19:4b:5c:0c:30:7e:2f:2f:
55:78:08:0a:c2:76:a3:82:db:6c:0d:58:1f:41:ad:c7:08:cf:
62:17:70:ce:62:ee:a0:04:ab:4f:75:22:06:c4:d7:4b:10:e1:
b3:5f:14:12:78:5c:11:a1:bf:cc:c8:72:58:5c:ea:36:ae:17:
9d:32:66:e3:5f:65:5f:41:dc:95:de:77:cf:4c:bd:da:23:e0:
20:9f:e2:9d:5f:37:24:77:6b:93:e5:94:94:76:f2:20:f1:1b:
dd:a1:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:09:23 2026 by rpki-client