
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json)
Hash identifier: EH9prWByL9jsoHYkU7qlcNihQIVZfZUCnApBEUQj6dA=
Subject key identifier: EB:8D:BD:8F:A8:F5:0A:24:3D:39:F8:DD:40:03:5A:F7:34:13:56:B9
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
Manifest number: 01E5
Signing time: Sun 01 Mar 2026 04:09:41 +0000
Manifest this update: Sun 01 Mar 2026 04:09:40 +0000
Manifest next update: Sun 08 Mar 2026 04:09:40 +0000
Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: TocVcAIIdrKeqTotv7Cgg6MTC4wp6Am74h9s0VJsicU=)
2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 66Ye3g8pbsik4WW1k0ibPPsDZiWrMkqUxfu3Wa/LOVI=)
3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: SRP91sfnLKgHs2VY7WFFGrHVKBCFl0+7NYfhfkLyZBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Validity
Not Before: Mar 1 04:09:40 2026 GMT
Not After : Mar 8 04:09:40 2026 GMT
Subject: CN=69a3bc05-bfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:34:db:8e:5e:44:14:3f:9b:0e:9b:82:26:
f1:ae:28:f9:ca:4a:30:d3:21:6b:84:18:59:f9:89:
59:a0:ed:94:0e:da:bb:69:61:e2:09:23:b1:27:88:
ee:03:3a:fe:0e:c0:f2:81:1b:04:68:83:a6:90:14:
af:27:0b:05:d4:7d:41:c3:0e:5c:91:98:7f:63:09:
ba:bd:2f:d5:74:0a:c4:5a:12:0a:e9:1c:39:51:4c:
49:74:06:07:a9:64:bc:5c:16:3b:6d:1b:27:a8:72:
69:02:ab:96:d5:f3:0b:3c:f1:4e:0b:35:d7:d0:6e:
ee:c8:19:d7:c5:23:0b:16:9e:74:2e:ad:10:20:00:
63:e8:4e:98:56:17:99:0d:e4:4d:88:c3:71:69:42:
21:79:08:c1:94:e8:a8:17:af:2b:4f:0b:58:1e:17:
17:a7:50:d9:6e:11:9b:5a:0b:70:59:12:af:d2:ca:
a1:f3:7d:88:6b:7e:be:b5:b8:74:fe:3c:43:fc:b6:
d7:0d:ca:de:db:b6:cd:d5:8e:76:47:3f:75:8a:4b:
68:4f:79:8e:fd:51:6e:ab:ee:66:55:10:7b:7d:23:
a3:8e:4c:fc:fc:09:79:aa:44:b0:ab:8e:0c:cd:73:
17:a4:70:44:08:69:2e:f0:af:02:c7:86:f4:71:87:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8D:BD:8F:A8:F5:0A:24:3D:39:F8:DD:40:03:5A:F7:34:13:56:B9
X509v3 Authority Key Identifier:
keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:84:4f:0e:15:36:58:ec:49:19:f6:3b:4e:03:45:56:63:
89:ab:e1:7e:82:63:b7:5d:b1:e3:c4:06:8e:b1:88:a8:0d:55:
3a:f4:29:bf:fa:b6:c9:90:8d:07:54:45:f0:78:8b:02:a6:73:
4f:1d:57:b3:6b:fc:59:40:3f:d7:47:72:8e:6a:9c:48:13:69:
d5:d7:9d:62:5b:8e:ae:4b:4d:ad:b5:a0:53:cd:36:86:3e:eb:
83:33:30:5d:a2:eb:db:71:cd:36:21:bc:8e:56:f5:7d:1d:8d:
a6:40:b8:d8:41:60:da:b6:7e:1a:8a:d9:76:83:7b:09:27:d9:
d2:fc:47:b2:23:e5:3d:45:00:9a:d2:22:5b:c0:42:8a:0a:0c:
1f:ca:b0:26:81:cf:81:86:9a:a4:57:9a:22:1c:23:a1:22:7a:
60:df:b2:33:83:e0:48:70:e4:c3:d2:fb:4a:87:95:14:62:6f:
33:3e:88:76:13:a4:21:53:71:42:b9:ec:ea:96:81:7a:8e:ff:
1c:f1:06:52:0f:f1:82:76:77:bb:d3:c8:a8:bc:c6:a3:58:a3:
9d:51:c1:fa:41:7d:30:97:f9:f1:67:ce:10:38:87:3c:42:62:
9a:fb:9e:69:12:93:62:e9:ca:5f:5c:34:72:f6:e2:06:7b:e0:
82:63:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:29 2026 by rpki-client