
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json)
Hash identifier: viVZrf0f0POBvgCAxYJnS2IFguyE3Ve3mWyQ4jVpOvg=
Subject key identifier: A2:84:5E:A8:61:15:97:85:E5:B1:87:19:B4:5A:7C:80:5F:63:A8:02
Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
Manifest number: 0124
Signing time: Sun 01 Mar 2026 06:57:04 +0000
Manifest this update: Sun 01 Mar 2026 06:57:03 +0000
Manifest next update: Sun 08 Mar 2026 06:57:03 +0000
Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: JbtBFbmmHLPgIMbDpiOZl8EXrL35kbvdDawkzHSiMdc=)
2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: m3GeVlgQwLSASq7XBSa8f1Uvp0nte9cJZ6MnwsMfEFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Validity
Not Before: Mar 1 06:57:03 2026 GMT
Not After : Mar 8 06:57:03 2026 GMT
Subject: CN=69a3e33f-4e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:18:f0:dc:ac:40:da:4b:a8:9a:e6:9e:6a:
29:98:66:91:3d:ce:2b:5e:9a:7d:b2:ee:3d:c9:64:
f1:17:4e:2a:37:49:0d:56:59:17:15:d2:90:0c:33:
03:94:d8:0b:a8:89:cc:01:cf:54:64:78:09:6f:ed:
6f:3f:1c:dd:66:b7:ae:8a:f9:d7:6a:34:7e:cd:0f:
fd:02:f3:82:87:5c:62:80:4c:af:6c:31:3a:d5:81:
cb:f0:44:3e:05:6f:f9:9e:fd:43:96:b2:01:2d:a6:
1f:dc:e7:fb:7d:3a:ab:1a:e9:c3:40:10:f4:ce:c7:
5f:68:ce:77:0a:86:76:f2:fd:ee:6c:bc:2f:61:8d:
35:3e:23:27:4b:3b:3f:b2:59:d8:0f:89:7e:1a:b2:
f6:2d:01:71:70:11:cf:fd:5f:80:22:91:02:c4:0f:
72:30:7e:85:b4:c2:16:a7:00:ba:95:12:a3:6c:62:
3d:3f:a6:82:ef:ad:8a:ce:f4:c4:6a:0b:1f:29:6b:
bc:1a:9c:4a:e9:79:04:40:1b:12:6d:0a:90:36:57:
0d:e7:5e:20:77:53:e5:8a:bc:c7:42:28:94:0d:d1:
68:c3:df:65:88:2f:23:65:c9:a9:38:8c:20:ec:d5:
2e:52:3f:55:89:47:7f:89:87:41:47:ab:36:5c:80:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:84:5E:A8:61:15:97:85:E5:B1:87:19:B4:5A:7C:80:5F:63:A8:02
X509v3 Authority Key Identifier:
keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d6:e6:31:a5:4b:60:98:c4:02:09:28:38:a7:54:ec:fb:18:
ae:4f:eb:43:d5:cc:db:42:67:c5:f4:b7:7a:63:aa:13:bd:fb:
91:60:02:df:9a:c6:55:1c:e2:19:48:ba:bd:c8:a0:e6:2b:a2:
41:70:8d:e9:f4:0e:79:78:a1:91:2a:c2:1a:2c:da:2e:d9:98:
0d:ff:1b:a1:c2:0a:a1:6b:db:b2:50:ff:c3:54:cd:47:dd:c3:
6a:7f:e3:a7:3d:3c:39:b2:68:a7:ea:b8:31:8f:7a:fb:49:bb:
9b:a3:76:29:32:58:49:b8:58:4f:1d:c8:96:cc:8c:4e:c1:1c:
fe:84:e7:2f:da:ab:7f:72:23:40:cb:ba:85:db:22:c7:81:a1:
a9:30:c7:04:2c:3f:c9:c9:62:f2:2f:38:14:28:57:73:f1:44:
76:c3:06:7c:62:de:f9:c0:d0:19:73:9a:2d:c3:a5:03:1a:07:
91:69:a9:11:cc:a0:4b:44:b9:ea:78:23:8a:d9:1c:01:fb:82:
81:87:37:11:7f:00:55:fe:01:ab:7d:bd:d8:1f:59:8d:83:29:
0a:bf:d9:ca:2d:1c:0b:fd:2f:c8:29:25:6a:d0:7d:d6:20:fe:
18:d1:f5:a8:bd:16:a1:06:a1:ca:ec:36:e7:3d:83:c8:ee:cb:
c7:07:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:21 2026 by rpki-client