
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json)
Hash identifier: gSgm9iHTJVcEP6ZEOkftC1m0ie4B21hICu5qn5B4Rgg=
Subject key identifier: 45:8E:FA:25:97:E0:6F:FE:09:3A:02:3C:1F:A5:70:E2:AA:8E:CF:5F
Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Certificate serial: 058F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
Manifest number: 0580
Signing time: Sun 20 Sep 2026 23:08:37 +0000
Manifest this update: Sun 20 Sep 2026 23:08:37 +0000
Manifest next update: Sun 27 Sep 2026 23:08:37 +0000
Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: Wr+fWh4asw7UJXb3f1PCuiLMxXhEkJ4RjzJl8Qh/nU8=)
2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: xp7/pdQMYk2t7u02214OzsMR/nZgv77MRjYz0MrJbEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1423 (0x58f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Validity
Not Before: Sep 20 23:08:37 2026 GMT
Not After : Sep 27 23:08:37 2026 GMT
Subject: CN=6ab06775-002c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:0d:6f:30:bc:0e:e0:9d:af:69:a0:8f:8c:
63:fc:32:6e:88:ba:64:ed:71:62:46:a3:3a:a7:8a:
0f:b8:d8:9b:d5:2f:3b:f9:5e:bb:3d:28:d5:3d:97:
78:1b:29:f4:fb:18:4b:48:e3:8e:af:3b:18:71:65:
68:b9:ae:fa:b8:2e:2f:2a:83:28:c5:b7:e9:f1:f5:
88:14:a3:8e:0b:0f:1c:59:0f:24:88:07:3a:b9:d3:
04:5d:db:d3:02:ac:a3:d6:01:4c:12:b9:b5:d1:2f:
64:29:61:6d:09:11:66:82:55:69:06:b6:94:2d:28:
8b:a9:ff:80:f5:55:ae:6c:f7:3f:de:0e:00:f5:d6:
31:55:a0:2e:77:7a:d6:88:22:ab:dc:a0:42:b1:7d:
0d:9f:00:81:46:98:0c:ce:12:24:7e:38:c4:85:b8:
3e:cb:49:7b:9b:f5:09:49:bc:54:f9:58:11:4c:99:
bf:5a:0b:39:a2:10:31:ff:ab:ef:0b:58:ed:8a:d8:
c3:36:2c:1e:70:fc:ca:ba:7e:0a:82:d6:d8:ab:fe:
27:0b:68:69:09:8e:b1:38:36:0c:c3:37:a0:f0:ad:
af:5e:56:3f:dd:ef:b0:6d:b5:23:b9:45:4b:79:ce:
8d:47:09:51:c7:40:90:fb:8c:57:0d:79:c2:ae:f8:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8E:FA:25:97:E0:6F:FE:09:3A:02:3C:1F:A5:70:E2:AA:8E:CF:5F
X509v3 Authority Key Identifier:
keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b9:f7:58:b2:43:ca:fa:71:44:5c:fa:e9:10:2e:8a:14:30:
8a:36:87:cb:ed:fb:7a:24:c7:54:15:bc:86:ad:b1:82:a0:c0:
e0:8d:2d:b6:b5:08:e6:06:ae:1f:01:36:18:f9:d3:e3:bf:39:
98:39:e2:17:c4:41:ce:22:11:b8:b1:5a:16:0a:de:52:7e:c3:
c4:56:8d:18:48:fe:85:56:f7:7f:5b:87:64:b9:ff:8e:3f:ab:
b5:38:9c:a7:14:55:5c:1c:3b:75:18:ec:a5:55:6d:d0:76:16:
4e:d4:89:1c:f3:2d:9c:4a:00:4c:33:ad:fb:07:23:3e:97:84:
b4:e6:a3:8c:d7:b9:81:31:92:6e:28:7d:55:87:b0:30:b8:27:
1c:3d:a0:6f:03:a8:a8:a1:8a:36:36:7a:3c:6d:cc:f5:30:2d:
d1:1e:d5:be:8e:41:13:85:91:91:a3:e3:57:a0:94:5b:5e:33:
7b:4c:7c:bd:d8:e0:87:92:e6:a1:51:60:dd:d7:da:86:8d:14:
a0:3c:c5:2d:3f:25:76:7b:6d:bc:35:5e:c8:77:11:7b:66:87:
61:80:38:e7:93:00:e5:4e:f8:fc:53:30:86:fd:c7:c5:b7:2b:
e9:46:ed:75:8d:1c:a6:13:ce:4f:ab:77:fd:4b:62:e5:f2:da:
0c:85:f8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:23:27 2026 by rpki-client