
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json)
Hash identifier: EU7b0aXmhy5EAP8smgfhBGgC+sjRea1Mays+87OdWKg=
Subject key identifier: 14:2E:AD:4E:DE:54:BD:47:EE:EB:3B:84:E4:CC:B8:B5:82:04:1E:55
Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Certificate serial: 1B77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
Manifest number: 1B42
Signing time: Mon 02 Mar 2026 00:18:40 +0000
Manifest this update: Mon 02 Mar 2026 00:18:38 +0000
Manifest next update: Mon 09 Mar 2026 00:18:38 +0000
Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: jYePDt6Uph0HiHWujkDWcqEHm8ILK4sRgLZWcCKwmik=)
2: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: J4O6hOYsYTtAWkKIt55lDw3nOXfZwdP5BQXiUqiKBWs=)
3: B15CDE14707811E7998D782EC4F9AE02.roa (hash: kAe/+fH2NG2XGN1kic5QI0VlnzZUqGK3U4nbsNiD5W0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7031 (0x1b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Validity
Not Before: Mar 2 00:18:38 2026 GMT
Not After : Mar 9 00:18:38 2026 GMT
Subject: CN=69a4d75f-6ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:d1:af:b1:c6:e6:c8:de:87:14:70:8d:27:
3b:1e:56:7d:c1:70:96:ca:fe:d1:ba:cb:91:e5:21:
0a:6a:4d:e4:08:e0:b9:5b:2b:dc:c6:be:d5:47:8c:
93:48:0b:41:42:79:0d:24:81:2f:d7:ee:d1:ce:ac:
2e:2d:53:3f:2e:42:fb:4f:ab:ed:64:a7:c0:67:a5:
c4:46:0d:dd:6d:4c:d8:af:19:d0:9e:e9:52:9f:be:
0e:46:00:3d:66:76:31:70:81:c8:20:b9:dc:a8:f9:
53:26:d1:58:86:bc:08:a2:0d:27:30:78:d1:9a:79:
f0:79:ca:11:b4:95:db:60:ba:cc:a1:02:68:96:63:
c5:7e:d3:32:bc:c4:b1:03:76:48:4e:9f:ba:55:ea:
49:d8:21:48:80:27:8d:7d:19:f2:f4:e8:89:d0:83:
eb:c4:80:ca:49:53:29:a1:8e:bc:ac:99:e9:f7:fe:
68:c5:38:17:58:e4:28:4c:8b:c1:33:01:f9:d6:c6:
95:6d:32:d1:48:26:f9:e5:e9:3a:c3:48:56:d0:c9:
d4:a9:5b:c9:5c:49:7c:71:ed:54:44:88:fe:ab:00:
22:55:59:07:a9:97:12:f2:62:aa:02:12:34:7f:61:
01:fa:2a:60:70:d6:02:9c:3b:a0:b6:73:56:3e:b7:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2E:AD:4E:DE:54:BD:47:EE:EB:3B:84:E4:CC:B8:B5:82:04:1E:55
X509v3 Authority Key Identifier:
keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ff:2a:2d:fa:bd:48:73:6f:92:95:a2:73:98:44:b7:78:67:
96:27:83:68:8c:e7:40:da:ef:ca:e3:20:01:01:65:08:05:bd:
34:16:12:03:2f:7d:19:9e:24:69:ce:c2:f7:3b:c8:71:74:c7:
1d:9a:7e:52:0b:7a:5a:d9:90:d9:86:8c:0c:9c:61:a0:bf:68:
7e:49:38:8b:c8:77:53:77:63:c4:cf:8c:95:78:12:49:ed:40:
5d:38:8d:7f:8a:ac:8c:ce:65:a9:29:cd:47:0c:1b:61:02:d7:
fe:0a:08:d2:1e:97:b6:f8:91:5e:7e:dd:67:1f:74:56:b5:b6:
c7:25:56:6d:7a:bf:5e:3f:7b:c7:38:78:6c:52:ea:be:89:3b:
41:b8:1f:9d:f0:5d:2d:9e:ad:f4:7d:fd:86:30:3c:12:64:dc:
ba:a6:15:25:8c:21:47:d3:e3:8e:11:88:c4:ab:ed:c1:93:33:
f9:78:bf:a6:b3:c6:ea:5d:6b:99:61:a0:6e:e4:fb:73:15:6d:
9a:d1:70:b6:14:c3:3b:a3:3e:05:e8:14:e1:fe:c5:ce:75:0b:
37:e6:5e:ea:e2:b5:7d:78:92:83:5e:c9:80:ad:b5:bf:15:3d:
35:35:48:39:1e:7f:fc:ad:3a:ad:46:84:c2:29:e3:b6:19:c2:
d7:8a:07:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4
QjYyNEMxNTIwHhcNMjYwMzAyMDAxODM4WhcNMjYwMzA5MDAxODM4WjAYMRYwFAYD
VQQDEw02OWE0ZDc1Zi02ZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkVHRr7HG5sjehxRwjSc7HlZ9wXCWyv7RusuR5SEKak3kCOC5Wyvcxr7VR4yT
SAtBQnkNJIEv1+7RzqwuLVM/LkL7T6vtZKfAZ6XERg3dbUzYrxnQnulSn74ORgA9
ZnYxcIHIILncqPlTJtFYhrwIog0nMHjRmnnwecoRtJXbYLrMoQJolmPFftMyvMSx
A3ZITp+6VepJ2CFIgCeNfRny9OiJ0IPrxIDKSVMpoY68rJnp9/5oxTgXWOQoTIvB
MwH51saVbTLRSCb55ek6w0hW0MnUqVvJXEl8ce1URIj+qwAiVVkHqZcS8mKqAhI0
f2EB+ipgcNYCnDugtnNWPrfP9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQurU7e
VL1H7us7hOTMuLWCBB5VMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF
MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1
T090c0lvOHdNTkdMWWt3VkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGv8qLfq9SHNvkpWic5hEt3hnlieDaIznQNrvyuMgAQFlCAW9NBYSAy99GZ4k
ac7C9zvIcXTHHZp+Ugt6WtmQ2YaMDJxhoL9ofkk4i8h3U3djxM+MlXgSSe1AXTiN
f4qsjM5lqSnNRwwbYQLX/goI0h6XtviRXn7dZx90VrW2xyVWbXq/Xj97xzh4bFLq
vok7QbgfnfBdLZ6t9H39hjA8EmTcuqYVJYwhR9PjjhGIxKvtwZMz+Xi/prPG6l1r
mWGgbuT7cxVtmtFwthTDO6M+BegU4f7FznULN+Ze6uK1fXiSg17JgK21vxU9NTVI
OR5//K06rUaEwinjthnC14oHUg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:02 2026 by rpki-client