
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json)
Hash identifier: KK+jrHAFujtPwGMl+QfxNuW25mCCg94OsPW1r6T/EL0=
Subject key identifier: EA:D2:7B:5B:11:36:5E:4E:D1:37:C2:E3:72:F5:5F:4E:18:44:89:00
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
Manifest number: 027B
Signing time: Wed 25 Mar 2026 01:24:15 +0000
Manifest this update: Wed 25 Mar 2026 01:24:14 +0000
Manifest next update: Wed 01 Apr 2026 01:24:14 +0000
Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: COw0si7GR9olUntMdeT9u3ke2FiuA3AWlyHkuX9creM=)
2: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=)
3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=)
4: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Validity
Not Before: Mar 25 01:24:14 2026 GMT
Not After : Apr 1 01:24:14 2026 GMT
Subject: CN=69c3393f-ad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:e7:fa:73:35:56:1b:2f:88:3d:c6:36:d2:
a8:9f:eb:90:13:f9:43:ea:8b:d5:4e:bf:67:26:15:
25:a4:b8:50:51:bb:63:20:25:1e:68:43:c3:3e:ba:
cf:fc:3d:44:a5:52:d8:bd:62:63:32:eb:25:5f:30:
ad:cf:6f:b3:8c:41:86:15:4f:9e:c2:74:c9:ca:e4:
60:7f:5b:93:09:f2:23:df:1b:2a:d1:50:7f:c7:58:
83:87:83:bb:f3:bc:bb:53:8d:df:5c:e7:9a:a4:3c:
8b:d0:51:46:88:19:4a:f1:af:74:64:60:ba:4d:6d:
ea:82:8d:3e:6a:10:72:a0:e7:70:de:92:ff:45:2f:
db:2c:f5:ae:23:5d:dd:f6:07:ea:b8:cf:d6:a7:52:
1c:38:50:cc:42:63:12:64:a3:f4:e5:2c:50:2c:42:
00:3e:0d:5d:9f:52:a3:a1:72:cf:92:16:a3:0e:fa:
5c:e1:7d:10:42:bc:04:09:df:1e:dc:4a:94:a3:5c:
5e:21:2a:4c:cb:38:04:06:d8:64:f5:83:8e:98:c9:
ae:26:93:b5:4b:e8:52:c5:76:a5:cf:62:85:67:a0:
c6:82:ec:13:f6:da:5e:6a:14:27:b1:ac:14:93:cb:
05:91:7f:cd:67:41:a8:52:5b:84:0c:56:8f:d1:ae:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:7B:5B:11:36:5E:4E:D1:37:C2:E3:72:F5:5F:4E:18:44:89:00
X509v3 Authority Key Identifier:
keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:65:fa:92:ba:d4:03:88:21:62:36:13:5c:ba:9f:ed:fa:eb:
d6:b5:84:c8:17:7b:bb:bf:4c:c7:05:95:5b:14:be:77:0f:92:
5c:f3:2b:f5:da:ed:35:8b:6c:8e:7e:59:96:90:24:3d:74:a9:
a2:e4:d7:0c:77:66:88:1f:f2:e0:37:eb:8c:cb:db:b5:00:96:
62:bf:c5:67:a0:fb:f9:da:04:82:2b:c2:d6:93:ab:80:0c:d3:
af:39:bb:35:cd:b6:08:f6:8d:2c:59:77:1e:a9:9e:b7:71:9d:
9d:3b:24:67:6d:7f:be:94:01:ea:76:95:0d:1a:13:d4:13:76:
bc:43:39:7e:09:8b:88:2b:2b:64:39:bc:2a:db:47:70:95:be:
39:c6:18:b9:51:b4:91:bf:d2:3d:5f:9a:62:52:db:98:85:35:
2d:56:62:f6:c7:07:f4:d2:5d:f9:69:8d:9f:af:59:ea:7b:76:
ce:24:4a:de:f5:65:c2:e3:c5:20:07:e7:5f:ed:a2:6f:1f:35:
91:54:4e:3c:45:0e:87:96:1f:5e:14:58:a2:ec:3c:a3:20:50:
51:4d:46:00:19:5a:4d:e1:85:9d:40:e6:e2:00:f6:5f:e5:fb:
ae:e2:8e:ed:db:67:b2:7b:fb:15:86:71:1b:0f:8b:8d:43:8f:
7e:bc:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:14 2026 by rpki-client