
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json)
Hash identifier: 9zrHJ/IJaUgZ3zOAa9nEuyR2vdFUscH5j9QB6W5gm/4=
Subject key identifier: 3D:15:AE:34:71:11:AF:82:A8:B7:1A:22:CF:59:88:34:FA:A9:C8:AD
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial: 1048
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
Manifest number: 1031
Signing time: Mon 02 Mar 2026 02:06:06 +0000
Manifest this update: Mon 02 Mar 2026 02:06:04 +0000
Manifest next update: Mon 09 Mar 2026 02:06:04 +0000
Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: Natm71S6FhWuskLJagc/pVGH1adn4wmhs8Hbcbh5Gk0=)
2: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: BUHXcbwgDCfppQqI14tt+SHKjsNJaOwlcThHrAcU48k=)
3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: d+s7KZXz1WqJhrg7kNulx9MrS05rezWlx0peNL2GZrc=)
4: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: +GqC4kHrlGijBhG+Vf9OqiE+irbiFIUUxvaGXJ8E0NA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4168 (0x1048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Validity
Not Before: Mar 2 02:06:04 2026 GMT
Not After : Mar 9 02:06:04 2026 GMT
Subject: CN=69a4f08e-814d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0c:cf:b6:90:db:93:a7:42:f4:4e:ee:84:5f:
50:59:51:66:61:ed:06:ff:d3:db:e3:f7:f9:79:b1:
e8:a6:16:7f:41:ed:7c:d5:1b:62:01:6e:9a:db:80:
1a:24:ec:2a:45:a3:39:cc:3a:23:c5:da:eb:29:f4:
45:ee:8c:99:c4:26:6e:92:a3:98:35:11:9a:f9:71:
1d:5d:00:04:d4:a1:6b:05:40:f1:7d:e7:e2:02:9f:
cf:6d:4a:6c:5e:17:e5:9c:99:5a:f2:06:1e:cf:df:
e7:63:ee:f3:7c:fc:0c:c8:1b:fa:c6:89:15:2d:ec:
71:05:da:b1:e7:00:ec:87:a1:32:e2:79:b2:1e:34:
b8:b2:8f:6d:5e:36:53:88:4c:85:6f:35:90:5e:2e:
70:5b:4e:d2:ad:db:fd:48:0a:0c:8c:1b:4f:17:63:
69:51:7c:04:3d:87:bc:82:a7:2d:c3:47:aa:f8:cf:
90:7a:4b:49:a4:ab:bf:ce:66:0a:f2:1c:8c:d4:80:
32:ce:84:14:9e:3b:44:54:1c:fc:5b:52:1e:a6:79:
6f:58:c1:18:1a:ed:3e:ba:c4:fb:80:34:9c:d4:70:
82:3f:d5:ad:e0:79:5a:77:6e:f7:c0:23:f0:55:ec:
23:1c:c0:f5:1e:39:25:88:3e:2a:af:2f:17:b6:80:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:15:AE:34:71:11:AF:82:A8:B7:1A:22:CF:59:88:34:FA:A9:C8:AD
X509v3 Authority Key Identifier:
keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:ca:27:de:81:22:7a:f9:fc:6b:e7:33:6b:4a:51:79:bb:9d:
78:28:13:8a:5c:a9:40:9f:0a:44:b4:7e:e4:86:42:4a:ea:fa:
de:a7:97:00:69:d1:57:73:82:76:7f:8a:12:46:e6:62:13:b6:
b7:e5:50:c2:67:aa:4f:fb:a9:1b:fc:3e:6f:2c:5a:c7:dd:65:
ab:46:d0:f4:62:22:39:fc:33:dc:08:8c:b0:8b:8f:18:98:70:
30:67:47:2a:a4:4d:5e:f8:08:34:97:4d:87:7d:60:c6:e9:e2:
5e:6c:79:d2:eb:ef:11:85:d2:1e:3c:a1:17:f3:2a:40:3b:9b:
dc:2e:b2:b5:a7:c5:2f:53:92:a9:ab:94:53:02:df:d4:28:12:
d3:ce:76:ec:3b:14:d9:1a:89:6e:4a:93:22:2f:21:78:6f:a2:
38:ae:a0:9e:ce:e6:e8:3e:80:c8:3e:c1:81:a4:ab:d5:39:c1:
6f:24:0a:ca:9b:57:ae:c5:3a:31:b2:67:3c:4e:d1:2a:3f:c4:
52:8c:21:7a:48:43:5b:40:34:43:68:7d:8d:23:fe:9a:2e:2a:
25:c3:dc:86:49:34:44:f7:51:23:8c:3f:90:c5:b0:6c:19:91:
c2:08:ec:46:ff:03:18:38:67:04:2f:7a:f8:6a:c9:6e:07:32:
7f:03:4e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:57 2026 by rpki-client