
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json)
Hash identifier: Ws7OwQ5Er6zNnT5mSylSAeJYpg93cQ9ShgKQwVML/SI=
Subject key identifier: 8C:F8:FE:FA:47:5A:EC:94:19:A2:66:B4:84:16:87:52:4E:62:64:47
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
Manifest number: 0110
Signing time: Mon 02 Mar 2026 00:48:44 +0000
Manifest this update: Mon 02 Mar 2026 00:48:42 +0000
Manifest next update: Mon 09 Mar 2026 00:48:42 +0000
Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: CZC/CwmkoMMbigUpWteBooZMjI1oSUb4Vttmgq4oURY=)
2: 97A6188EFEAC11F0AB4A61AF656F56BC.roa (hash: yCEj6qPX9EqfGe8wQyMh/zdjEFh0bs/DoKx+c7+TATU=)
3: F9EB418CFEAB11F094E473AD656F56BC.roa (hash: 2I2kxtV9Go+yS4kEarl3OYdWVe9zcH7xNuKQWD2RGXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Validity
Not Before: Mar 2 00:48:42 2026 GMT
Not After : Mar 9 00:48:42 2026 GMT
Subject: CN=69a4de6c-c251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:b7:b6:a4:d2:64:b3:a4:7c:3f:ff:58:df:
55:14:ff:58:cb:ba:bb:f8:b4:94:a5:84:27:16:f7:
91:e2:ca:87:07:5a:10:e2:ee:b6:04:e6:68:3d:11:
a4:56:c7:d7:88:4f:de:70:2d:60:56:df:f1:f5:6b:
06:37:d8:58:b0:fe:ab:18:57:5b:be:72:8f:83:e9:
9f:7b:80:c2:a5:30:94:f6:2c:ba:90:00:3f:e6:8a:
a4:8d:39:67:ec:fc:d1:57:96:0d:b6:49:13:fe:94:
ac:c8:a2:bc:19:4c:10:52:0c:e1:25:97:96:6e:67:
af:4c:17:7e:5b:8f:2c:2e:7f:0c:8e:7c:f2:ed:dd:
19:0a:14:9d:ca:02:34:1a:a0:06:b0:03:5c:08:6a:
12:04:13:00:02:f5:48:0b:54:7f:e2:d5:e1:2c:67:
ca:e6:fa:d9:e1:ee:3c:d6:39:ef:97:02:c0:c7:ee:
17:82:dc:02:2e:2b:69:6e:f6:f6:ed:3d:48:d8:2b:
21:77:fe:75:09:40:6d:d4:ed:06:87:33:cf:d9:03:
ee:97:c9:08:0d:b9:f7:2a:cc:5f:fb:2a:35:7a:a6:
fc:e0:b8:6c:98:6a:38:37:17:37:1e:ce:f7:8e:b7:
75:44:19:b1:34:0d:9e:ec:98:1e:20:b2:a6:39:b7:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F8:FE:FA:47:5A:EC:94:19:A2:66:B4:84:16:87:52:4E:62:64:47
X509v3 Authority Key Identifier:
keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3d:d4:0b:2c:28:ea:4e:ab:90:3c:6d:26:58:e3:28:cb:20:
80:b8:fb:20:bb:48:27:1b:e3:5c:ea:81:bf:3a:4a:e8:11:a8:
11:f2:c8:3e:9c:93:8e:37:3e:a4:99:97:f0:a4:4b:a7:30:6f:
89:2d:93:28:bb:5c:cf:51:15:36:54:74:7a:bb:99:77:6c:a9:
41:02:25:15:c1:07:bc:92:69:16:13:a9:ea:84:b3:32:97:12:
6d:32:22:b9:e2:e8:3c:99:39:3b:06:44:8e:10:0e:8d:78:14:
97:4b:d2:d1:2f:4b:13:80:ff:29:6b:b1:75:f7:8b:31:2d:36:
7d:e7:78:c9:27:26:3d:21:4f:b7:4a:95:fd:85:d9:92:e9:a0:
92:43:6b:ec:3f:25:04:84:b6:2b:df:d5:93:39:57:7a:ec:1c:
21:8b:2f:2e:cf:16:c4:96:0f:55:14:58:9d:d1:60:5d:62:fb:
73:10:3f:ac:72:6e:4e:8a:bc:be:b4:d1:82:b3:e3:15:75:05:
08:9a:a2:61:34:d4:5a:64:e3:64:b6:9d:86:ee:c8:3e:db:1a:
59:5d:dc:17:8a:78:f4:8d:64:80:12:50:78:37:0e:56:81:29:
e4:45:ae:7e:64:d3:df:e0:31:b8:82:b1:e0:b4:a5:38:4d:d8:
1f:2d:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:52 2026 by rpki-client