
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json)
Hash identifier: 1LixJyMWfysmkqOMBDmFDQTgtnekeVL2voqP7QZUzV8=
Subject key identifier: E9:40:66:A0:B2:03:47:8A:BD:8C:7F:B4:F4:3C:B2:D3:A4:6B:E9:79
Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
Manifest number: B9
Signing time: Sun 01 Mar 2026 08:28:05 +0000
Manifest this update: Sun 01 Mar 2026 08:28:04 +0000
Manifest next update: Sun 08 Mar 2026 08:28:04 +0000
Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: /WdsCg8JiOUS7QXJisjiu8yCBjfZx9ypp99y6aAvvmo=)
2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: fR4AypiQYoJGmxQnLx99QlOWnyJ7/nfzm8EkI/Pllqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Validity
Not Before: Mar 1 08:28:04 2026 GMT
Not After : Mar 8 08:28:04 2026 GMT
Subject: CN=69a3f894-5dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8c:0a:04:e4:6f:b3:00:63:a0:b5:e2:18:59:
b3:a0:e2:8d:ae:2d:97:83:45:28:b9:62:f5:39:e1:
a0:57:f8:e8:e3:68:96:6a:07:b0:cf:9a:52:5e:42:
29:9d:78:e5:2a:b9:d7:74:18:78:a1:14:99:64:a8:
b7:59:8d:0b:b9:48:bb:e1:ae:92:24:87:f2:04:42:
48:d9:5a:d1:6a:e1:82:cc:ec:22:4d:ed:ed:35:c7:
37:2b:92:9a:6e:51:65:50:22:e0:5e:97:b5:22:54:
6e:d5:50:20:e5:7f:a2:a1:f2:fe:5c:bb:e0:7a:a3:
72:5e:28:31:c3:45:9b:6c:00:ec:95:c0:7c:bd:6f:
c0:11:f1:5d:0a:0f:67:0a:bd:d9:e2:14:51:f7:79:
55:02:da:02:24:75:8e:ef:31:82:c1:61:dc:ee:d2:
3b:f1:6d:e9:17:e8:a9:bd:c7:55:29:47:6c:23:ba:
a3:d0:88:79:43:05:d9:c3:ed:2b:89:30:1a:96:f9:
68:b7:58:df:9d:83:a3:c1:02:c8:2b:bd:8f:56:e3:
8f:7d:36:37:3c:be:2b:cd:59:b1:66:a5:26:86:83:
a9:27:49:61:7f:cf:03:c7:bf:b0:0d:61:70:88:a7:
34:0c:9e:09:85:ae:28:9d:08:39:e6:6b:4d:37:11:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:66:A0:B2:03:47:8A:BD:8C:7F:B4:F4:3C:B2:D3:A4:6B:E9:79
X509v3 Authority Key Identifier:
keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3c:0c:ce:fe:0c:81:7a:3a:7e:7b:e3:3f:88:f8:c8:10:73:
c3:1c:74:28:f6:ba:62:16:6c:c1:29:83:ad:9c:14:12:5e:96:
79:fb:9d:c1:72:1a:0f:b2:32:ba:96:fe:72:06:3f:ce:5d:9d:
a2:e4:0c:5d:5b:8e:80:cc:32:30:55:56:21:28:36:4c:14:48:
2f:8b:5f:ce:47:5c:df:b7:cc:0c:0b:0f:0e:ce:c8:8b:f9:9d:
11:e9:fc:26:4f:85:53:13:7c:09:5b:07:75:2e:ee:d1:d5:a9:
eb:bd:5d:40:c5:7a:90:72:ab:6d:80:94:74:51:5a:c7:ab:34:
38:d3:15:b1:f3:f9:a5:fc:0f:84:0a:8e:42:96:cb:d6:d2:ab:
f7:00:da:f0:dd:1f:98:62:58:18:76:37:f9:5d:aa:31:e4:04:
08:c7:d5:6d:6d:e4:25:b0:30:bd:b6:3d:df:18:d2:0e:af:62:
f3:65:9b:98:fb:5c:35:14:53:c2:13:96:4e:6f:e0:69:00:a9:
f1:96:a6:8f:fc:38:e2:ad:ec:4d:77:6c:70:28:d6:7a:e5:ce:
5e:72:65:d3:9a:9d:a2:15:b1:37:a0:da:78:24:3c:f3:02:f1:
25:4e:21:f6:56:c8:6e:d6:c5:e3:1a:32:a4:46:b0:a5:87:29:
63:c1:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:26 2026 by rpki-client