
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json)
Hash identifier: uCusom2qFFh5IE7R9CenUdbaoNV6mqxJ4qCIjIzIy50=
Subject key identifier: A0:90:34:05:C6:06:12:90:2C:82:73:67:92:40:A4:44:5D:D1:AD:42
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial: 02A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
Manifest number: 0294
Signing time: Wed 13 May 2026 01:49:42 +0000
Manifest this update: Wed 13 May 2026 01:49:42 +0000
Manifest next update: Wed 20 May 2026 01:49:42 +0000
Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: FD36NepowkUgukvN1QL7d2uLmC+s1JJfs4/CtUqg+AQ=)
2: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=)
3: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=)
4: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681 (0x2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Validity
Not Before: May 13 01:49:42 2026 GMT
Not After : May 20 01:49:42 2026 GMT
Subject: CN=6a03d8b6-1c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:01:0e:0e:79:5e:27:c3:b7:69:32:6d:1d:
61:7b:7d:65:12:02:dd:f8:ed:86:f4:51:f5:47:a9:
34:75:b7:5c:95:8f:7f:7e:85:7e:79:dd:4c:a0:08:
4e:88:f2:90:d0:43:a8:97:c4:f3:28:41:bf:8a:98:
3b:bb:e2:ad:cf:92:28:b9:78:0f:ef:2d:16:e4:20:
3e:96:4f:52:fb:d6:f9:4b:9e:8c:84:64:67:f1:8a:
33:51:63:30:7a:03:f9:c1:b6:4d:70:c4:04:4f:48:
53:ce:67:a5:67:22:0c:25:32:27:e5:12:8c:f6:0a:
69:71:f7:96:22:87:cc:f4:31:c2:d8:a6:b7:33:13:
86:f9:d1:0a:d1:21:ef:f4:39:b2:00:ce:ce:e7:40:
e4:3f:b1:2c:09:e1:98:15:29:42:1e:a9:d3:c7:ee:
7f:04:07:9e:96:e7:dd:6a:70:26:ca:a4:62:50:f4:
a3:9e:8e:df:fd:1a:78:4a:e0:2e:89:77:1e:00:1b:
39:53:ec:f1:e1:23:05:48:e5:d9:ca:81:d6:23:88:
0f:cd:a8:c8:70:fa:39:6e:84:7d:f7:2b:e4:c5:e6:
55:2d:2c:6e:30:e6:64:85:4a:75:72:dc:42:28:fb:
9e:7b:01:73:fb:16:4b:95:82:b8:d8:dc:83:7b:fb:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:34:05:C6:06:12:90:2C:82:73:67:92:40:A4:44:5D:D1:AD:42
X509v3 Authority Key Identifier:
keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:d4:f1:37:73:04:95:d9:42:9d:0b:b2:c1:05:6b:f9:cc:88:
a8:50:94:de:7d:d7:a2:23:1d:0b:58:6a:8a:25:b7:1c:2c:00:
01:a1:89:63:1d:a7:59:a1:34:ff:cb:8c:02:5d:93:a4:c2:bc:
ec:3d:a8:18:69:1f:1c:21:53:d6:68:cc:39:50:e7:4b:c6:e7:
ca:92:4f:c2:46:f4:90:f4:16:96:b8:05:e1:44:37:de:c2:7e:
0b:2f:71:3b:a1:ac:89:f6:46:27:46:bf:9a:b9:7c:46:f2:a8:
9b:c8:62:86:ae:7c:c4:3c:cb:ee:ef:28:7f:2d:bd:35:36:34:
cc:82:8b:4a:2f:9d:cb:35:f3:a1:a6:97:38:8c:41:73:be:6c:
04:ad:75:55:e3:c5:56:f5:8a:df:ea:ad:a0:a2:5a:fb:ce:ec:
c9:c8:ce:b9:89:f7:c5:3d:66:b2:b4:36:f3:69:bc:a3:ea:99:
60:18:6c:a2:68:dd:ca:2a:cb:1c:cf:00:73:35:1c:5b:2f:68:
ae:9f:b1:99:0e:c5:43:6e:68:8a:01:01:dc:cc:48:9b:40:82:
1c:e7:11:79:9a:a1:cc:ee:35:c2:6c:99:4d:55:75:b7:bd:b1:
0e:a7:2a:8a:70:60:18:6f:42:ad:05:06:de:d2:5b:25:1c:16:
6f:b1:a1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:21 2026 by rpki-client