
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json)
Hash identifier: NJmcz/tPR6QGTighkRsEFoPBtu1EIPjyhaVl9KI73mI=
Subject key identifier: 10:2E:C6:62:2A:84:CE:09:85:30:27:EF:13:0F:B8:19:AB:54:6D:E8
Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Certificate serial: 09B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
Manifest number: 09AE
Signing time: Tue 24 Mar 2026 19:43:22 +0000
Manifest this update: Tue 24 Mar 2026 19:43:22 +0000
Manifest next update: Tue 31 Mar 2026 19:43:22 +0000
Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: khNV+TphqW5DMXp5sBTonHQ03Tv9f8HhhkOgOB3cO4k=)
2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: AjxjmwQEjXn0QHDZKCLjrPCZHZ9/Qm2oT27QUruEzk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2485 (0x9b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Validity
Not Before: Mar 24 19:43:22 2026 GMT
Not After : Mar 31 19:43:22 2026 GMT
Subject: CN=69c2e95a-8621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:78:59:62:05:e4:e2:74:72:d6:3f:98:61:
6f:09:e8:34:63:29:68:f5:03:1d:36:cb:4b:49:0c:
0b:51:26:c9:3c:7f:18:45:cf:bb:43:7d:71:67:b6:
13:4f:0f:78:49:1a:ad:0a:7b:c0:25:ac:04:ef:d8:
fb:b3:8a:6b:d9:c0:d5:42:70:c5:94:ce:02:0f:ea:
15:2f:da:f3:d0:f0:7b:56:47:de:12:a8:19:ea:f2:
45:ae:14:93:97:9f:55:6d:78:8c:43:56:3c:56:27:
88:99:61:35:7f:2e:94:ef:c6:ec:06:30:d2:c4:bc:
3b:4d:d7:e4:6a:c3:f9:53:85:3f:a9:ab:1d:3c:7e:
43:68:e9:4d:fe:de:a7:df:4e:f6:8a:db:2a:60:13:
b1:4a:a5:a4:e5:39:e1:bf:19:e4:a9:25:a3:fc:3d:
78:3b:98:bb:f8:84:05:25:98:1b:a5:6a:09:7e:16:
b8:58:0a:c4:15:87:6a:67:67:18:a0:0d:ad:05:6a:
33:d0:45:1d:40:29:87:62:49:02:6d:53:d9:9f:f7:
e4:2e:d1:7e:98:87:cc:1a:c5:ce:16:88:57:ed:88:
72:6a:16:3e:95:d5:b9:be:fa:88:73:1b:e7:c1:1a:
fa:6c:d5:34:26:1e:4d:5a:7e:24:fa:68:d0:4a:c8:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:C6:62:2A:84:CE:09:85:30:27:EF:13:0F:B8:19:AB:54:6D:E8
X509v3 Authority Key Identifier:
keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:e4:9d:ff:12:29:e6:48:1a:33:e9:e5:56:25:9b:8f:9e:60:
9a:37:56:17:2d:0c:e1:b0:67:a3:2c:ac:02:ac:9f:d1:68:b0:
35:08:15:27:7f:61:7b:ee:d2:5f:cc:7d:f3:7f:c4:75:f3:d6:
45:25:1d:c9:f9:77:9b:74:b1:b0:31:66:29:60:fd:04:14:95:
54:64:67:c4:a8:70:0b:1e:d0:79:fc:b2:c0:69:67:56:8c:31:
84:f0:58:c5:58:94:de:ca:af:74:67:36:de:13:96:57:bb:2c:
0e:1c:dc:f3:73:24:fd:61:5f:1e:f3:3d:2e:e1:8f:c5:2a:b9:
63:a3:13:f5:90:d4:bc:14:d2:0f:92:37:9e:dd:18:8a:4d:06:
98:72:9d:f6:8d:ba:79:a2:ac:d3:c0:2b:e0:29:24:18:0c:e8:
6a:09:02:13:5b:3c:45:94:6e:c0:f2:ce:1e:6e:0e:b8:45:09:
a1:46:e3:c1:14:6f:80:10:29:c6:d8:ad:42:19:fd:44:68:3e:
bb:98:32:f0:3a:2e:b9:e1:e3:4d:66:bd:ca:7a:56:51:1e:ab:
b5:6f:f4:68:19:14:6f:8e:a2:04:bf:32:8d:86:96:0a:8c:36:
cc:4e:a7:9e:2b:cc:3e:f6:0d:bc:1b:ef:11:dc:96:4f:8d:f2:
02:58:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:12 2026 by rpki-client