
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json)
Hash identifier: Wbgm6dfYw7G1rT/s4vp0m5JVCrk565irAyjmkYO49TE=
Subject key identifier: FF:45:C1:32:7F:61:FC:72:B8:A7:06:09:2C:1F:E0:5B:B0:6D:5D:A1
Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31
Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
Manifest number: 01B3
Signing time: Mon 02 Mar 2026 02:34:21 +0000
Manifest this update: Mon 02 Mar 2026 02:34:19 +0000
Manifest next update: Mon 09 Mar 2026 02:34:19 +0000
Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: McV8ALLZbO9kT0hbLB2HoAbfed8eHKaPZRT7v+tjSpQ=)
2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: 8bUh0kpIukv/E/FlB04nGDeGIjA5R0mIQU759W+dS/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl
rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
Validity
Not Before: Mar 2 02:34:19 2026 GMT
Not After : Mar 9 02:34:19 2026 GMT
Subject: CN=69a4f72c-16c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:4e:9d:38:4d:58:99:1d:43:1a:b1:cb:ce:
5d:7a:7f:73:97:a3:7a:2d:f8:1d:4e:ad:d4:7f:dc:
d0:5f:b5:8a:ca:24:f9:d5:56:53:bd:c0:14:3f:17:
b2:c4:bd:a4:f3:93:58:38:63:97:a7:a1:a6:9e:0a:
b0:e2:55:a7:ba:b1:b4:1a:27:b5:25:40:38:5c:43:
56:62:57:9f:ef:3b:f9:bf:a2:7e:28:b1:74:01:5c:
bd:16:b0:27:9d:c9:6a:00:ba:00:5b:e7:71:72:f0:
13:93:ed:2c:9d:77:04:28:37:d8:9d:03:00:31:1c:
94:c1:4e:08:45:3a:05:91:ed:9a:e3:44:cb:d4:fb:
67:5f:89:98:69:18:26:74:22:06:e3:75:df:83:22:
bc:ff:39:a6:63:ac:59:82:98:29:6f:a2:9e:77:b9:
f5:c3:b1:7a:2a:f4:55:b2:28:fb:6f:30:8e:88:3b:
61:cd:69:4d:15:9e:f8:79:dd:91:70:a0:3f:87:94:
bc:e5:da:63:50:4c:09:c4:69:e6:16:8a:d1:47:58:
96:d3:e4:d5:f1:3c:6c:61:50:b6:76:fc:56:0e:7b:
88:ac:4b:10:e3:50:0f:62:2c:c4:59:6b:5e:17:75:
cb:49:93:02:78:ca:f5:3c:bb:8b:6b:34:75:06:06:
12:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:C1:32:7F:61:FC:72:B8:A7:06:09:2C:1F:E0:5B:B0:6D:5D:A1
X509v3 Authority Key Identifier:
keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bb:5b:ac:92:d5:cc:14:5a:cb:d7:e7:8c:ee:d3:3e:6f:48:
e6:eb:75:b4:79:99:43:fb:f6:15:69:4f:eb:bf:7b:f8:b9:df:
f6:57:fb:25:14:b8:fb:c3:b8:31:b8:da:92:3a:8c:72:d6:ad:
28:46:9e:80:74:24:37:aa:7e:e5:0d:ab:e0:4e:00:12:7b:49:
1e:80:f4:de:27:24:1c:35:c4:4b:cf:dd:96:90:dd:d4:44:d6:
f0:77:c2:27:b2:aa:0c:0e:48:27:04:37:90:14:f9:3f:69:43:
3a:35:d0:42:5e:cf:36:b8:96:c9:ff:f6:e9:1d:05:ec:d2:3b:
05:04:88:c2:9b:c1:4f:a0:51:1e:04:ec:3f:c0:b8:20:12:04:
2a:e8:51:92:a6:66:46:88:86:e0:36:b1:66:80:9a:bf:87:d1:
66:c0:9c:cc:2c:e4:88:8b:cc:2b:f5:c5:8c:ea:0c:db:89:24:
c0:90:34:ee:ea:fb:25:98:d5:42:dd:05:bd:7d:c2:cd:0c:45:
cd:8c:76:87:e4:a5:29:21:7e:f5:62:a4:bf:d1:31:62:aa:5d:
91:44:8f:11:03:44:f1:9c:a4:42:29:43:de:00:cc:f4:c4:9c:
d4:40:d6:0b:ad:6a:b5:e1:66:80:78:03:46:ba:73:59:67:23:
c0:16:09:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBNDkxMTAvBgNVBAUTKENENjVFNjc0MEJBRTdFQjMzQkQ1RTUzOEM5RUU2REU4
QjMzNTQ0MzEwHhcNMjYwMzAyMDIzNDE5WhcNMjYwMzA5MDIzNDE5WjAYMRYwFAYD
VQQDEw02OWE0ZjcyYy0xNmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4GBOnThNWJkdQxqxy85den9zl6N6LfgdTq3Uf9zQX7WKyiT51VZTvcAUPxey
xL2k85NYOGOXp6Gmngqw4lWnurG0Gie1JUA4XENWYlef7zv5v6J+KLF0AVy9FrAn
nclqALoAW+dxcvATk+0snXcEKDfYnQMAMRyUwU4IRToFke2a40TL1PtnX4mYaRgm
dCIG43XfgyK8/zmmY6xZgpgpb6Ked7n1w7F6KvRVsij7bzCOiDthzWlNFZ74ed2R
cKA/h5S85dpjUEwJxGnmForRR1iW0+TV8TxsYVC2dvxWDnuIrEsQ41APYizEWWte
F3XLSZMCeMr1PLuLazR1BgYSkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9FwTJ/
YfxyuKcGCSwf4FuwbV2hMB8GA1UdIwQYMBaAFM1l5nQLrn6zO9XlOMnubeizNUQx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS9BNEMwQ0E5Njkw
MDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZyTTcxZVU0eWU1dDZMTTFS
REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJERS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkE0OS9BNEMwQ0E5NjkwMDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZy
TTcxZVU0eWU1dDZMTTFSREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAirtbrJLVzBRay9fnjO7TPm9I5ut1tHmZQ/v2FWlP6797+Lnf9lf7JRS4+8O4
MbjakjqMctatKEaegHQkN6p+5Q2r4E4AEntJHoD03ickHDXES8/dlpDd1ETW8HfC
J7KqDA5IJwQ3kBT5P2lDOjXQQl7PNriWyf/26R0F7NI7BQSIwpvBT6BRHgTsP8C4
IBIEKuhRkqZmRoiG4DaxZoCav4fRZsCczCzkiIvMK/XFjOoM24kkwJA07ur7JZjV
Qt0FvX3CzQxFzYx2h+SlKSF+9WKkv9ExYqpdkUSPEQNE8ZykQilD3gDM9MSc1EDW
C61qteFmgHgDRrpzWWcjwBYJpg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:32 2026 by rpki-client