
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json)
Hash identifier: g3AqCBQQAAA2z0Eks6xZX630y6GtYzXz0HoP2PttPzw=
Subject key identifier: F8:90:D9:2B:88:89:AE:D3:6C:80:87:83:D4:F3:BA:55:F2:BD:9F:60
Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
Manifest number: 01B7
Signing time: Fri 17 Apr 2026 03:41:31 +0000
Manifest this update: Fri 17 Apr 2026 03:41:30 +0000
Manifest next update: Fri 24 Apr 2026 03:41:30 +0000
Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: W6Z6uE4nEVb9gyTGn3SXMcYLlujv3lVmSN+PLBkXGBE=)
2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: ic3XiW85ytxsS/pCp16b77ysR8VYoeEBpJGQ+I0T1aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Validity
Not Before: Apr 17 03:41:30 2026 GMT
Not After : Apr 24 03:41:30 2026 GMT
Subject: CN=69e1abeb-fd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:4a:7f:9d:d1:55:56:d8:e3:05:a7:b6:58:
ed:45:54:55:ee:b1:eb:dc:e8:df:20:f9:ac:29:3f:
b2:2a:de:1b:79:b7:a5:6f:98:c6:c7:7d:4a:7e:bd:
20:7a:a1:3d:35:be:f1:73:9b:63:ee:79:fe:51:9c:
5e:84:d3:6d:c8:3f:12:d6:c3:66:c4:ba:49:1f:f9:
e7:3b:97:c8:a9:06:6d:75:d5:ce:27:8a:d0:47:7f:
db:44:1a:3e:c2:b2:11:da:fe:35:68:ee:f8:9e:a6:
a6:b8:b7:96:06:61:cf:46:2f:5b:cf:ca:70:20:4f:
17:6a:b4:42:b0:22:4b:70:bb:f4:3b:b0:bf:20:52:
49:ed:3a:ec:f3:89:f9:3a:f8:73:1d:d3:d0:6d:a0:
5f:4e:39:c6:00:e8:c6:2e:51:4b:1d:98:1b:87:ae:
21:58:48:47:bf:fd:ba:d6:36:94:6c:af:35:b9:3b:
ec:75:57:d2:0d:4e:36:06:84:f8:1c:a6:8c:f6:a1:
d2:e5:ee:69:de:78:f0:d7:52:bd:0b:94:24:13:c8:
05:5f:54:6d:54:b3:04:44:65:04:62:9f:e5:03:77:
58:b3:c5:de:6e:ce:ec:f1:63:49:79:4c:55:d0:5f:
c2:f3:c5:cc:82:46:4c:20:ed:75:67:b4:f2:4b:4a:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:90:D9:2B:88:89:AE:D3:6C:80:87:83:D4:F3:BA:55:F2:BD:9F:60
X509v3 Authority Key Identifier:
keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:5e:d2:c9:0d:87:fa:a8:d0:d3:be:d0:a9:bc:f9:88:24:08:
1f:8c:c3:b9:a7:63:61:30:62:d2:f9:c7:4d:bf:6e:67:dc:5b:
4b:46:d1:f2:e9:d3:cd:57:4a:aa:04:c8:e4:39:be:b8:5d:25:
1c:bf:56:13:33:8e:51:fe:ec:bf:ae:2f:1c:44:4a:a3:a8:e9:
d3:9c:b9:f1:05:e0:db:e9:1e:87:0c:4c:5e:6e:e9:f2:d4:95:
3a:42:76:75:ba:e2:94:50:b2:40:12:63:c8:e3:30:e2:1c:96:
47:2a:3c:07:80:77:9f:66:e5:71:24:25:7c:6e:75:bf:69:af:
43:7b:bf:7e:3d:ae:6f:7d:7e:56:65:6f:d6:d7:06:3f:79:fa:
ab:b2:4e:5f:f2:0c:ff:48:01:24:38:ef:19:bb:a9:2a:e3:82:
82:52:60:90:36:98:45:7c:6c:a0:0b:1e:c6:d6:48:6d:be:12:
3d:0a:77:c2:ac:05:65:de:25:64:13:6c:d1:e8:3a:04:e9:7c:
b8:b4:87:4a:b7:b7:14:40:06:da:36:09:ac:b8:af:e1:c7:2f:
d2:b3:eb:17:c3:15:e3:dd:71:28:63:f2:02:d0:6e:73:69:98:
23:64:43:7d:ee:e3:8a:ee:60:7e:6e:fd:93:19:4f:2b:f7:bf:
23:41:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:31 2026 by rpki-client