
$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier: xzwYCMRrgwTyJQoFOoOTcauvrAg7/gmhhDnCBgmrmgc=
Subject key identifier: BF:C6:AC:7C:7B:A9:1A:81:09:73:35:1C:2F:74:34:FF:FF:18:E8:27
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number: 0191
Signing time: Fri 17 Apr 2026 04:07:11 +0000
Manifest this update: Fri 17 Apr 2026 04:07:11 +0000
Manifest next update: Fri 24 Apr 2026 04:07:11 +0000
Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: FVmU72HM9NKdFiNZoXbL++ym7C7DRZwEy13KO2MMKXM=)
2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: mDopMfVTaRsFnm6rlLIEGyxqISgf4DxErZsfORfZaA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Validity
Not Before: Apr 17 04:07:11 2026 GMT
Not After : Apr 24 04:07:11 2026 GMT
Subject: CN=69e1b1ef-cb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c4:9b:0f:5d:9c:79:9e:a8:1b:4e:8e:93:c3:
29:03:16:e1:00:c2:0f:0e:63:2c:8c:21:1b:7e:d7:
55:c5:b6:da:d2:47:aa:5b:46:19:f6:40:16:39:2f:
26:83:d6:28:e5:92:56:cf:fd:1f:bf:a0:62:7f:81:
8f:6d:14:7c:dc:83:66:97:9d:28:1a:86:c7:70:f9:
cf:a3:ae:16:89:1b:d0:cf:72:d1:b8:12:5a:d9:4c:
6e:9a:0e:33:c5:c6:91:e8:58:e8:7b:95:ba:3b:45:
5a:14:d0:a9:da:de:1d:95:6b:1c:84:d5:f1:d6:d4:
c6:4f:75:33:61:93:bf:43:91:ae:f8:3a:ce:10:b8:
77:ef:49:42:99:d5:9b:ca:01:96:1b:58:7f:ab:c0:
6b:4a:23:01:3c:36:0b:34:48:6c:9e:88:a1:af:05:
36:94:21:f2:b1:14:13:4e:64:dd:57:99:e7:1e:f7:
53:f5:ff:f5:65:92:a5:d0:5e:59:e6:3d:c2:92:d8:
d1:fc:95:90:f6:77:83:fa:3b:2f:6c:f8:64:93:75:
e3:9b:17:30:c9:8a:5a:15:37:ec:17:9a:2e:ae:c7:
2d:41:2c:c6:6e:83:08:ee:97:1b:2d:a7:6f:b6:e7:
70:d9:33:fb:8c:94:c8:cb:70:d5:23:fe:01:f6:59:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:AC:7C:7B:A9:1A:81:09:73:35:1C:2F:74:34:FF:FF:18:E8:27
X509v3 Authority Key Identifier:
keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:3b:74:ed:49:73:a3:48:f9:45:c8:70:d8:f9:4b:1f:d8:80:
58:d4:96:eb:ea:99:04:71:85:d8:53:d8:d8:3b:26:26:67:40:
9b:6c:84:4b:6a:94:22:6c:ed:9f:31:86:81:c1:cb:e4:9c:dc:
4c:63:3d:a2:88:c8:2a:8c:03:c8:80:48:06:0a:88:76:ee:af:
d1:c2:33:bc:89:da:f8:31:18:17:f8:fb:0a:23:46:e2:d4:3c:
b3:a7:a4:be:be:9f:c9:3c:0b:22:ee:13:ea:b6:00:6a:a2:ec:
ca:e1:68:c3:a0:9b:1d:a5:4a:61:e8:81:90:c6:60:9d:1b:06:
6d:b3:c6:d4:34:15:4c:1a:ae:12:22:77:6c:70:fc:34:a3:2b:
91:2d:15:c0:19:1a:f7:1c:02:19:f3:2d:d7:70:5c:5e:cb:4c:
4f:59:84:ab:6f:cf:35:3b:47:24:fd:6e:b9:37:13:ca:e4:08:
af:b5:4f:69:b6:b0:9f:9e:86:d9:81:63:09:b5:fd:cf:cb:47:
30:2d:33:48:0f:93:74:20:a1:4d:04:1f:fb:96:1a:4c:bd:05:
e4:17:05:98:b0:45:9a:7b:72:95:59:8c:eb:65:43:95:68:8e:
6f:b8:e6:b5:66:b0:53:f8:98:31:6c:b8:be:c6:b5:45:af:5a:
a8:55:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:23 2026 by rpki-client