
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier: QKKcXQgYy2HMGnJoACUfNBINfQd1hj2SBnaL2H+gpvw=
Subject key identifier: 6B:BA:1C:C8:DA:1B:66:22:32:B6:CD:F0:7B:2E:A1:F9:CC:08:30:BD
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial: 2389
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number: 2379
Signing time: Mon 02 Mar 2026 01:01:55 +0000
Manifest this update: Mon 02 Mar 2026 01:01:53 +0000
Manifest next update: Mon 09 Mar 2026 01:01:53 +0000
Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: Orfmr8Lu/PR9Lwvdp0MEJ1pM1F3q0IrIsq9EiuVcC1c=)
2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: jZXI3ipxYqcT93E6OoTntF08+ARhGbsAg+OWr8b/Iio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9097 (0x2389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Validity
Not Before: Mar 2 01:01:53 2026 GMT
Not After : Mar 9 01:01:53 2026 GMT
Subject: CN=69a4e182-f6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:f7:31:11:e7:cf:9f:71:c0:1a:ee:7d:d7:
bd:24:1d:7b:ad:99:bc:80:2c:33:cc:2c:38:e1:a8:
a4:d9:10:df:f9:4f:ee:8f:e5:f6:5e:78:e2:78:64:
10:53:17:38:eb:db:21:66:32:0e:ee:fd:c8:53:ba:
02:33:9c:8e:7b:e3:58:97:8a:49:e1:12:ec:4d:62:
44:70:1e:f4:9e:a9:14:1f:74:8d:3c:04:a7:0a:36:
80:a4:4a:97:6f:2e:c9:61:00:c6:10:2c:ee:e3:09:
68:61:a9:87:90:c1:7d:c7:5d:30:5f:32:ef:94:23:
5c:68:e9:58:17:0f:f2:c5:0b:7a:d0:d3:77:91:19:
b6:cd:0c:b7:1f:63:e2:1c:19:70:74:c6:93:37:07:
f7:01:3f:70:c5:df:5d:79:cd:98:ca:63:e8:af:c8:
6c:03:3d:c7:ca:47:74:71:4b:79:5f:fb:ee:72:72:
6b:14:53:42:70:c0:1e:26:13:1a:7a:ee:72:9d:db:
1a:79:68:e8:7b:92:e1:b2:30:91:a4:a6:a6:db:7a:
8b:62:b8:eb:97:b9:f1:30:39:7c:1b:e6:f5:84:b1:
fc:9c:8a:95:43:f0:44:8a:6e:82:26:e0:14:64:98:
76:42:6a:bb:c8:29:cf:57:45:f8:55:a8:20:a0:27:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BA:1C:C8:DA:1B:66:22:32:B6:CD:F0:7B:2E:A1:F9:CC:08:30:BD
X509v3 Authority Key Identifier:
keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:bd:54:22:17:64:8a:c7:d0:d0:cb:fa:41:2b:61:27:7d:60:
83:d0:fe:68:34:ef:a5:ed:6c:01:fa:18:c5:71:52:31:a1:3d:
3d:ab:1e:99:bf:ca:62:9a:b3:c5:84:6c:ec:9c:e8:f8:cb:72:
3f:b1:1c:f8:72:a0:0c:ad:7e:f0:1b:75:68:00:d4:71:e8:80:
90:5c:46:95:36:f3:52:c7:c4:49:7e:d2:70:b5:cf:ea:39:cf:
cb:1a:c7:2c:7d:e3:d4:a3:15:be:42:32:da:cf:94:e7:d2:94:
97:b0:7b:e5:ad:af:2f:43:58:32:1a:22:ec:65:9a:91:dc:57:
70:cf:9a:96:0f:4a:78:e1:2f:6d:84:0c:d5:b0:33:3f:d0:a6:
5d:82:bf:89:ba:4a:2d:3c:3b:b7:73:f9:2d:16:00:72:d0:c8:
b9:60:b9:e8:e4:85:40:25:b1:58:3c:e8:90:c8:63:58:7f:8a:
75:90:be:6d:34:05:da:d0:06:18:da:20:21:d1:aa:34:b1:fc:
24:50:85:77:16:70:73:5a:73:66:75:ae:d3:ef:89:99:2f:b3:
c6:37:df:2c:cb:01:ae:b1:c9:7d:5b:69:09:e3:47:f8:27:02:
54:20:b3:6f:55:e1:05:13:bd:7f:61:da:c5:64:d0:b2:06:b1:
20:4e:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:04 2026 by rpki-client