
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json)
Hash identifier: ujEJCp+wyMbeVAScgNe5GmvmPoUrqFrl2JgxcuVhbSE=
Subject key identifier: FD:0E:B5:28:9E:59:D8:9E:CB:13:3F:00:97:0A:71:1B:02:6F:AD:DE
Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Certificate serial: 053F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
Manifest number: 0530
Signing time: Thu 16 Apr 2026 23:27:35 +0000
Manifest this update: Thu 16 Apr 2026 23:27:35 +0000
Manifest next update: Thu 23 Apr 2026 23:27:35 +0000
Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: eZf1ndXQmt83YLXG0jYE6rmnWNf6wSadAcD7bUQD0iM=)
2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: xp7/pdQMYk2t7u02214OzsMR/nZgv77MRjYz0MrJbEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1343 (0x53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Validity
Not Before: Apr 16 23:27:35 2026 GMT
Not After : Apr 23 23:27:35 2026 GMT
Subject: CN=69e17067-2b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:5f:1e:93:91:85:07:73:9c:8c:56:e0:8e:
06:44:19:7e:7d:cb:cf:69:7a:e2:09:c5:2f:6b:fd:
e4:22:1c:8f:c0:b4:3c:ca:a5:9b:67:e1:be:15:3c:
de:55:ab:6c:db:1d:3a:ed:c0:47:d7:5a:65:27:59:
c8:4f:95:c0:0f:18:67:97:5e:78:4b:3c:32:3d:53:
35:68:4a:ca:92:e7:2f:3e:93:9b:45:bf:e5:97:99:
16:06:f0:5a:68:8a:68:ee:0c:43:c1:9f:5d:fb:2c:
26:31:93:f3:97:cc:92:18:2e:5e:64:f3:aa:55:9d:
cc:48:99:07:1c:b3:ae:25:be:e0:f1:66:ff:c6:dc:
6e:8a:6c:98:05:93:26:ff:46:0e:b1:49:bb:a0:83:
98:6b:1c:a9:44:39:8e:bb:34:5d:9e:3e:56:4e:01:
81:d5:99:13:73:52:ad:43:9e:fc:95:db:0f:96:5c:
b2:f8:88:d6:93:d8:28:a5:de:9d:f2:73:cb:1b:b2:
98:4d:d8:0b:87:7d:b0:2c:a4:c5:ef:95:63:7c:e8:
9d:fc:2c:4d:02:dd:57:b1:6b:3c:18:90:81:46:45:
85:00:01:ac:b3:a0:c2:9d:df:e1:f7:37:74:8e:29:
07:11:d2:7d:85:88:76:12:dc:e3:af:3d:e6:26:f7:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0E:B5:28:9E:59:D8:9E:CB:13:3F:00:97:0A:71:1B:02:6F:AD:DE
X509v3 Authority Key Identifier:
keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a0:62:fc:81:b8:e8:72:47:c5:c6:19:9d:a3:04:08:1f:8e:
66:9a:44:9e:a3:d1:09:92:26:1b:f1:dc:51:0f:8b:78:04:d7:
ee:92:d7:17:32:4d:36:cb:2e:02:9b:76:34:fb:01:3a:81:96:
d6:2d:85:c9:19:b5:ad:cf:f5:f9:6d:28:86:e9:ba:ec:b3:2e:
64:47:7e:52:be:ac:43:8d:c8:f8:07:30:c0:8e:50:bf:6e:84:
a6:10:94:3b:61:bd:b0:c9:07:c9:7d:b5:1c:e2:f2:3b:42:fb:
0f:0f:05:47:a8:91:8a:ec:f0:19:54:b3:e3:f2:fc:3d:15:29:
98:a8:dc:18:20:1c:20:d7:30:60:88:dc:46:75:8f:63:5c:ff:
6f:a6:92:8b:b9:1a:ad:5d:cf:70:dc:46:a7:0c:55:64:97:97:
94:3b:47:0f:69:1e:c0:7d:0b:a9:55:b6:e0:c4:17:fa:a1:be:
46:12:63:8c:f9:f3:11:9e:53:05:00:38:ff:7f:55:22:93:3f:
0c:4f:fd:ff:12:15:b3:40:48:6e:e8:25:2c:d7:f5:74:75:ca:
61:03:75:92:55:1d:fb:65:12:2f:8c:53:46:ad:61:84:d4:96:
8f:37:d2:66:51:3e:0e:9e:aa:02:bd:11:64:6e:d0:98:88:ca:
f4:b3:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:32 2026 by rpki-client