
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
File: ZwbZhOcxaBICGI0pntNfAFsBdYA.mft (raw, json)
Hash identifier: IhEF6Z0LH1obg8z6fowtR3uGDpucWTvCRyoa4w5pXCs=
Subject key identifier: 81:29:89:3A:3C:B5:BA:5C:CB:5A:0B:7C:DC:70:D4:94:D3:C5:08:51
Authority key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
Certificate issuer: /CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580
Certificate serial: 3514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
Manifest number: 3514
Signing time: Sat 28 Feb 2026 14:42:46 +0000
Manifest this update: Sat 28 Feb 2026 14:42:45 +0000
Manifest next update: Sat 07 Mar 2026 14:42:45 +0000
Files and hashes: 1: ZwbZhOcxaBICGI0pntNfAFsBdYA.crl (hash: +LQT9BitdnBpeq/cPNbmYF384D9S5r1r8Qut13yZsJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl
rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13588 (0x3514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DCDA, serialNumber=6706D984E731681202188D299ED35F005B017580
Validity
Not Before: Feb 28 14:42:45 2026 GMT
Not After : Mar 7 14:42:45 2026 GMT
Subject: CN=69a2fee6-a810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:07:db:08:f5:7c:30:83:c0:f3:99:7e:a9:
6e:81:52:30:5c:e1:67:12:14:05:05:fa:8c:bf:9b:
0c:04:5c:08:77:f0:9a:78:64:eb:ac:7c:e2:06:eb:
3a:11:21:b0:14:45:b2:b2:1f:e0:43:2a:f3:e2:1d:
f9:11:21:59:e7:8b:0b:07:07:9c:f2:6a:8f:44:97:
79:08:58:76:63:0e:79:b9:0f:2b:a4:bb:a3:71:e9:
39:f0:f5:5d:47:6f:43:dd:ad:95:1d:3d:4a:a3:37:
46:da:96:8b:4b:ec:78:ab:af:ad:42:0b:d5:c9:d6:
bc:ce:c2:14:e3:e8:7a:43:e1:10:11:65:24:ef:0e:
35:d1:71:96:9e:b1:5e:ad:4e:e7:d0:98:15:6a:68:
69:66:fe:ff:25:35:a6:51:7f:e6:33:28:5b:b2:f0:
71:e7:60:63:5b:07:d6:77:0a:61:7c:51:04:3d:b0:
e5:80:a0:9f:9d:d9:a7:9e:db:e9:b4:8d:7b:83:d2:
62:31:9e:b8:3c:d6:b8:f2:35:22:7c:35:f9:15:54:
e6:6a:d5:51:58:c6:74:3f:2d:ad:c3:72:4c:00:b6:
7a:ef:fa:0d:c1:a2:ad:e4:79:21:f6:b5:6a:88:dd:
e6:f0:c9:90:19:a3:ce:5f:61:73:0a:9b:13:4e:bb:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:89:3A:3C:B5:BA:5C:CB:5A:0B:7C:DC:70:D4:94:D3:C5:08:51
X509v3 Authority Key Identifier:
keyid:67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:29:73:10:6d:e6:85:b6:91:9e:09:bb:36:97:4a:82:fc:e6:
44:fc:d8:07:c0:28:a6:2e:ec:56:6a:06:dd:64:35:86:0f:a6:
3c:77:91:ae:17:bc:37:84:87:51:9d:e7:9c:cd:bf:29:3f:3d:
68:22:2b:53:c7:82:4b:c2:f5:7e:42:8d:85:5b:b0:e0:bc:a7:
fe:3a:56:5d:70:7c:84:42:1b:77:8e:2a:15:89:59:e0:92:e3:
a9:d6:c6:95:16:1d:2f:e0:a0:26:65:09:50:9f:2c:47:1e:4b:
21:7c:dd:61:fb:af:21:f3:44:fa:d1:1b:09:ff:32:80:d1:2f:
c2:0c:4b:84:8b:e3:7a:3f:17:9a:22:6e:0e:13:0a:a1:b6:cc:
99:b9:bb:7a:12:47:7f:31:7f:06:23:b2:41:3b:ad:86:d7:7c:
40:1c:9e:f5:0f:63:a4:6c:59:9d:7c:40:00:74:71:76:e8:2d:
11:37:fb:e3:37:3f:fd:8f:1f:0d:41:15:24:87:fa:e4:50:a9:
7f:50:34:56:96:e4:28:ae:28:e6:31:42:1b:d7:39:21:67:a9:
1c:fa:b9:2e:a5:27:aa:2f:90:a4:d5:8d:63:ce:54:f8:d1:96:
06:62:f9:e8:f6:ba:fb:eb:cb:35:0e:a3:c1:d8:48:ea:61:f6:
07:aa:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:41:23 2026 by rpki-client