
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json)
Hash identifier: Ye4CdnxZRYrS0LT9cBY+MKZ83NoOSPxrxczs9ryJCPM=
Subject key identifier: 46:0D:FE:4D:90:F6:B1:5A:2D:7E:28:AB:2A:85:92:1C:47:DA:41:33
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
Manifest number: 015B
Signing time: Mon 02 Mar 2026 14:55:25 +0000
Manifest this update: Mon 02 Mar 2026 14:55:24 +0000
Manifest next update: Mon 09 Mar 2026 14:55:24 +0000
Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: l26YjEaZSrtsQMkS6D185ucmygxrpezP/q/L8IFtvFE=)
2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 67zPveAGWACKXH5KBWrmkt2SFJ5lwQJInUFCgeAJkNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Validity
Not Before: Mar 2 14:55:24 2026 GMT
Not After : Mar 9 14:55:24 2026 GMT
Subject: CN=69a5a4dd-a823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:66:95:ed:45:fb:8d:7f:64:b8:4c:78:29:
d4:c9:1f:ed:ef:ae:eb:42:1c:5e:0c:ef:6e:21:2e:
8e:db:52:6a:3b:39:e8:09:da:45:90:ac:ff:cd:ac:
94:d8:f5:3a:16:03:71:e0:62:87:39:51:48:70:c5:
8e:86:6d:05:fa:9f:45:aa:b8:0c:45:d4:10:5d:ed:
ea:6e:ed:e8:07:93:4d:45:d4:13:cd:bb:1f:f5:8f:
53:2e:cd:da:46:22:c6:af:6d:80:1f:80:3c:e3:c4:
62:28:6b:7d:4f:b8:e0:53:c3:5c:6d:53:7f:15:0b:
f5:d1:5d:15:c7:cc:fe:7d:d8:70:2c:ff:65:ce:db:
f0:98:48:c4:64:e7:05:00:4b:c4:cc:14:49:f5:72:
34:5c:c9:dc:1b:d0:7a:35:43:bc:06:db:c3:14:33:
01:2b:5e:db:a5:30:80:58:b7:90:f6:b5:da:71:3c:
9e:d0:5d:64:dd:ca:a2:ad:e5:1c:2c:4f:c4:4c:00:
95:62:b5:ad:21:8e:b3:78:97:4b:f6:c0:d0:70:0c:
7e:66:c1:e8:3a:c6:81:73:e3:cd:62:97:2e:cc:88:
59:ad:ae:1f:43:10:63:de:0b:18:37:76:b8:b1:91:
07:b8:20:fa:33:35:12:6e:71:8a:0a:ae:b3:4c:31:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:FE:4D:90:F6:B1:5A:2D:7E:28:AB:2A:85:92:1C:47:DA:41:33
X509v3 Authority Key Identifier:
keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:b6:5a:5c:2b:1c:22:82:ff:58:8a:d5:78:85:36:f4:8e:70:
68:d3:13:28:be:da:ac:f5:b4:67:fc:35:2d:df:d6:b9:aa:11:
19:d0:3d:11:97:54:01:14:b7:ca:89:d1:07:4a:a3:8e:57:23:
87:2e:4e:c1:ad:24:d7:e0:f6:c8:ff:88:db:0b:24:3c:a4:52:
65:ad:2e:24:f9:1c:35:d5:cc:99:e8:77:46:b0:a0:1a:89:fa:
c7:e3:97:2c:e4:a6:e3:00:30:79:0a:35:7b:eb:9d:49:29:2d:
27:ff:f6:e4:5c:f5:50:5a:bd:ec:bf:1a:df:62:75:46:96:5d:
63:92:d4:50:50:76:f4:b8:8c:64:06:39:af:59:e8:3c:f2:99:
52:f6:63:33:2f:46:17:aa:de:aa:65:43:40:7b:2c:f3:7c:7d:
ae:5d:45:09:a3:a1:8e:08:7c:b9:4c:98:ad:62:0f:65:06:0a:
bb:94:c7:bd:40:b1:eb:d8:6a:4d:14:2f:6a:f4:86:09:3f:c6:
a3:54:1e:7c:c7:00:33:24:7d:14:64:99:e5:09:13:b2:17:ef:
c5:8d:05:c5:be:aa:1f:84:9e:f8:93:10:db:28:1d:a3:ae:25:
56:e3:b1:95:72:23:31:f7:cb:d5:cb:5d:2d:09:1a:f5:14:d4:
a9:08:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:40 2026 by rpki-client