
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json)
Hash identifier: d+Z820+rUM+S8P0T/Z4q7HHub8o7Gx/YBtwSxl9KdjY=
Subject key identifier: 64:24:E7:96:11:77:82:83:60:E8:24:51:CC:C0:63:A7:0B:76:4E:26
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
Manifest number: 0227
Signing time: Wed 25 Mar 2026 02:13:34 +0000
Manifest this update: Wed 25 Mar 2026 02:13:33 +0000
Manifest next update: Wed 01 Apr 2026 02:13:33 +0000
Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: Ei/ayPxoINaRU5OXVkoCV22hSmerOLC62cDbNg/pW24=)
2: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: B+OeWoqQTwfm38iUF7sb5sL9h1ZJ6wXXxhu4Wl/m0EM=)
3: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: f58bvx3dukaGpN5ndoezdAfl/VXBXL0ui+Vo9iVwwM8=)
4: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: rEWhYy1UCSjrp88bbpBi55rBTDmAa96ZWrodZhYuVDE=)
5: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: UaAm3ns+UzSlENWFg3alL8LgQQM37DkVyV1vadmtNwg=)
6: 118AB342249511EFBF275B73C4F9AE02.roa (hash: NqwTwG+Agr5XJi4bwI9im7xWQxdq8IuBPwpMhYcCze0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Validity
Not Before: Mar 25 02:13:33 2026 GMT
Not After : Apr 1 02:13:33 2026 GMT
Subject: CN=69c344ce-9a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:7e:f0:7d:96:38:7e:6e:6c:97:f1:7e:d9:
c8:51:72:d9:33:50:3f:66:0b:47:c2:93:90:06:14:
50:e6:82:48:80:5c:cb:ee:b7:98:eb:e6:2c:1d:d1:
dd:f1:34:24:2e:a7:ae:62:42:1a:12:a4:d2:40:23:
e9:1e:91:b3:1e:0e:7a:6c:de:ea:8d:9f:78:05:28:
42:29:46:46:1d:b9:32:2e:c3:10:68:ae:1d:3f:c0:
ec:13:10:c8:ac:f1:09:5c:db:15:22:9d:3f:70:5d:
8d:50:b9:04:d0:8b:0c:9c:15:e8:6f:2f:ad:b0:e6:
57:66:3c:e5:45:66:ac:86:04:b7:87:d3:46:a5:20:
6e:52:de:27:09:61:e6:de:c0:d8:6e:70:70:ac:62:
58:f1:40:eb:18:e7:30:97:10:32:0f:e4:2e:2b:b7:
6b:7f:df:8e:ac:70:f5:b8:a6:db:fc:e7:04:f3:1a:
1d:71:c3:51:46:51:e9:ca:bb:ee:8f:2e:65:eb:19:
85:57:e3:be:b2:c3:a3:a6:a2:35:96:14:32:b3:07:
3f:23:84:a1:72:8d:a3:68:71:fb:f6:44:78:02:26:
4b:7c:26:16:7b:fc:93:b4:92:f0:39:07:04:81:4d:
a7:d0:25:fe:cb:9a:7e:f5:e8:d9:63:6e:60:b3:32:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:24:E7:96:11:77:82:83:60:E8:24:51:CC:C0:63:A7:0B:76:4E:26
X509v3 Authority Key Identifier:
keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:73:d3:f4:bb:38:ef:81:55:17:27:aa:f1:a3:ac:ab:31:6c:
2f:c8:4a:f8:3c:97:af:60:a7:c2:1c:12:98:94:49:a2:5e:c0:
dc:8d:29:1a:65:d4:e7:d4:22:f5:b2:57:8e:e7:7c:2b:b3:04:
25:9e:69:ea:2a:67:dd:29:80:55:5e:10:72:a0:6e:d3:b7:35:
10:87:22:72:74:e2:86:56:5d:a3:16:ba:64:f2:64:b1:76:d7:
7e:6b:e3:2b:2a:40:c5:a9:97:92:be:d8:5d:88:8a:51:6f:4f:
a7:d8:7d:05:55:87:a3:d2:db:0c:e6:08:e8:d5:9f:ed:70:2b:
c5:4c:05:05:3e:6c:47:fd:7b:51:75:44:d9:50:48:24:8b:96:
99:90:6b:5d:34:cd:38:8f:9f:2a:b7:d1:49:a5:91:19:83:35:
63:3a:66:72:3c:ab:4c:91:a3:8f:45:45:97:a1:2d:d7:25:23:
0d:a1:a3:e9:7e:47:c9:5a:c3:22:81:7c:01:af:67:0f:82:3e:
80:a6:4c:8b:f9:19:d9:f0:c2:28:36:c4:86:59:8e:2e:8b:b5:
22:2e:0d:f9:0c:5e:b8:ca:97:bf:ca:7d:b5:eb:c7:a9:52:25:
29:74:aa:83:e1:05:16:75:b3:d9:87:11:f2:81:71:ce:28:d8:
88:02:3a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:34 2026 by rpki-client