
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json)
Hash identifier: ErfQ+rOf/jNcAvDgCI3tBXzNwtztv08Xaw6ilWoGFdE=
Subject key identifier: 62:4C:22:22:F6:D6:AB:22:F2:92:32:03:AE:48:A6:24:3E:4A:B0:FB
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial: 03D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
Manifest number: 03C7
Signing time: Fri 17 Apr 2026 00:31:22 +0000
Manifest this update: Fri 17 Apr 2026 00:31:21 +0000
Manifest next update: Fri 24 Apr 2026 00:31:21 +0000
Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: owghK48c+nFo1WeIxTjzaFzvokM713ijt/yrvhtWD1w=)
2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: aOmB52lB3tdTkD/g4putrA9Nb5xL/svY0l4KIr3M4Vs=)
3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: gapT1kNW12nUbHr8c3uu1/58dn16AFUjAC6CWS5jWek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977 (0x3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Validity
Not Before: Apr 17 00:31:21 2026 GMT
Not After : Apr 24 00:31:21 2026 GMT
Subject: CN=69e17f5a-06f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:b0:37:30:7b:52:60:d5:10:5d:89:ac:89:
fc:4a:43:61:b8:07:0c:2e:00:8e:0c:8c:77:50:3c:
57:f3:74:85:bd:c9:f2:86:6a:b6:9b:20:f4:3a:78:
2a:1c:e1:2b:7e:34:4f:a6:df:0c:04:e3:82:e9:aa:
de:ce:3a:a6:53:28:38:b2:76:ab:8a:9c:fc:95:24:
ec:5e:3c:d8:e0:a7:25:5d:84:d2:c5:a8:a5:74:78:
ee:ae:76:d3:4f:93:58:e6:08:6d:67:1c:dc:a8:8f:
1c:dc:8b:73:48:89:d3:0d:ca:95:0c:f0:a8:8e:12:
5a:4d:49:21:99:e9:75:1d:01:0e:d4:7f:71:3e:fd:
2b:85:3d:4e:89:f4:63:62:e9:25:a8:66:72:26:9e:
1e:d9:61:cb:6c:07:8a:23:9f:99:71:19:fa:02:22:
0c:fe:38:9a:6f:da:b5:2f:22:13:c1:a8:d7:bd:bd:
f3:03:a7:24:ec:ed:83:cc:b2:7a:7a:d9:c5:ed:4c:
53:ba:e6:41:a3:d2:06:26:78:e7:b0:62:ed:7f:4e:
e3:6d:b7:68:e1:50:bb:17:94:63:0c:d4:aa:ce:21:
8a:59:a4:6d:65:86:67:d2:f9:1e:87:8b:a7:02:05:
4b:76:59:cf:d1:88:0e:35:57:18:df:fc:e7:7c:81:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4C:22:22:F6:D6:AB:22:F2:92:32:03:AE:48:A6:24:3E:4A:B0:FB
X509v3 Authority Key Identifier:
keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:b2:6d:87:cd:c9:c8:23:cc:49:13:19:cf:41:cd:1c:06:e1:
e6:db:12:5a:de:e0:42:e6:6e:9c:07:5c:f6:30:21:ee:0a:ea:
95:4a:55:07:22:e5:92:e1:06:b1:c5:5a:20:7a:8c:5e:aa:85:
72:6f:31:90:6c:a0:d4:a0:78:72:8b:02:77:6c:74:0b:ce:63:
58:d9:0a:57:73:74:c9:e8:80:43:9b:f4:0f:69:23:c9:a6:61:
e8:5d:32:20:38:51:1e:e0:54:88:f7:2e:ca:c2:0c:6c:7e:e4:
fd:41:d4:fc:85:d7:fc:90:79:74:01:0e:22:34:df:6e:0c:5b:
ec:30:8c:f7:24:8d:5f:aa:26:02:92:8c:e6:6d:f6:41:e7:40:
52:c5:98:86:24:95:89:73:33:41:b1:49:59:5d:31:db:81:d0:
5a:ee:13:d2:65:da:02:18:bf:8c:5f:5e:ec:1e:20:fc:49:7d:
ce:4d:de:1d:66:8a:47:ba:8e:78:36:16:99:39:8f:7b:c2:46:
a6:22:f0:89:11:3e:c3:c3:0e:9b:4d:27:84:72:f3:72:4b:de:
91:b5:b9:eb:f9:87:d9:2c:da:b9:b5:6e:fc:da:95:52:7e:84:
34:80:ae:2c:3c:cb:62:f3:7c:16:32:f7:3a:bf:0a:f1:4c:88:
49:cc:35:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:28 2026 by rpki-client