
$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier: GRa93Yb81Wf/Il8TD3v7dHjhMUZP/QVu3b6xiWg5NSE=
Subject key identifier: 06:A5:42:19:48:2A:62:B5:60:85:93:B6:98:F0:70:FC:7D:5A:4D:AF
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number: 0175
Signing time: Sun 01 Mar 2026 05:40:40 +0000
Manifest this update: Sun 01 Mar 2026 05:40:40 +0000
Manifest next update: Sun 08 Mar 2026 05:40:40 +0000
Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: hkTmVajL59lvLiSqdmJJAo1/DkDg++NZ+bdGDyqprp0=)
2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Validity
Not Before: Mar 1 05:40:40 2026 GMT
Not After : Mar 8 05:40:40 2026 GMT
Subject: CN=69a3d158-7604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:d9:93:b2:3a:02:8d:07:55:81:85:0d:57:
3f:3a:50:9d:f0:25:d4:fc:42:e7:c7:55:9d:02:cb:
7f:19:a5:5a:1d:18:6d:e4:a5:bc:00:e1:b1:7e:19:
34:ca:31:c4:b4:64:13:35:d8:27:78:6e:cc:4d:71:
36:ea:4e:ec:d1:17:ee:03:75:38:1b:a7:da:cd:82:
ed:e4:c5:8f:82:05:3e:c1:49:ad:27:4e:1e:50:1e:
e5:60:9d:ba:1c:eb:5d:7a:fe:e1:10:aa:b7:1d:74:
fc:7c:2f:2d:27:1e:10:ca:e2:69:c9:3b:ec:6f:e0:
6b:8a:45:6c:ea:74:7e:11:9f:96:0d:74:f1:a9:54:
64:d5:f9:ef:dc:12:3e:9d:7f:c0:2f:5e:e4:1a:5f:
f4:89:d9:5f:f6:92:bc:37:6c:6f:25:06:71:f6:12:
62:94:aa:48:fd:64:95:94:bf:d5:d9:56:a3:7d:92:
ab:08:ec:b4:2c:4c:46:65:ce:db:e7:54:3e:f1:04:
bd:38:24:1c:56:70:9f:50:4c:ea:8c:c1:b5:d2:79:
a3:eb:a9:b5:ee:d2:58:a2:80:34:cc:d3:14:db:06:
80:fc:e1:f5:9e:d4:0a:d3:4a:27:37:7a:2c:15:f2:
4e:39:f0:8b:a9:70:7d:f0:03:67:68:aa:bb:97:e3:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:42:19:48:2A:62:B5:60:85:93:B6:98:F0:70:FC:7D:5A:4D:AF
X509v3 Authority Key Identifier:
keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:d6:0e:0d:f4:b7:e8:87:8b:b4:3d:c1:9e:de:49:e5:98:
86:05:ea:73:85:f6:66:7e:6c:dd:d0:6f:7a:81:23:96:ff:15:
64:ac:5e:e2:b7:1e:46:bf:52:88:94:3b:05:bc:9f:14:2a:14:
b8:fd:63:8e:77:d4:d3:36:e3:4f:5f:09:ce:47:a9:d6:e9:fe:
71:60:53:3f:73:cd:52:74:6d:e1:fa:75:de:e7:4d:0b:8e:06:
ed:81:8c:86:c6:13:69:c5:20:77:6f:97:f4:49:f3:a1:9f:d5:
cd:87:4d:e9:64:df:28:23:ba:c9:45:be:ba:28:0b:f6:97:83:
07:24:c5:2c:bf:49:6d:f6:1d:e7:6c:01:a1:71:aa:fc:17:82:
86:d2:2c:58:9f:c6:6f:d3:07:73:30:93:c7:44:d7:5f:af:c0:
c2:d1:68:f9:75:0d:0f:a1:9f:71:4b:90:b8:6a:25:5b:2c:a5:
e9:c4:e5:67:e9:00:11:81:0f:00:83:47:a4:15:49:34:76:2b:
d3:52:a3:b5:23:0c:82:ce:67:9c:70:23:48:bf:b1:62:b5:d7:
5e:e5:a3:ae:dd:db:b4:ef:d1:0d:3b:ab:6f:1f:e1:a6:f8:59:
4c:dd:9c:38:c3:2c:dc:c4:68:8e:85:c7:27:f2:b7:a4:23:65:
54:84:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:33 2026 by rpki-client