
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
File: zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json)
Hash identifier: CrKVBWBY5fTfhQZzdAOi7mMdPmONIaciKZcY/5YyQ/w=
Subject key identifier: 20:99:9E:21:A4:D0:DE:A8:43:90:3A:DF:EF:56:C1:81:E4:3A:07:E4
Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27
Certificate issuer: /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
Manifest number: 0270
Signing time: Sun 01 Mar 2026 02:33:57 +0000
Manifest this update: Sun 01 Mar 2026 02:33:56 +0000
Manifest next update: Sun 08 Mar 2026 02:33:56 +0000
Files and hashes: 1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: dZp7cgv/qk7ydipEtLFGtezOUMbxActi6zgql1dn7Jk=)
2: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: QHHg4+qQnoQZJpeDcWDHGPr4E/pmMtgbAJW7ideA6ZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl
rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F893, serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127
Validity
Not Before: Mar 1 02:33:56 2026 GMT
Not After : Mar 8 02:33:56 2026 GMT
Subject: CN=69a3a595-860e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:85:c0:a8:7a:75:09:15:1c:39:70:c7:6b:
95:68:63:2e:eb:3f:ad:19:72:4c:8c:34:06:5f:15:
31:f0:c4:da:62:2a:9c:f6:14:e8:d4:be:19:c3:77:
6f:47:6c:cd:73:bc:64:b4:25:e8:48:82:2f:4b:21:
8e:a3:23:49:d9:58:c1:2c:1d:99:b7:fd:6d:d8:d4:
49:74:d3:60:f0:98:93:88:85:5c:35:16:c7:7c:14:
ca:e8:c9:bd:43:b2:dc:00:8e:dc:5f:28:61:6b:d8:
e3:e8:a2:f5:45:27:77:ec:2e:96:a2:3f:62:3b:37:
4c:11:43:00:3d:7c:d3:0f:6a:25:6b:8e:af:8c:ee:
fc:c5:99:15:a8:38:82:d1:ed:89:a0:26:4c:66:ba:
2f:70:30:97:8f:03:3d:c8:7a:3e:b6:5a:ae:4a:3b:
fb:19:aa:44:7a:95:e5:21:06:52:f4:94:8c:fb:05:
92:a4:ed:1f:70:98:fe:85:3d:7f:08:ad:3f:a2:e6:
3a:3a:36:dc:6b:cf:c9:55:3c:0a:a1:bf:80:fc:dd:
0f:2c:19:83:5d:4a:f9:af:01:2b:b5:42:a8:1b:9f:
0d:ec:64:e6:c8:fa:51:0f:41:dd:60:2c:83:78:0c:
27:7f:94:45:b2:92:0d:f4:d7:0c:cd:5a:26:47:9f:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:99:9E:21:A4:D0:DE:A8:43:90:3A:DF:EF:56:C1:81:E4:3A:07:E4
X509v3 Authority Key Identifier:
keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0d:95:f3:18:8d:d5:5e:a6:3a:7e:7d:c7:92:e4:22:7b:d8:
0b:2f:ab:b3:c4:2b:ee:bc:d7:a6:41:5e:28:5f:ea:2b:f1:86:
66:74:24:02:7e:8f:10:10:20:33:27:b6:ef:19:68:d4:f9:db:
70:64:9b:3d:af:f4:a6:41:16:6a:2b:c5:4a:01:d1:f1:f5:fc:
62:47:38:41:09:37:96:99:58:54:49:9e:36:e0:16:c6:e6:7c:
9a:31:6f:08:a9:ab:4d:7b:a1:df:19:9b:02:ef:f3:d6:8f:36:
63:38:37:85:6a:20:8a:c3:ff:0b:e6:a5:84:99:a8:b4:1d:6e:
8d:56:66:a1:21:c8:1d:bd:b7:03:dc:30:f8:4a:23:d5:fa:59:
d5:c4:d8:4d:ee:ac:69:37:bb:e2:a2:01:1e:d9:bf:84:aa:ab:
4d:fb:22:11:a9:3a:59:68:49:49:56:27:dc:4d:5b:85:10:cf:
13:5b:f9:3e:3f:02:28:59:29:27:87:13:a3:9e:de:9a:9f:ed:
7a:15:2d:f0:59:46:97:b3:a0:0c:99:f4:00:0a:df:37:f5:1e:
bc:f2:4b:4f:05:57:a5:a5:4c:75:80:3a:8a:46:16:0a:47:34:
c7:ff:c7:fb:8e:fc:dd:23:26:79:c0:ac:70:4d:83:f0:32:46:
9c:b5:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:52 2026 by rpki-client