
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json)
Hash identifier: O5rfVdtqJf1VkKrgXCcRsMHELeCkVIH+n+NR4Brtawg=
Subject key identifier: F9:C1:6B:27:76:AB:87:75:D2:A3:74:BC:9E:46:F0:62:03:D6:0F:0D
Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Certificate serial: 2867
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
Manifest number: 2854
Signing time: Mon 02 Mar 2026 01:06:10 +0000
Manifest this update: Mon 02 Mar 2026 01:06:09 +0000
Manifest next update: Mon 09 Mar 2026 01:06:08 +0000
Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: SHmZfPL/vhm1BbOz3upm5XPxPqFqXi16fTgfUpowQpk=)
2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: VmiDWWZcXS/8NwiQU0Cj011GwuJY7i5hDmIVSX2ZEao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10343 (0x2867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Validity
Not Before: Mar 2 01:06:09 2026 GMT
Not After : Mar 9 01:06:08 2026 GMT
Subject: CN=69a4e282-afcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:f2:f8:74:11:97:a4:10:71:50:a6:a7:36:
0d:a6:1b:38:8d:61:bb:f6:b1:07:ee:dd:70:3f:a7:
1d:0d:a5:71:66:aa:35:b0:1d:b1:0a:ca:13:9b:0a:
7c:f2:9c:85:d9:84:23:01:73:b8:fc:c0:fc:49:8b:
9d:f6:22:f2:f1:d1:21:b8:9a:41:dc:4f:fa:82:3c:
f8:69:35:76:bd:44:73:78:da:ae:82:24:c7:60:b2:
10:97:04:b0:c1:f9:5f:89:8b:f5:2d:8c:a7:ad:62:
dc:bb:d8:c4:d8:82:db:30:d2:f3:7a:1e:dc:55:0c:
b2:59:8b:69:13:f8:b5:ad:6a:22:72:ab:71:8a:2f:
d1:f8:5e:32:33:cd:ff:ee:5d:4d:64:8e:68:fa:d7:
0c:2e:51:d5:b2:81:61:46:99:76:e2:82:d6:08:3d:
4b:01:1d:85:e4:b4:a6:19:8c:5b:d7:f8:2e:c2:3b:
96:a4:ef:30:54:c7:0d:a3:ec:02:ba:d5:2c:79:11:
a6:1d:49:bb:c9:68:b5:9b:7c:57:79:44:74:ba:cb:
97:8b:e4:77:5d:6d:2a:7c:dd:d8:1c:f6:c2:a5:ec:
0e:64:c8:4f:1b:d7:0d:c5:79:91:0e:03:99:7c:9d:
5b:72:63:29:c1:15:00:fb:a0:b7:8c:63:cb:d6:ec:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C1:6B:27:76:AB:87:75:D2:A3:74:BC:9E:46:F0:62:03:D6:0F:0D
X509v3 Authority Key Identifier:
keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:3f:ba:f0:90:fe:03:d7:f5:44:5b:09:01:23:94:97:eb:9d:
67:46:85:f2:3d:18:97:bb:30:24:eb:5c:f4:d4:d3:5c:71:61:
08:e8:a5:24:35:cd:f7:42:b3:d3:89:a2:87:0f:3b:62:7d:e9:
03:e5:12:53:0a:36:92:23:f6:88:6b:4f:81:4e:e3:91:e6:c9:
f5:fb:94:48:ef:a1:a8:58:9b:00:33:d7:9c:5a:35:b4:da:59:
b9:f6:84:8b:28:42:61:ee:20:ef:7d:71:83:51:10:0d:3e:09:
1d:10:a8:d6:d9:9d:d7:ff:14:fb:47:bc:fb:55:b3:90:21:d1:
8e:01:5b:aa:23:88:a3:f5:90:66:8d:d3:01:65:a0:87:80:2b:
69:7a:44:c4:ad:d1:da:48:ed:07:4b:25:80:74:70:07:53:0e:
28:84:32:16:52:84:b1:e8:10:bb:40:c4:6a:c0:d7:52:01:64:
75:55:b6:96:d4:bc:cd:e1:fb:09:c1:f4:a0:78:68:2d:9b:82:
25:8c:5f:f3:1c:64:d5:40:10:c2:a4:0f:43:29:ed:49:93:2b:
a1:0c:41:dc:b4:82:ab:2b:40:4b:8c:55:f4:1e:75:69:a8:59:
81:1e:a3:29:5e:16:ad:09:e6:16:02:e1:a0:9a:22:8f:f4:86:
9a:29:e3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:56:32 2026 by rpki-client