
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier: Hy+zDsA8JEpzVQSPlWvbe2mUns1Ak3XgpPoJjSpgvn4=
Subject key identifier: A4:4F:B6:0F:98:D0:BD:91:75:A0:94:E5:8E:A7:28:B8:E6:F7:EB:9B
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial: 0990
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number: 098F
Signing time: Sat 28 Feb 2026 20:16:35 +0000
Manifest this update: Sat 28 Feb 2026 20:16:35 +0000
Manifest next update: Sat 07 Mar 2026 20:16:35 +0000
Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: XG79Pneq2PyOKik4wx+4vnbdDt7MoPX7KUk5z01sfL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2448 (0x990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Validity
Not Before: Feb 28 20:16:35 2026 GMT
Not After : Mar 7 20:16:35 2026 GMT
Subject: CN=69a34d23-1647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:60:d1:a4:64:12:9f:11:3e:df:1b:0b:61:
14:be:2c:b1:c1:f9:cc:f6:72:0b:f6:d4:b4:8a:20:
c0:9c:67:6d:18:bc:5b:01:c3:35:f4:3f:24:e5:08:
30:47:ed:b1:9c:b8:c8:94:c6:73:b8:f2:df:db:86:
6d:d1:78:dd:ba:8a:80:f8:95:b5:75:25:11:75:9b:
16:aa:5b:f5:13:01:03:b7:ab:0b:47:5d:3a:ab:4b:
99:dd:7c:49:e4:33:d1:6d:93:2b:38:48:a5:4f:61:
33:b4:51:d3:71:33:37:61:a9:22:06:2f:98:61:c9:
90:92:eb:0a:49:47:f9:d7:42:01:78:09:ea:1c:0f:
86:17:6d:fc:ae:e3:e9:91:a8:2d:4e:2f:72:fa:8f:
48:e6:a3:37:c5:c8:c0:1c:71:29:ca:74:3c:d9:cb:
ae:f2:59:bb:79:54:e7:4d:50:c3:68:b2:57:a8:be:
77:89:f9:8e:78:b0:9f:c8:21:91:5d:72:e8:77:36:
49:d0:58:0d:d0:68:b0:3e:06:54:f6:66:15:a7:dc:
92:e3:43:7b:a4:b8:cc:f4:0c:4f:07:cb:4c:99:4f:
6f:19:2e:e3:99:4e:57:e8:57:d1:f0:51:2c:84:ca:
87:3c:31:4f:f1:ec:95:c2:c3:5a:25:88:b3:d4:08:
b5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4F:B6:0F:98:D0:BD:91:75:A0:94:E5:8E:A7:28:B8:E6:F7:EB:9B
X509v3 Authority Key Identifier:
keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:0e:d6:ea:ea:96:aa:29:08:f2:cc:49:60:9e:67:08:c9:
8a:14:e7:54:16:6a:29:6e:da:c1:e2:a3:93:a6:a2:d2:2c:0c:
22:17:58:3e:6a:9f:42:0d:b8:ed:6a:77:63:21:95:ed:03:7c:
1a:f6:9e:18:c2:3e:c3:fe:96:f3:79:9c:00:d7:3b:eb:d8:3c:
37:af:cb:db:88:c4:a4:89:5f:07:a7:df:83:2f:17:d8:4e:ca:
2c:18:70:fd:1c:d9:95:4d:dc:a4:d3:5a:26:5a:8e:72:c0:e0:
e8:96:4a:df:32:e9:2d:58:0f:db:0d:77:6d:8e:cd:9e:68:d9:
e0:63:8e:d2:cd:b6:ef:f3:57:86:a4:15:15:d7:80:b9:73:ce:
c6:6a:cd:57:69:1e:2c:da:6c:e7:be:ad:55:67:8e:89:bc:c8:
93:26:34:5c:d7:f2:f7:1f:5b:27:fa:70:d0:f7:ea:4f:79:ca:
fc:eb:03:3b:16:b4:6d:c6:4a:b3:90:61:95:1b:37:2e:2f:34:
ce:b2:f3:9d:33:48:ae:e2:dc:76:68:35:b9:f1:5c:f3:a1:f7:
c5:2d:89:66:24:a6:85:01:c8:d3:9a:ef:09:e5:3e:ff:60:45:
ce:9c:25:22:3c:89:16:01:2c:d0:7e:8b:f7:d8:97:24:73:d9:
a6:5f:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:34:54 2026 by rpki-client