
$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json)
Hash identifier: zG2YHna4Sk85kd/JlyUNt1ktqhgrPyOMiCuH3puwduk=
Subject key identifier: C9:3E:01:2E:CE:B0:20:AB:0B:94:D3:F3:D6:B9:B2:DE:BF:A1:E8:50
Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Certificate serial: 163E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
Manifest number: 163E
Signing time: Tue 24 Mar 2026 16:37:23 +0000
Manifest this update: Tue 24 Mar 2026 16:37:23 +0000
Manifest next update: Tue 31 Mar 2026 16:37:23 +0000
Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: T7n9dMnspAmL6pppKwc4jn2Cs5KwAroPR6GVpbf1R9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl
rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5694 (0x163e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Validity
Not Before: Mar 24 16:37:23 2026 GMT
Not After : Mar 31 16:37:23 2026 GMT
Subject: CN=69c2bdc3-d929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0e:df:1e:ea:2c:a3:9f:d3:30:fd:76:73:18:
9f:78:c7:57:dd:87:0f:d6:bf:5d:7d:9d:8b:a0:12:
21:f0:46:f5:54:30:c8:2a:95:6c:92:db:c2:b6:5d:
0c:7b:09:9a:cb:d2:35:21:63:9b:39:cc:df:07:51:
5b:3e:f5:ce:58:13:1f:71:6d:a3:89:a0:8b:b8:ef:
d3:ee:44:22:cf:c7:15:b4:f4:6b:6e:ab:99:2c:19:
8f:e3:91:58:49:90:d9:14:35:34:f8:1d:8a:55:e0:
a7:5b:80:e5:ab:4f:29:3d:fc:5b:31:cc:62:dc:1b:
d1:44:77:35:68:5a:26:6d:28:a4:9a:4c:84:9f:1a:
b5:dd:62:76:b2:a1:11:5b:35:28:f9:f0:a6:bc:b7:
ea:dd:1b:44:49:b6:4e:7c:c2:43:c7:65:e1:c8:52:
41:e7:8e:9f:38:ac:44:59:77:fc:21:6b:35:17:a2:
1e:4a:a6:67:c1:0e:56:78:7d:04:dc:bd:17:0b:38:
6f:6a:1a:08:bb:56:91:ee:ac:2c:d9:2f:2b:fa:21:
00:ac:27:4e:17:23:d8:06:4d:9a:9c:29:b6:8e:42:
36:10:51:6e:74:6d:77:f0:a2:75:d9:90:9e:d5:9e:
1a:12:c2:f6:50:2c:e6:e7:5a:b4:4b:4f:0b:bc:3f:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3E:01:2E:CE:B0:20:AB:0B:94:D3:F3:D6:B9:B2:DE:BF:A1:E8:50
X509v3 Authority Key Identifier:
keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:37:2f:fc:67:a5:4f:01:54:a9:19:e0:c1:08:b5:3d:8c:8a:
98:76:37:9e:52:3a:4e:82:d0:16:fc:b9:a1:e1:ed:ae:20:63:
a0:a0:a2:fa:13:cc:82:1b:fd:b0:4b:ea:5f:6f:3a:5b:97:c1:
aa:c0:a1:b0:4c:ac:12:c2:f7:e1:9e:e2:42:41:0c:5a:59:69:
58:f4:be:e4:85:30:56:40:d4:c6:c9:b0:d9:be:0f:f4:3c:f8:
82:fd:89:9a:aa:46:de:e3:f8:49:0d:3e:f3:3f:48:4d:96:95:
35:da:e5:6c:89:50:d9:a3:dc:de:d9:de:20:42:da:89:a9:b7:
c3:63:d2:7d:29:d0:fd:ff:03:c5:ad:1e:81:08:b9:d7:62:fb:
89:a1:5e:da:28:83:c4:3a:96:6c:5d:64:53:30:97:b8:bb:44:
06:dc:a0:c5:d3:f7:65:c0:a9:3c:3a:e7:50:5f:16:70:d0:0c:
5e:e8:36:ec:05:f2:14:9c:70:ec:95:55:fc:cd:16:b2:f7:9d:
28:8c:d6:5b:0f:ba:75:5c:a1:3d:1a:3b:59:ea:87:db:2b:48:
69:69:c7:87:4b:3e:3b:78:11:87:83:e8:6e:1a:8a:ab:ea:e1:
8b:3f:07:83:2f:40:97:87:72:77:eb:2e:77:8f:24:6b:28:8c:
97:ba:fd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:12 2026 by rpki-client