
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json)
Hash identifier: eFYg2n9eo/m69NCjFvIkmbLUsEgzdreUeuwBMqbWkRw=
Subject key identifier: 64:97:6A:E3:CA:46:4F:FB:38:82:22:D6:C7:40:7A:B1:F5:26:F7:BC
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial: 09A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
Manifest number: 099F
Signing time: Sat 28 Feb 2026 20:15:12 +0000
Manifest this update: Sat 28 Feb 2026 20:15:12 +0000
Manifest next update: Sat 07 Mar 2026 20:15:12 +0000
Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: QvNDCsVVm9fpoBHXvMW8nbVIfmr8G/eaq8rEqUBhCvE=)
2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Validity
Not Before: Feb 28 20:15:12 2026 GMT
Not After : Mar 7 20:15:12 2026 GMT
Subject: CN=69a34cd0-3b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:51:65:8c:f2:e9:b6:ef:c4:65:38:41:af:
9b:3c:d3:b5:34:5a:58:04:25:3b:59:76:5f:fc:33:
67:20:db:04:45:cb:f0:43:48:79:b8:b9:81:6a:ef:
bd:0d:e9:32:69:69:6c:d8:cc:62:c1:8a:fd:f2:aa:
c1:8f:d8:6a:c8:93:0c:c3:cf:a7:10:59:c2:ef:eb:
af:d2:2d:46:cb:22:2a:08:f5:a1:53:86:68:8c:c4:
04:fc:78:3e:92:f7:8d:02:e2:14:b3:15:66:49:c3:
8b:92:7a:6c:c9:73:bd:a0:04:f3:72:42:e9:df:74:
2e:72:4f:7a:35:a6:69:18:f7:8a:45:c7:b1:d4:2d:
0d:b5:c1:cd:1a:9b:37:fc:99:49:e2:ef:ae:02:4a:
cb:b0:5f:ba:23:11:f6:d9:90:0a:30:63:28:a5:cd:
87:1b:65:38:cd:90:0f:ee:ef:06:1a:86:b5:23:2d:
26:9e:5a:3a:cb:d4:89:36:75:83:23:5f:a4:bf:65:
af:81:1f:77:e9:da:78:b2:3e:d4:70:78:a7:4e:1c:
d8:ee:14:8c:f9:9a:7d:87:01:a4:23:c1:1e:2a:aa:
8c:30:d5:15:e6:48:0b:52:3b:c5:b8:cf:e8:c0:70:
79:83:3d:5c:03:f1:66:0a:0b:4d:cf:fe:a7:a8:46:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:97:6A:E3:CA:46:4F:FB:38:82:22:D6:C7:40:7A:B1:F5:26:F7:BC
X509v3 Authority Key Identifier:
keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b3:d3:f8:e3:2a:ef:c6:eb:a4:0c:d2:40:72:65:77:15:a1:
54:14:ad:10:8a:22:52:04:76:4d:05:fc:f8:48:fc:7a:40:29:
f0:93:e1:44:0a:a7:d8:de:2b:e0:8d:f8:7a:ad:19:d1:85:66:
de:d5:bd:12:f5:a9:12:5e:b0:7d:0e:9b:cd:25:b5:bc:b9:5d:
a3:09:9d:28:ae:c6:7c:41:06:d1:2a:a0:95:c9:f1:14:ae:94:
8b:80:d6:42:79:9e:0d:78:1d:31:b0:5e:9b:7a:88:68:40:f3:
36:5f:94:1f:d2:33:8e:b8:bf:58:6f:23:68:a7:35:07:23:6a:
13:24:fd:02:2b:09:b3:fe:11:f8:c9:a9:9e:c6:6d:b6:ce:23:
d2:a9:36:89:10:0c:31:55:75:23:62:0c:a1:75:c2:fc:4a:ad:
ed:41:ed:47:84:f5:d1:eb:d1:15:50:c8:00:02:de:0c:3f:7d:
c4:ac:82:b9:92:0c:ff:2d:be:73:7c:f9:19:a4:c9:68:49:38:
3e:3e:66:ea:38:55:c6:61:fb:e6:84:a2:08:43:74:3e:52:51:
18:af:05:74:37:d1:50:2f:91:40:94:a9:15:38:92:d1:d2:43:
b4:49:fd:be:5f:95:86:06:d8:b4:f9:fc:5c:24:44:ec:34:a7:
44:63:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:53 2026 by rpki-client