
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json)
Hash identifier: dcse88jmfc2/n7IGp+LS4tHeaylW0v06uLELxMBPVrg=
Subject key identifier: A8:3F:5E:5A:DA:24:24:17:71:4F:F6:0C:31:3D:D1:70:1E:12:E1:B4
Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Certificate serial: 0A52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
Manifest number: 0A46
Signing time: Sat 28 Feb 2026 19:55:18 +0000
Manifest this update: Sat 28 Feb 2026 19:55:18 +0000
Manifest next update: Sat 07 Mar 2026 19:55:18 +0000
Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: yM9r3a1VKMMVKJoQ/CmVm3P/86+fhQAQbVVCAQSa1gE=)
2: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: 3doq1VIPrTMuHeE3hP1dvsdzHHC8FVCO0WmVRpeSjbk=)
3: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: cQpAURqDM/34gPKhgVHe+OBCLHcXpgoxll5j5sk3a4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2642 (0xa52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Validity
Not Before: Feb 28 19:55:18 2026 GMT
Not After : Mar 7 19:55:18 2026 GMT
Subject: CN=69a34826-96cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:23:b0:1d:4e:44:84:50:32:16:ee:54:25:
e2:bc:fd:7f:42:4c:be:ac:1e:8c:1e:81:1a:69:ea:
89:7d:c8:b3:a9:f9:08:b9:72:7c:3a:2b:58:49:73:
96:bb:57:63:88:91:f8:d3:25:44:3a:5b:e9:49:60:
2c:f9:45:31:76:b2:1d:5f:b0:23:5f:d3:07:36:39:
de:64:0a:b3:4a:bf:f2:01:3c:fd:00:bf:1c:eb:24:
b6:81:46:f3:3a:0e:9d:3c:71:34:fb:4b:20:af:bf:
6c:87:66:0b:9e:64:8c:60:e3:54:dd:44:f4:5a:95:
ae:c5:eb:84:86:a7:9d:ff:52:43:7f:d4:3a:c0:f2:
bb:73:82:95:3e:12:0c:52:ff:0b:bf:63:db:9b:6a:
12:db:5e:12:9b:dd:7f:ce:ec:cc:35:e2:54:eb:99:
b4:7d:30:20:fd:c9:09:d0:14:90:c8:35:2c:99:54:
ff:e2:ba:42:21:3f:4e:85:8e:3e:96:65:1f:35:84:
4f:91:53:f8:8b:58:e3:59:f0:ba:d1:d9:ff:6a:ab:
3b:67:a5:2d:0c:f6:b0:0c:b6:ed:76:da:e5:b3:51:
71:94:b9:09:5d:6f:c1:5b:66:d2:75:64:b6:7c:50:
27:29:3d:0d:d5:36:8b:f4:17:2b:91:3d:f6:72:da:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:5E:5A:DA:24:24:17:71:4F:F6:0C:31:3D:D1:70:1E:12:E1:B4
X509v3 Authority Key Identifier:
keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5e:7e:a8:a0:00:c2:0e:76:f3:2f:a6:33:90:cc:ce:7e:2e:
a3:f6:90:1a:2e:23:ae:c6:41:8d:e1:5a:b7:7f:ea:77:2d:26:
49:d7:92:fa:00:49:a8:ed:a0:25:3b:6d:2c:1a:c3:33:5f:32:
fb:47:bc:c2:cc:c3:d5:b0:40:02:e1:32:5b:43:07:26:8d:d2:
2a:29:e5:c1:07:b3:31:7e:bf:ce:f6:7f:9c:7e:cc:d8:c1:bd:
f0:8d:99:7e:49:b2:d3:e3:5f:4d:22:15:e9:cf:f4:7b:09:84:
42:3d:98:5f:dc:67:c8:0b:ec:6c:39:ce:51:ab:c9:bd:6b:1d:
f9:5a:25:75:02:bc:ef:5a:95:3f:37:dd:e0:1b:25:fc:1e:68:
e9:76:3b:0a:d5:16:01:8d:b8:8b:d5:0a:67:e8:16:e9:87:db:
e1:61:12:31:73:4b:37:99:72:3e:9f:16:40:e9:ea:00:e3:47:
dd:a4:ae:e4:4e:7d:bc:2d:4c:3a:c7:6e:72:95:d6:54:6a:76:
eb:98:20:7b:d5:89:2e:ce:f1:85:87:1d:ae:c5:b8:79:40:23:
b2:c2:a8:9e:b8:67:fa:45:ec:9a:30:1d:dc:ea:d4:11:4f:ba:
12:a3:8b:63:82:9a:f0:68:07:5b:f1:5b:6d:0c:23:51:bc:c8:
cd:a5:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:04 2026 by rpki-client