
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier: /b4Y8+sp2ZlI4VfFfIeTuZhZLV69ZcdowSXe1KjHqb0=
Subject key identifier: CA:51:6C:74:86:FF:1B:1C:A9:1A:F0:3A:23:A8:A9:7B:F8:44:46:51
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number: 01E0
Signing time: Mon 21 Sep 2026 03:32:56 +0000
Manifest this update: Mon 21 Sep 2026 03:32:56 +0000
Manifest next update: Mon 28 Sep 2026 03:32:56 +0000
Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: PlZ3u4c1MQZb+lPY1Qm62RZNMhgBZp7BjMYqebuo7nM=)
2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: mDopMfVTaRsFnm6rlLIEGyxqISgf4DxErZsfORfZaA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Validity
Not Before: Sep 21 03:32:56 2026 GMT
Not After : Sep 28 03:32:56 2026 GMT
Subject: CN=6ab0a568-2c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:81:79:af:ef:aa:14:93:a2:06:b9:b8:64:
24:11:ea:bc:d0:fa:cd:5b:3f:6a:10:c3:c8:18:b5:
88:67:c8:f8:44:a2:a5:6d:79:86:32:ae:af:33:b1:
0c:2e:56:06:42:3b:6d:34:63:be:23:3c:18:17:ee:
09:3f:2e:05:3c:85:e7:87:ea:3c:b4:6b:2a:d7:5a:
ca:95:15:0a:a7:e0:a8:ca:98:c2:5f:fa:69:6f:04:
1a:8e:f5:d5:5a:6e:b9:5b:02:cf:d4:93:34:49:b6:
d5:55:bf:31:1a:91:0d:b5:f8:34:cc:d4:a1:6a:04:
49:dd:fa:34:53:2d:0c:ec:ca:dd:67:15:b6:eb:44:
1d:0e:22:c0:30:6a:f8:3f:55:25:be:95:36:f9:3c:
a3:e6:b0:0a:c8:18:69:70:37:fe:20:77:ba:4d:cd:
a5:3c:dd:c9:6b:24:2f:12:f0:52:af:1f:3b:47:b2:
d8:05:57:71:51:21:83:63:18:00:8b:da:6e:18:6b:
4d:4b:45:b4:7e:43:8c:aa:68:f9:80:97:fc:b3:a2:
c1:68:ca:81:5d:35:0e:74:f1:bc:61:72:b1:44:b4:
dd:01:0b:a2:33:23:2b:a7:50:2d:02:ed:79:b8:1e:
77:04:cb:8d:b3:a9:a1:13:26:b6:4d:98:b7:d4:57:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:51:6C:74:86:FF:1B:1C:A9:1A:F0:3A:23:A8:A9:7B:F8:44:46:51
X509v3 Authority Key Identifier:
keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:65:24:c5:47:85:3e:16:a8:3b:e9:4d:bb:1e:c9:12:3b:c5:
a7:ae:41:f5:03:70:ee:f2:ad:b8:30:02:50:bf:85:4e:1f:e2:
2a:da:1d:6d:3a:54:a2:63:44:e8:22:2e:37:76:fc:cc:61:a2:
bd:58:ee:15:d9:7b:02:88:5b:b6:20:c1:a1:5a:d6:77:d6:fc:
dd:c7:98:9b:da:f3:4e:21:f8:d4:11:bb:7d:be:e0:a8:9f:b0:
35:18:48:0b:ef:a8:4a:ef:b6:01:f4:55:9f:69:b9:5c:e4:66:
27:2b:67:28:9e:0f:23:39:dd:9b:3a:bb:50:96:1f:42:a1:4f:
54:e3:cf:36:e3:a7:54:38:97:83:09:5b:fc:b0:f2:99:2a:a7:
06:6f:c3:1b:cc:b7:54:f8:ef:b4:39:0a:79:e7:23:d5:41:41:
a9:7c:4b:04:62:12:ea:45:2d:da:c8:7a:b4:25:45:aa:49:e0:
bb:64:cd:2f:32:8a:aa:2f:90:1e:34:4b:37:ea:b1:2a:22:60:
14:80:c4:eb:17:94:f9:08:50:28:da:cc:c7:46:93:70:c0:1b:
56:e2:7f:07:83:2c:20:6d:7c:71:74:4c:b8:b8:19:e5:73:ca:
00:11:d4:5c:df:ff:b6:b0:4f:5d:48:cb:c4:ff:a6:39:6c:26:
0f:6b:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:20:00 2026 by rpki-client