
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
File: pZmI7E1t1bpqMPhmUatWLBimo04.mft (raw, json)
Hash identifier: dqMkTZ6Pjno1oNykBo3MJW5Cz3b/H38k0OraO3N+bJo=
Subject key identifier: F1:D3:DB:5B:B3:02:88:7D:40:99:6B:0C:03:42:09:78:33:1E:10:63
Authority key identifier: A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E
Certificate issuer: /CN=A9143FF5/serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
Certificate serial: 0567
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
Manifest number: 0561
Signing time: Sat 28 Feb 2026 23:56:05 +0000
Manifest this update: Sat 28 Feb 2026 23:56:05 +0000
Manifest next update: Sat 07 Mar 2026 23:56:05 +0000
Files and hashes: 1: pZmI7E1t1bpqMPhmUatWLBimo04.crl (hash: oMSR9VUqd9loA/xXOE9tUPdebqE27AJBDWhoM0hMHJw=)
2: A027E062300911ECAE581534C4F9AE02.roa (hash: IfYMnfBuZ7Hn4Ed7GC0hU+In3dQLdmhWoxlwfX2G9eM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl
rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1383 (0x567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FF5, serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
Validity
Not Before: Feb 28 23:56:05 2026 GMT
Not After : Mar 7 23:56:05 2026 GMT
Subject: CN=69a38095-35fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:1e:7b:e0:01:e1:1e:86:8e:2f:a4:04:d8:
90:85:80:cd:0a:4a:2e:9c:81:4d:8d:ff:de:25:f6:
51:92:79:76:fa:fa:06:72:e9:88:d2:ba:62:23:d0:
e8:84:5d:72:6c:b9:e0:ed:52:26:ca:da:9b:0a:26:
99:4c:9c:aa:39:44:5c:c4:bb:39:40:39:ad:7c:3b:
5f:60:66:f7:2d:5b:65:6e:35:fc:04:19:fd:2b:95:
e8:f6:e6:d3:76:94:16:5d:ec:92:72:e5:0e:54:6b:
aa:b1:f4:42:ff:e7:a3:cb:d6:b8:cc:42:7c:79:4e:
a6:c8:95:e5:2f:5e:81:be:ff:84:6a:77:bf:bc:52:
cc:75:08:f5:0a:8b:67:41:ef:b8:5a:82:e7:24:f8:
d1:df:1e:09:93:a2:00:0d:50:2b:5a:4f:3b:9c:94:
0e:6c:65:e4:47:48:66:ec:68:91:11:35:df:14:45:
21:8d:dc:ad:2c:39:61:bf:07:ed:00:ba:34:31:c8:
fa:ee:a8:64:c9:f7:10:33:a4:2e:80:f0:20:e0:b3:
6d:4d:0b:16:12:38:e0:2b:82:43:6d:b3:24:a5:bb:
04:bb:9b:77:51:cb:20:c9:4d:11:35:8b:8b:89:e2:
6c:d1:a5:f9:7e:de:40:43:62:78:5d:0c:6a:d6:e8:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D3:DB:5B:B3:02:88:7D:40:99:6B:0C:03:42:09:78:33:1E:10:63
X509v3 Authority Key Identifier:
keyid:A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f0:e8:20:01:e1:b8:9e:50:0d:36:ba:96:c6:7b:df:25:92:
bf:83:ad:18:84:d0:c7:a8:01:37:e6:d5:be:fb:c6:fd:d2:2a:
44:22:c2:22:7e:88:82:32:e7:2b:f3:9d:fe:60:eb:17:e5:a2:
48:02:4a:69:db:7c:1f:8f:9d:53:d7:76:db:0e:a3:ad:a0:b7:
33:fa:25:58:d0:77:f8:1f:9a:ed:dc:75:d4:99:8f:27:b7:1a:
8f:f9:b3:ad:e4:ca:d6:ad:4a:8e:6f:83:34:a3:fe:84:3b:d4:
42:a8:d0:13:6a:c3:05:64:9d:e6:50:71:c9:d9:7f:d3:e6:98:
3a:20:91:b5:3c:40:7f:b5:e5:53:9d:2b:fd:d7:3a:de:af:79:
29:a2:c0:04:bd:12:99:84:9b:3b:54:5c:a8:d6:77:a4:80:48:
e4:9d:9f:19:8d:65:d8:df:bb:3f:18:14:05:2a:92:22:b6:5b:
5d:27:80:ff:03:90:05:0d:69:b6:3e:80:c7:f5:52:f7:3c:31:
2f:1b:53:af:6e:b8:7e:6c:d1:a4:d2:a7:05:df:30:6e:25:6e:
aa:69:32:aa:ad:6c:6b:48:22:3b:4c:59:0c:3c:b2:f5:06:69:
a5:38:ab:a7:6d:99:1f:c3:d5:47:7f:64:d3:01:af:4b:37:9d:
0d:9d:86:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGRjUxMTAvBgNVBAUTKEE1OTk4OEVDNEQ2REQ1QkE2QTMwRjg2NjUxQUI1NjJD
MThBNkEzNEUwHhcNMjYwMjI4MjM1NjA1WhcNMjYwMzA3MjM1NjA1WjAYMRYwFAYD
VQQDDA02OWEzODA5NS0zNWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz0oee+AB4R6Gji+kBNiQhYDNCkounIFNjf/eJfZRknl2+voGcumI0rpiI9Do
hF1ybLng7VImytqbCiaZTJyqOURcxLs5QDmtfDtfYGb3LVtlbjX8BBn9K5Xo9ubT
dpQWXeyScuUOVGuqsfRC/+ejy9a4zEJ8eU6myJXlL16Bvv+Eane/vFLMdQj1Cotn
Qe+4WoLnJPjR3x4Jk6IADVArWk87nJQObGXkR0hm7GiRETXfFEUhjdytLDlhvwft
ALo0Mcj67qhkyfcQM6QugPAg4LNtTQsWEjjgK4JDbbMkpbsEu5t3UcsgyU0RNYuL
ieJs0aX5ft5AQ2J4XQxq1uhQlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHT21uz
Aoh9QJlrDANCCXgzHhBjMB8GA1UdIwQYMBaAFKWZiOxNbdW6ajD4ZlGrViwYpqNO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZGNS8wMTM5NjlCNDIw
MUMxMUVDOEExNzNDMkNDNEY5QUUwMi9wWm1JN0UxdDFicHFNUGhtVWF0V0xCaW1v
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BabUk3RTF0MWJwcU1QaG1VYXRXTEJpbW8wNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0ZGNS8wMTM5NjlCNDIwMUMxMUVDOEExNzNDMkNDNEY5QUUwMi9wWm1JN0UxdDFi
cHFNUGhtVWF0V0xCaW1vMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnPDoIAHhuJ5QDTa6lsZ73yWSv4OtGITQx6gBN+bVvvvG/dIqRCLCIn6IgjLn
K/Od/mDrF+WiSAJKadt8H4+dU9d22w6jraC3M/olWNB3+B+a7dx11JmPJ7caj/mz
reTK1q1Kjm+DNKP+hDvUQqjQE2rDBWSd5lBxydl/0+aYOiCRtTxAf7XlU50r/dc6
3q95KaLABL0SmYSbO1RcqNZ3pIBI5J2fGY1l2N+7PxgUBSqSIrZbXSeA/wOQBQ1p
tj6Ax/VS9zwxLxtTr264fmzRpNKnBd8wbiVuqmkyqq1sa0giO0xZDDyy9QZppTir
p22ZH8PVR39k0wGvSzedDZ2GnQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:30 2026 by rpki-client