
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json)
Hash identifier: wWayZfb4fbzqRQGNhCLMyEfZNET1s9j12LswBagTe8o=
Subject key identifier: 6F:04:9D:C2:B5:9E:EA:31:81:7E:45:B2:CC:B0:A2:6B:61:C0:A5:B6
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
Manifest number: 0176
Signing time: Fri 17 Apr 2026 04:44:13 +0000
Manifest this update: Fri 17 Apr 2026 04:44:12 +0000
Manifest next update: Fri 24 Apr 2026 04:44:12 +0000
Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: nR49x2BLK3NaQzr/kAeLb+zSEf0D3NmYKthfFoQF8QE=)
2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: UeaRLdDzY1ShESbWYDfFd7UbKiVJI/tCLkGrM3fnfPc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Validity
Not Before: Apr 17 04:44:12 2026 GMT
Not After : Apr 24 04:44:12 2026 GMT
Subject: CN=69e1ba9d-d378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:41:1f:08:08:29:ad:06:3e:db:79:74:9c:
97:ea:fb:59:d4:3f:c2:6c:51:1f:7f:60:77:3b:c5:
ca:7a:1d:5e:33:c0:25:1c:0e:44:da:bc:7a:4c:0c:
af:d9:5f:b9:fc:ae:21:d8:72:3a:41:97:56:60:4d:
2a:69:76:43:6d:95:db:77:e5:52:7f:90:d9:57:5f:
f6:fc:c7:bd:81:67:e9:9a:ee:0c:ee:3d:b4:64:28:
1c:6c:c2:97:ad:bb:c3:3b:a8:e0:a4:20:00:35:e8:
b6:9e:d7:e0:7f:fa:62:67:81:d0:c9:d9:99:f9:0f:
43:0c:0f:a8:7a:85:27:5a:34:a5:f6:97:43:0a:3a:
3c:e7:6b:29:63:f9:2e:53:bc:d5:80:99:dd:8d:48:
7b:b2:bf:ae:e9:f0:9a:5b:1a:76:b0:5d:20:b9:14:
9a:aa:3a:7b:e9:61:54:87:e9:94:87:12:04:8c:73:
4d:27:a7:a7:85:a2:3f:35:6e:32:b7:dc:1d:24:8d:
c6:2e:da:72:00:69:bc:9b:57:a5:5f:e8:38:47:cd:
6e:e9:ea:86:cf:99:2f:a3:c9:0a:7b:a1:f7:28:1a:
41:ee:dc:ca:dc:54:f7:fe:9f:86:ca:67:c6:fe:de:
27:93:aa:8b:fe:4a:ae:d2:3a:18:5e:44:5b:0e:06:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:04:9D:C2:B5:9E:EA:31:81:7E:45:B2:CC:B0:A2:6B:61:C0:A5:B6
X509v3 Authority Key Identifier:
keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:7c:c6:6a:e7:d5:04:13:b2:91:81:0c:08:81:b1:4e:90:57:
ea:af:f6:35:a2:cd:a5:3c:2f:e3:70:d3:9f:bf:4c:1e:df:18:
ec:b1:b3:46:fa:df:2b:5d:d5:36:bc:1b:40:38:aa:02:3f:bc:
c7:89:32:f2:e4:23:f6:b3:a4:e2:85:49:d3:18:83:6f:8d:ed:
fd:4d:71:d9:60:35:6a:d5:79:f0:65:5c:8a:b6:b6:8a:1c:7e:
16:d8:a2:c6:54:f1:d7:29:94:77:6a:b6:20:41:f3:d0:35:6c:
24:87:f2:f9:02:c2:e8:f2:d2:07:82:49:7f:3c:1d:16:2e:98:
f9:9d:05:5f:26:07:44:06:06:75:57:a8:14:8c:6b:26:f7:9e:
16:85:a9:12:61:8a:fb:ad:97:c9:61:f1:2f:07:da:bf:e9:65:
56:a1:cc:37:ff:b6:0a:39:bb:d8:69:55:f5:46:db:1a:1a:d1:
75:de:40:50:cd:56:5e:0e:7f:cb:c2:17:1d:ce:96:af:0f:6b:
4d:30:3c:ec:91:85:b4:13:51:bb:0c:1f:92:d6:5a:c2:af:c4:
b9:b2:c1:b4:25:39:31:c8:a9:a9:49:4d:89:85:70:c0:38:40:
b7:f9:eb:43:16:9e:9a:f2:0d:35:a0:1b:f3:b4:2e:a2:c6:8b:
cc:29:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:37:14 2026 by rpki-client