
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json)
Hash identifier: z3kCxRZQNLG3rGQrQ6ANxO5qXfi42SaQrKdX4h/opeI=
Subject key identifier: 41:3B:BB:CD:E3:90:04:8C:E3:AC:B3:24:DC:C1:C7:25:7E:AB:6C:10
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
Manifest number: 0159
Signing time: Sun 01 Mar 2026 06:21:07 +0000
Manifest this update: Sun 01 Mar 2026 06:21:06 +0000
Manifest next update: Sun 08 Mar 2026 06:21:06 +0000
Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: xhxah0tH7vabwCXtft0S4Kspm+/9v4yEZCnKvSbLSXk=)
2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Validity
Not Before: Mar 1 06:21:06 2026 GMT
Not After : Mar 8 06:21:06 2026 GMT
Subject: CN=69a3dad3-6793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:6b:bf:46:22:84:aa:e7:4e:3f:92:bf:2d:
d9:ba:c5:84:09:5c:73:3e:84:bf:e1:0b:ef:67:13:
eb:a7:b4:a5:8b:59:a7:d0:13:c2:89:27:48:f3:6c:
56:6b:8c:7c:86:a2:18:5f:da:b2:76:5b:ed:90:c0:
e1:70:60:87:96:ed:12:ab:2d:aa:84:01:0e:e7:0f:
97:73:67:2d:55:6e:b0:51:c3:bb:b0:52:0c:e2:36:
65:06:d5:a5:5e:d1:c4:66:53:db:1e:59:83:bc:62:
11:b0:bf:0e:88:07:d0:bf:4c:1e:0a:de:44:1a:aa:
96:82:c8:51:58:be:d5:b8:dd:24:68:74:6f:56:0c:
67:7b:62:9e:64:a3:92:11:56:55:ee:29:df:af:ed:
be:9b:ed:5a:3e:0d:fd:c6:1a:a4:e1:fe:8f:8e:08:
2a:22:25:18:fb:43:cd:91:55:f9:b1:c6:ac:12:74:
4f:55:89:f1:54:60:c5:75:c4:2e:02:6c:b5:9f:37:
44:a4:99:12:9c:e7:ea:bf:71:a4:01:a3:9c:b8:97:
07:18:0c:ba:10:28:8c:4d:d4:f7:54:67:7f:83:83:
14:d2:1f:b2:70:35:9f:e5:68:30:45:3b:a3:21:8b:
7e:39:45:20:5f:d6:a0:ea:d2:65:e9:d1:51:dc:de:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3B:BB:CD:E3:90:04:8C:E3:AC:B3:24:DC:C1:C7:25:7E:AB:6C:10
X509v3 Authority Key Identifier:
keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:aa:3d:8c:6b:e1:68:57:76:e1:48:5a:29:a0:82:8b:48:
cf:cd:db:7b:43:ee:6d:1b:9f:8c:2b:41:a0:74:1f:4c:ee:f0:
c6:f6:e2:b9:11:f7:85:e1:e1:f4:83:a9:47:8c:a1:b8:6c:b9:
98:56:b9:ab:a8:9f:81:c9:1e:6c:1c:47:eb:e5:e2:9c:cf:6d:
1a:c7:fe:b2:e6:f7:6d:40:6f:e7:db:d5:94:d1:b3:0f:21:46:
2e:2b:1b:ca:70:29:3d:57:ce:51:ba:5c:a8:c7:44:43:02:f1:
56:46:5a:56:d8:b9:34:d0:ad:e5:3b:0e:db:4b:52:e9:92:10:
85:d6:08:8d:d3:46:78:18:2e:7c:73:12:f5:fc:38:a3:c3:ff:
fb:83:95:5e:f4:64:51:23:9a:fd:92:77:a9:35:bf:1b:6e:66:
46:f5:89:de:13:1e:35:dd:cb:34:54:6d:60:4b:db:dd:36:73:
70:90:80:17:43:99:19:24:1f:e7:09:50:79:b8:90:28:24:6c:
ec:c3:3d:2a:49:83:46:d8:b3:4a:50:c0:cd:4e:19:e7:f8:1d:
f8:73:ae:09:01:f4:1f:cf:aa:9c:1d:03:10:ed:b4:80:3f:20:
80:67:29:7f:ad:91:20:e5:9e:82:ba:6b:de:42:85:4b:5f:d5:
a8:f4:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:56:29 2026 by rpki-client