
$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft
File: ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft (raw, json)
Hash identifier: Usz9YaTGvRHV8FX2IRaWKtWmzSGVu5qFITdGlcOMrk4=
Subject key identifier: 50:8C:C0:C9:49:A5:BA:6C:93:A5:2B:BF:0A:4D:E1:B5:4E:F3:8B:94
Authority key identifier: 67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39
Certificate issuer: /CN=A913075E/serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft
Manifest number: A1
Signing time: Wed 25 Mar 2026 06:30:31 +0000
Manifest this update: Wed 25 Mar 2026 06:30:31 +0000
Manifest next update: Wed 01 Apr 2026 06:30:31 +0000
Files and hashes: 1: ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl (hash: GxxSY0VJZ5SIChiJTyqYc5YBupy1I4q3saew4Mg1tJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl
rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913075E, serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39
Validity
Not Before: Mar 25 06:30:31 2026 GMT
Not After : Apr 1 06:30:31 2026 GMT
Subject: CN=69c38107-ef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:34:31:fe:ef:dd:38:41:25:e3:40:2f:91:
08:f4:f6:02:a0:35:cd:1e:e3:de:9b:80:50:e9:3e:
75:cc:f3:8d:41:eb:07:2f:ef:a3:b6:a8:b5:85:72:
21:10:6f:bb:f9:a3:0b:02:77:aa:db:e5:67:c1:1e:
41:d0:66:c5:96:59:73:89:0f:31:1b:1f:bb:47:1f:
94:ca:47:a1:a7:bf:ff:1d:bd:8f:5c:5c:98:60:5f:
bd:81:50:85:8a:d8:ea:df:fe:4e:86:43:ac:d3:95:
b7:0c:32:74:05:ac:4e:ed:31:04:1a:81:fc:e2:d4:
56:c0:a0:9d:f1:6c:d8:ca:10:f4:7c:0a:aa:e6:4c:
6e:0f:5b:2c:13:2e:6c:aa:00:8e:51:15:45:ad:4a:
76:58:3d:bf:e4:dc:0f:35:fb:46:8c:dc:da:0b:7a:
78:30:89:d0:6a:b4:a8:ca:e6:d4:0c:c2:e2:f0:3a:
5a:e8:cb:de:38:08:af:3e:77:bc:d1:e0:f0:7f:02:
9c:a8:ba:f1:7c:4c:ee:dd:8b:aa:a6:7d:0d:cd:d2:
b5:d3:10:e2:60:70:49:b9:2f:1a:40:e8:0d:06:5e:
bb:d8:93:85:e2:1d:fb:06:7c:79:87:7c:9d:de:1d:
ae:c3:16:b1:59:55:82:5a:a8:b6:24:87:f7:a2:e4:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:C0:C9:49:A5:BA:6C:93:A5:2B:BF:0A:4D:E1:B5:4E:F3:8B:94
X509v3 Authority Key Identifier:
keyid:67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:f1:46:9e:9e:91:da:6d:ba:bd:df:da:ea:6f:73:7c:08:98:
f8:5a:a0:2a:80:a7:32:50:ca:b0:f0:e0:26:2b:c6:32:ee:88:
84:c5:67:47:90:75:e2:26:5e:3c:94:de:d5:ee:2c:fc:27:df:
6c:1d:6c:ee:a7:85:31:b2:3d:82:a2:95:14:09:51:3c:74:49:
88:7a:f1:c5:12:e4:81:ac:c8:8a:f5:b2:e5:4e:93:f8:71:03:
d8:d0:1c:ea:ac:d9:24:87:1a:82:87:56:ce:1b:71:8c:ab:9b:
14:55:8d:49:5e:1a:e8:8a:c0:40:8c:c5:29:fd:3f:ec:0d:d1:
e0:06:8d:84:a5:3d:ae:a6:06:8a:b8:5c:7d:1e:d9:7d:5a:3b:
0d:8b:a3:32:1b:13:23:94:dd:50:5f:a5:14:b5:72:36:62:cb:
1e:d1:17:1d:96:e4:d0:fa:ba:84:08:c5:95:f9:98:b7:e2:a9:
bc:70:9b:2f:4f:02:5b:de:b5:ba:a8:38:a5:09:55:77:8e:9f:
f3:b6:11:39:73:a6:c9:95:29:98:47:81:f3:83:e3:4b:d5:77:
a9:0b:41:e6:d1:ca:61:5f:4a:92:46:d8:3e:e8:b4:7e:d1:10:
8d:82:39:28:04:38:c4:cc:db:8b:9e:2a:47:91:27:db:a5:56:
b0:6d:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:19 2026 by rpki-client