
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
File: zmv7CPlShjUnqTwQ2jyn35ETrPE.mft (raw, json)
Hash identifier: /TePlF3uIdRPwxZz57boRThxehtcIgoINYhSmyS2h+E=
Subject key identifier: 7C:40:BB:F8:9B:DD:50:68:3E:49:FC:3A:6A:76:6B:97:96:05:71:E5
Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1
Certificate issuer: /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
Manifest number: 014F
Signing time: Sun 01 Mar 2026 06:06:32 +0000
Manifest this update: Sun 01 Mar 2026 06:06:32 +0000
Manifest next update: Sun 08 Mar 2026 06:06:32 +0000
Files and hashes: 1: zmv7CPlShjUnqTwQ2jyn35ETrPE.crl (hash: vqVuEUP8gn+Bwopotczp5qukZxn63KHT72ZHoXhKN1Y=)
2: 027BBBCA12B211EF8197C737C4F9AE02.roa (hash: snx4H5KBXKLxlg5egCwWgVTyat0ib6lOIpzJTXz53aA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl
rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F86, serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
Validity
Not Before: Mar 1 06:06:32 2026 GMT
Not After : Mar 8 06:06:32 2026 GMT
Subject: CN=69a3d768-00ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:f2:33:22:c7:52:1e:2d:51:08:f4:69:45:
9d:f3:df:b9:b2:7c:39:2e:0d:a6:ff:6d:d5:fa:ad:
18:84:d1:aa:e8:04:d6:86:3a:58:28:ed:17:50:d6:
a5:75:be:9d:d5:ac:83:e5:fa:e8:a7:e4:f1:a1:45:
ff:43:71:4f:4b:da:5f:f9:d6:a5:48:6f:c9:04:53:
8f:4a:31:c1:46:bc:8a:3f:99:69:53:2d:e5:59:26:
44:af:08:01:aa:15:fb:9c:e6:0f:21:d8:0c:6c:3c:
45:65:08:c6:ba:d0:3e:6b:7e:1b:6c:12:45:5f:25:
d6:2f:74:83:9b:b4:23:f2:5b:f7:15:10:0c:3f:66:
5d:10:ab:be:02:9a:64:1c:e9:82:d3:5a:c1:69:f0:
58:cf:4c:f2:4b:04:97:dc:0a:82:2d:94:85:1e:a4:
4c:5b:c4:f1:23:73:08:b2:8b:86:bf:82:f9:80:fa:
f4:e7:f7:3f:e1:1d:1c:10:b1:45:48:35:6f:4a:7f:
22:85:3a:a3:3d:fc:ea:10:d9:09:f4:08:2a:a5:bf:
ea:66:cc:62:43:d4:28:e1:1a:d5:c3:26:80:ea:9b:
76:90:b7:d3:b1:15:e3:f9:fc:01:30:cb:2d:da:a0:
30:6d:71:1c:9f:f7:80:29:05:1d:bf:c0:49:69:61:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:BB:F8:9B:DD:50:68:3E:49:FC:3A:6A:76:6B:97:96:05:71:E5
X509v3 Authority Key Identifier:
keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:d2:d9:27:de:03:b5:5e:e7:e7:c2:b6:17:fc:1a:18:89:e0:
72:6f:1f:2d:9a:95:c1:eb:7b:74:3c:cb:81:97:ec:9f:67:c4:
12:e9:cc:e6:12:b5:16:ea:80:45:94:83:7d:b2:57:c1:d0:35:
3d:84:68:e5:b1:a1:9f:35:41:8f:50:d4:d1:d5:0a:32:1a:c0:
57:86:40:fc:15:42:4a:4d:52:f3:b0:d8:1f:66:18:c3:b1:94:
6e:69:35:9e:6b:d0:d7:36:ca:24:b2:fe:a0:4f:2f:e7:d0:70:
e4:28:bd:94:c2:f0:6b:c2:5b:bf:cc:7f:f8:14:c3:39:72:24:
71:94:50:9b:f8:6e:b8:22:69:8c:67:fe:e8:47:d4:e9:79:d4:
eb:b9:67:06:4a:cd:82:b6:aa:79:82:1d:89:9b:9a:94:a7:ce:
b1:77:fc:7f:9d:92:dd:ac:0a:cb:d5:69:24:29:39:17:51:63:
ae:da:3a:e8:0d:d1:8b:af:92:d6:ac:15:f7:48:09:f6:5c:1c:
fe:4a:29:e4:77:95:cc:e1:52:d9:a7:7e:fc:70:20:99:b9:1b:
37:3d:96:7b:51:e8:d5:7e:37:91:c5:81:2d:97:64:1f:3d:73:
11:9f:48:67:7c:c2:b2:0b:e1:57:4f:64:0b:7a:4b:39:35:d3:
b1:69:fb:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGODYxMTAvBgNVBAUTKENFNkJGQjA4Rjk1Mjg2MzUyN0E5M0MxMERBM0NBN0RG
OTExM0FDRjEwHhcNMjYwMzAxMDYwNjMyWhcNMjYwMzA4MDYwNjMyWjAYMRYwFAYD
VQQDEw02OWEzZDc2OC0wMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsyryMyLHUh4tUQj0aUWd89+5snw5Lg2m/23V+q0YhNGq6ATWhjpYKO0XUNal
db6d1ayD5frop+TxoUX/Q3FPS9pf+dalSG/JBFOPSjHBRryKP5lpUy3lWSZErwgB
qhX7nOYPIdgMbDxFZQjGutA+a34bbBJFXyXWL3SDm7Qj8lv3FRAMP2ZdEKu+Appk
HOmC01rBafBYz0zySwSX3AqCLZSFHqRMW8TxI3MIsouGv4L5gPr05/c/4R0cELFF
SDVvSn8ihTqjPfzqENkJ9Agqpb/qZsxiQ9Qo4RrVwyaA6pt2kLfTsRXj+fwBMMst
2qAwbXEcn/eAKQUdv8BJaWECUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHxAu/ib
3VBoPkn8Omp2a5eWBXHlMB8GA1UdIwQYMBaAFM5r+wj5UoY1J6k8ENo8p9+RE6zx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY4Ni8wOTAzREI5MDEy
QjExMUVGOTIxMTUwMzZDNEY5QUUwMi96bXY3Q1BsU2hqVW5xVHdRMmp5bjM1RVRy
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ptdjdDUGxTaGpVbnFUd1EyanluMzVFVHJQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkY4Ni8wOTAzREI5MDEyQjExMUVGOTIxMTUwMzZDNEY5QUUwMi96bXY3Q1BsU2hq
VW5xVHdRMmp5bjM1RVRyUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVtLZJ94DtV7n58K2F/waGIngcm8fLZqVwet7dDzLgZfsn2fEEunM5hK1FuqA
RZSDfbJXwdA1PYRo5bGhnzVBj1DU0dUKMhrAV4ZA/BVCSk1S87DYH2YYw7GUbmk1
nmvQ1zbKJLL+oE8v59Bw5Ci9lMLwa8Jbv8x/+BTDOXIkcZRQm/huuCJpjGf+6EfU
6XnU67lnBkrNgraqeYIdiZualKfOsXf8f52S3awKy9VpJCk5F1Fjrto66A3Ri6+S
1qwV90gJ9lwc/kop5HeVzOFS2ad+/HAgmbkbNz2We1Ho1X43kcWBLZdkHz1zEZ9I
Z3zCsgvhV09kC3pLOTXTsWn7Vg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:59 2026 by rpki-client