
$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier: BmkhqxjhglH0P7KhYSWxazlkw5DoFD4UcpWJUzxzF/0=
Subject key identifier: 5B:64:19:E0:76:EB:16:F5:46:43:56:CB:3B:B0:FA:A0:A2:F4:0A:A9
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number: 0220
Signing time: Fri 27 Mar 2026 02:26:06 +0000
Manifest this update: Fri 27 Mar 2026 02:26:06 +0000
Manifest next update: Fri 03 Apr 2026 02:26:06 +0000
Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: NATpbjjWnw9E/vO7+zh2qOKzB/11dUtdzcWOw61HqXo=)
2: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: /BmEORI4Sm9n04Z4+KTIuZ6zRVPGTZM+9NIuoZsaL/0=)
3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: scwVpzCeBkgVHdEK5Uge9iAKaQk6Xc85PZeD5yXXw14=)
4: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: wnHWbEnfjZ63RYB0ismM9UJFoOh9ccy7t7IsH2bosjo=)
5: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: xOcV+Ws+Sc04FIxL3ePl5cuu7X8jyPVzdlvtQncOg3Y=)
6: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: DCEbqUc1yheRBTgF9eKK2YLM6+N73DDKwX1+nfluYt8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Mar 27 02:26:06 2026 GMT
Not After : Apr 3 02:26:06 2026 GMT
Subject: CN=69c5eabe-a7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:09:d4:c5:67:87:61:81:0f:cb:1e:42:9f:
6e:3c:e4:70:6d:bd:23:50:23:45:cf:a3:1e:78:c9:
30:3b:8c:dc:55:29:07:52:f4:d8:d0:e2:d7:5e:a0:
40:57:f5:62:19:d3:af:7e:70:40:de:6c:51:52:1e:
d9:ce:71:79:d2:56:77:00:eb:40:7d:2c:24:24:12:
80:7c:55:e2:2d:70:c8:7b:09:d1:3c:11:b6:15:84:
0f:1d:be:f3:97:69:b4:3c:3f:4a:86:56:08:d7:2a:
bf:82:7d:79:64:ad:93:d7:ce:6e:28:10:36:15:a2:
21:b7:9f:4d:17:2c:ea:47:0a:ef:70:c7:16:53:f4:
40:0a:8a:99:79:e9:b4:1a:95:66:b6:7d:28:88:9f:
46:e5:f9:8a:28:82:79:24:cd:4c:5e:45:59:a8:26:
6d:48:a6:e1:4e:18:aa:a7:7b:13:70:c5:7f:16:2e:
57:47:6b:50:46:37:59:66:e8:9c:fe:1b:e2:5f:0a:
66:e3:02:03:27:5f:24:bd:19:4e:f8:57:4a:7a:b8:
30:5f:23:42:aa:44:e1:9d:d9:26:4f:b0:ca:b3:53:
07:e9:13:33:ee:e7:b3:81:ee:4e:db:12:c5:f0:cb:
36:f5:06:57:d4:82:bb:8f:cb:fa:e5:b5:5e:b8:62:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:64:19:E0:76:EB:16:F5:46:43:56:CB:3B:B0:FA:A0:A2:F4:0A:A9
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:6b:4f:80:d5:ab:cf:2c:ba:bf:f1:94:a7:de:b7:36:18:03:
65:98:2b:ca:ee:0e:44:4e:5d:13:94:47:d1:ca:01:40:6f:94:
3e:7e:7f:0a:a2:24:dc:28:fb:9e:05:45:2c:58:40:c9:58:e4:
49:77:29:9d:47:5c:15:e4:fd:3f:54:d4:fd:f4:67:ad:e8:c7:
a5:e5:7d:57:5c:c8:09:94:f2:34:7c:6e:bc:4a:a8:75:7b:49:
14:8f:d4:b5:ab:95:4c:44:28:86:eb:7e:06:2b:72:34:5c:1b:
0f:9b:2b:f4:96:2c:79:88:f2:3f:1c:0a:a9:3c:b3:47:f0:ab:
11:a6:72:25:e0:bf:8c:b8:66:6e:4c:81:97:5e:7d:46:b0:ab:
df:a9:bc:0b:25:db:7b:92:62:7c:2e:00:61:af:26:51:34:39:
e8:dd:15:4c:26:2e:e5:a9:06:80:57:50:f0:23:1a:d2:6c:72:
b4:42:81:5c:e1:e7:c7:fc:e2:71:0d:90:aa:af:e8:b7:d8:6a:
79:d5:61:1b:36:54:84:b4:6a:54:61:31:dc:43:68:94:ea:5b:
a6:20:2c:ba:90:f2:b4:01:ab:9d:d8:b4:23:1b:a5:74:d0:bd:
85:a0:0c:46:80:3d:ec:e1:84:01:a6:87:da:ed:91:7a:31:30:
da:93:fb:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3
NDYxOTkzODMwHhcNMjYwMzI3MDIyNjA2WhcNMjYwNDAzMDIyNjA2WjAYMRYwFAYD
VQQDEw02OWM1ZWFiZS1hN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtL4J1MVnh2GBD8seQp9uPORwbb0jUCNFz6MeeMkwO4zcVSkHUvTY0OLXXqBA
V/ViGdOvfnBA3mxRUh7ZznF50lZ3AOtAfSwkJBKAfFXiLXDIewnRPBG2FYQPHb7z
l2m0PD9KhlYI1yq/gn15ZK2T185uKBA2FaIht59NFyzqRwrvcMcWU/RACoqZeem0
GpVmtn0oiJ9G5fmKKIJ5JM1MXkVZqCZtSKbhThiqp3sTcMV/Fi5XR2tQRjdZZuic
/hviXwpm4wIDJ18kvRlO+FdKergwXyNCqkThndkmT7DKs1MH6RMz7uezge5O2xLF
8Ms29QZX1IK7j8v65bVeuGJ8GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtkGeB2
6xb1RkNWyzuw+qCi9AqpMB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx
QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzEwRS9DOTNFMTc4QTAxQjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4
UjRMbWYyWV9QQmwwWVprNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcWtPgNWrzyy6v/GUp963NhgDZZgryu4ORE5dE5RH0coBQG+UPn5/CqIk3Cj7
ngVFLFhAyVjkSXcpnUdcFeT9P1TU/fRnrejHpeV9V1zICZTyNHxuvEqodXtJFI/U
tauVTEQohut+BityNFwbD5sr9JYseYjyPxwKqTyzR/CrEaZyJeC/jLhmbkyBl159
RrCr36m8CyXbe5JifC4AYa8mUTQ56N0VTCYu5akGgFdQ8CMa0mxytEKBXOHnx/zi
cQ2Qqq/ot9hqedVhGzZUhLRqVGEx3ENolOpbpiAsupDytAGrndi0IxuldNC9haAM
RoA97OGEAaaH2u2RejEw2pP7uA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:42 2026 by rpki-client