
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json)
Hash identifier: eEkFRLacFrSv9smzBzhoBV1NHjS8UIt6okAv+iT5yxE=
Subject key identifier: 8C:C1:AA:07:29:4B:6F:86:17:06:7C:DC:C3:A5:42:0F:86:51:65:86
Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Certificate serial: 08F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
Manifest number: 08F3
Signing time: Sat 28 Feb 2026 20:39:27 +0000
Manifest this update: Sat 28 Feb 2026 20:39:26 +0000
Manifest next update: Sat 07 Mar 2026 20:39:26 +0000
Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: fU2FwEj1+MaB3U4GSr4XJyeR2Al0FP2v4lVLZW8hGDo=)
2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Validity
Not Before: Feb 28 20:39:26 2026 GMT
Not After : Mar 7 20:39:26 2026 GMT
Subject: CN=69a3527e-4220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:91:bc:66:66:58:16:3c:46:6a:10:a6:d5:
9c:95:11:e5:a6:27:e5:01:ff:a8:d6:3c:f7:bf:00:
2c:f3:8d:86:64:ca:8f:d2:76:2c:54:e4:ab:65:7e:
de:17:d9:70:68:59:d8:cd:2e:73:8b:46:cd:d5:ec:
89:12:17:3f:18:6f:2e:6f:45:48:d2:14:97:76:77:
64:91:8f:53:6d:e3:2a:09:9d:9e:21:23:c5:1e:86:
54:b3:d5:4d:d1:d4:8e:bc:e0:77:08:d3:2b:f9:64:
d1:4b:cf:f4:56:ff:de:09:cf:c8:61:cb:53:4f:f2:
e3:4d:83:ed:62:24:61:b8:b6:8c:8e:36:96:11:8e:
cd:57:16:ac:74:e6:8d:a9:fa:2e:94:84:91:0e:9c:
97:fb:ac:2c:8e:8d:9a:9b:90:c0:9a:de:cb:b8:d6:
fb:88:cf:7c:7f:f5:66:aa:38:89:40:ca:38:ef:9d:
5d:51:91:f3:04:c4:04:49:da:51:e8:e5:e9:ce:bc:
52:58:86:44:38:8a:70:a2:ec:5a:21:65:9f:d2:65:
61:fa:d6:0e:02:88:ef:4d:74:db:ba:98:02:49:ee:
b5:c2:9b:64:d1:00:30:1a:08:2b:71:93:b6:09:e5:
83:26:83:50:77:7e:64:df:c0:85:fd:c5:aa:a0:f7:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C1:AA:07:29:4B:6F:86:17:06:7C:DC:C3:A5:42:0F:86:51:65:86
X509v3 Authority Key Identifier:
keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:de:33:32:72:b4:03:9f:46:c9:cb:39:23:74:53:2a:95:00:
77:3b:ef:8f:a9:5f:39:37:5b:c7:a8:51:b1:b2:bc:31:99:27:
6f:11:8e:3c:d3:19:3c:1e:62:a1:46:38:42:ab:a6:4a:63:a8:
8c:09:e1:fe:4b:b9:61:c5:54:f2:8e:cb:0f:b6:38:84:ec:6c:
20:fe:cc:49:64:a7:92:c3:d4:ca:ba:03:a5:c5:9f:06:36:09:
aa:42:bf:94:b7:87:db:10:da:2b:a3:35:bd:dd:01:61:6a:80:
1f:92:6c:6f:03:d4:42:f0:fe:ec:23:df:d9:56:bf:64:ab:ef:
eb:c1:ad:bf:95:22:16:e6:8d:7b:c6:91:eb:3b:1d:11:66:9d:
44:2d:f8:96:eb:8c:d3:2f:fe:38:27:be:58:aa:30:65:7a:e1:
32:af:da:77:8b:2a:ab:dd:de:ca:99:76:4b:e6:bb:41:8f:bd:
01:ed:06:f4:b4:67:e2:dc:f1:28:bf:2e:dc:96:cc:59:fe:a7:
c6:91:73:c4:3f:02:60:29:36:b2:3e:53:b9:52:b9:a7:bd:66:
67:04:d0:a3:19:4d:33:f5:1b:58:2d:19:1a:f6:c2:3e:d2:02:
aa:a5:f6:61:e0:c9:c9:5e:b9:90:5b:02:4e:82:e0:83:d8:78:
db:5b:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:46 2026 by rpki-client