
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json)
Hash identifier: NDaTmKYNh6qr8di6JbM0xCgJxalRTy1TaU4Wk03UByw=
Subject key identifier: CA:54:7B:37:5A:11:07:F7:E6:31:F1:52:1B:E1:89:49:42:7C:0A:C9
Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Certificate serial: 0914
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
Manifest number: 090D
Signing time: Thu 16 Apr 2026 20:11:51 +0000
Manifest this update: Thu 16 Apr 2026 20:11:51 +0000
Manifest next update: Thu 23 Apr 2026 20:11:51 +0000
Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: 1PqDNSWSecBlWl/tRNs62f4ww70oau3dAAyt3y9njwQ=)
2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: okmXmHYulLyxDZHeOTwAQb95eohRY4pGXYv8eeAWmU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Validity
Not Before: Apr 16 20:11:51 2026 GMT
Not After : Apr 23 20:11:51 2026 GMT
Subject: CN=69e14287-760a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:cb:9b:6d:27:23:9d:67:ab:3c:66:28:c8:
da:66:f0:51:5a:32:d2:31:4f:05:ec:5b:60:1a:72:
52:f7:4e:8d:14:03:7f:ee:19:8a:8a:50:14:68:23:
e4:17:3c:6a:91:dc:79:7d:40:34:bc:de:67:4a:40:
0a:19:4a:ed:df:39:a8:fc:90:34:14:42:04:92:f8:
86:a9:af:15:54:ed:bb:7a:67:28:f8:48:25:ef:4b:
95:56:19:90:ec:eb:6d:9d:a5:a3:3d:e2:2b:65:11:
07:e9:74:f0:4e:a9:7c:f6:61:b8:79:c8:6e:83:88:
4b:15:a5:5e:3d:f0:3a:4b:f5:3d:0a:e5:a4:bb:3f:
91:61:28:97:35:7c:88:27:de:0b:ff:66:17:2e:83:
0e:f9:a2:23:2b:8d:44:56:e8:fe:a1:48:0f:7b:dd:
77:53:63:68:0b:9b:98:02:3c:98:c0:1f:43:94:05:
0d:6f:61:1e:6c:f4:69:6a:7d:c0:84:67:c0:f7:07:
bb:3d:86:d0:c9:41:2c:dc:bf:70:e9:a5:40:51:dc:
0f:f2:14:e4:a7:89:2d:53:2a:b8:46:2f:bb:cb:cb:
e4:bd:d4:5f:57:3e:28:d7:8a:90:4a:97:fd:d0:c8:
1c:eb:bd:74:f2:b3:4d:18:86:0a:e8:ea:1a:6a:b8:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:7B:37:5A:11:07:F7:E6:31:F1:52:1B:E1:89:49:42:7C:0A:C9
X509v3 Authority Key Identifier:
keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:51:fb:08:6c:fd:ff:3c:b6:e2:eb:90:15:f8:97:d2:0b:51:
d5:a6:c6:d0:25:b2:49:07:4e:26:97:af:ab:c3:f7:3d:26:3e:
24:a5:06:98:73:90:6f:5f:1a:8a:45:b5:43:fe:d3:ea:a6:34:
8c:71:e3:17:5d:04:b1:08:37:15:31:43:96:6f:6e:8e:bd:1e:
57:3f:64:95:24:74:7f:e0:8f:dc:1e:cd:6b:7e:f9:30:eb:05:
b8:bc:c5:0d:31:9d:55:30:ac:7a:79:1f:f1:21:31:57:05:96:
8d:25:a9:c8:a0:4d:d0:6b:67:05:14:a6:f4:ac:28:97:bd:6f:
b7:3b:eb:18:ef:19:0d:28:e3:f3:c2:1b:40:70:bd:4d:50:27:
0d:3c:12:33:95:03:4e:e0:03:35:31:e5:dd:45:78:78:69:a6:
72:75:85:5b:66:6b:b2:c4:3e:cf:1b:2b:95:c8:84:2a:e6:11:
d2:a9:c1:ac:81:43:1d:86:7e:36:9b:b6:75:78:08:6e:c9:1a:
07:c6:ea:ea:14:89:56:c4:44:56:52:f6:70:68:8d:16:ad:54:
17:bc:a1:25:57:1d:34:ea:16:df:88:88:b9:db:78:99:38:ce:
e4:02:a2:9a:33:bb:d7:c2:e1:fa:36:b4:a6:7f:7f:c3:83:c8:
8a:43:40:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE
OUZGQTczQkQwHhcNMjYwNDE2MjAxMTUxWhcNMjYwNDIzMjAxMTUxWjAYMRYwFAYD
VQQDEw02OWUxNDI4Ny03NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/jLm20nI51nqzxmKMjaZvBRWjLSMU8F7FtgGnJS906NFAN/7hmKilAUaCPk
Fzxqkdx5fUA0vN5nSkAKGUrt3zmo/JA0FEIEkviGqa8VVO27emco+Egl70uVVhmQ
7OttnaWjPeIrZREH6XTwTql89mG4echug4hLFaVePfA6S/U9CuWkuz+RYSiXNXyI
J94L/2YXLoMO+aIjK41EVuj+oUgPe913U2NoC5uYAjyYwB9DlAUNb2EebPRpan3A
hGfA9we7PYbQyUEs3L9w6aVAUdwP8hTkp4ktUyq4Ri+7y8vkvdRfVz4o14qQSpf9
0Mgc67108rNNGIYK6Ooaarj8QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpUezda
EQf35jHxUhvhiUlCfArJMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1
QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt
UW8xQjV4SUdsMF9aXzZjNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc1H7CGz9/zy24uuQFfiX0gtR1abG0CWySQdOJpevq8P3PSY+JKUGmHOQb18a
ikW1Q/7T6qY0jHHjF10EsQg3FTFDlm9ujr0eVz9klSR0f+CP3B7Na375MOsFuLzF
DTGdVTCsenkf8SExVwWWjSWpyKBN0GtnBRSm9Kwol71vtzvrGO8ZDSjj88IbQHC9
TVAnDTwSM5UDTuADNTHl3UV4eGmmcnWFW2ZrssQ+zxsrlciEKuYR0qnBrIFDHYZ+
Npu2dXgIbskaB8bq6hSJVsREVlL2cGiNFq1UF7yhJVcdNOoW34iIudt4mTjO5AKi
mjO718Lh+ja0pn9/w4PIikNA7g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:53 2026 by rpki-client