
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json)
Hash identifier: E8P1aUfmOKvNGlRuHy0Wk2H1ipUS9tbD/9s5y2a37xk=
Subject key identifier: 84:0B:50:A4:E8:37:68:F2:8A:D5:1F:FC:1A:8B:14:B4:25:83:C4:45
Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
Manifest number: D8
Signing time: Sun 01 Mar 2026 07:46:32 +0000
Manifest this update: Sun 01 Mar 2026 07:46:32 +0000
Manifest next update: Sun 08 Mar 2026 07:46:32 +0000
Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: NcY6LLhijm8OKqAf0ucSkjYI2Pj5O2CU9S+3WMbNIjE=)
2: B8587822CBF611EFAE14812EC4F9AE02.roa (hash: lDKeRG9eEL+s1K16vRs3ICLsEsEkHJhrK4mCAHxbCQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Validity
Not Before: Mar 1 07:46:32 2026 GMT
Not After : Mar 8 07:46:32 2026 GMT
Subject: CN=69a3eed8-95d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:0c:a9:e4:90:a6:42:2d:88:04:88:82:2d:
12:b6:89:e0:09:f6:fa:43:0f:c0:ad:4c:03:f7:cb:
17:73:70:57:21:14:c8:a5:b2:01:48:c9:dc:9b:6d:
18:f0:c3:47:2a:01:ea:14:94:5d:30:b7:38:d5:5b:
a9:92:9a:54:54:ee:f8:f3:77:67:b0:53:a9:27:36:
21:9c:25:1a:b6:7c:93:e9:63:bb:31:ac:11:71:4d:
e3:43:b2:f1:c3:f5:8e:43:0c:52:c1:39:c6:50:dc:
5c:f9:8f:a8:f0:e8:30:3c:58:f2:21:29:44:01:26:
00:d0:b8:73:62:c4:f6:6b:8d:10:5d:3f:e3:70:97:
41:b4:06:35:79:47:82:d9:57:96:73:fc:aa:5c:73:
41:87:73:01:8f:45:dd:dc:c0:f1:5f:ff:b4:fc:53:
1e:2a:43:7d:b8:ea:47:5a:c4:1a:09:e8:9a:43:de:
67:7a:d1:a4:0f:46:c7:b7:e3:b7:fd:38:fc:87:df:
02:90:e4:a0:20:28:50:35:08:e2:f7:fc:dd:1b:14:
00:a9:00:3b:05:79:f4:9e:d6:55:e2:15:dd:46:1d:
e6:69:f0:67:4f:a4:f0:c6:19:99:1a:2f:8d:78:ba:
30:d2:10:42:5a:a4:4b:02:db:0b:67:8d:0c:72:40:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:50:A4:E8:37:68:F2:8A:D5:1F:FC:1A:8B:14:B4:25:83:C4:45
X509v3 Authority Key Identifier:
keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:c1:50:d7:ee:83:e6:34:5f:59:b4:22:11:70:d7:e4:5f:fb:
9b:d0:96:06:e2:cb:a5:4e:97:d9:5a:68:6b:00:cf:e4:bc:7e:
d9:c0:40:8c:c5:4f:ac:9c:20:09:29:88:24:c0:fc:9a:8f:7d:
35:c7:ce:d2:41:97:db:02:10:34:4b:27:c4:71:2a:94:e5:ef:
fb:e7:a9:ce:ae:7d:57:b3:5a:a5:1e:c9:a7:fa:06:0b:25:74:
d5:42:78:23:5d:f1:cc:86:47:32:a1:54:3e:a1:92:c3:87:14:
44:9c:54:8e:5a:73:ca:3a:e5:63:d8:75:98:ad:c0:1b:4f:a6:
be:21:08:4a:29:78:4f:25:8b:74:3e:57:ee:00:1a:52:a5:e6:
10:ff:57:70:64:07:bf:b5:fb:3c:63:47:7d:32:7c:89:0d:6c:
02:fc:d5:a1:be:f8:43:76:bd:97:be:69:e7:76:64:1b:95:1e:
4e:f0:16:a4:f2:58:82:82:93:6d:12:85:50:e3:04:04:05:70:
d4:82:95:23:cb:14:f2:47:ca:19:d2:86:7a:5f:d4:3c:3d:f1:
2a:f5:e2:20:78:75:07:b1:be:03:d7:dc:64:56:0d:a4:a9:a4:
7e:c9:43:0c:ca:73:48:4c:f6:09:01:70:3e:b4:5e:1a:a3:4e:
67:df:9c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:05 2026 by rpki-client