
$ rpki-client -vvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
File: ZWJxEurnsskvifeninGipPqV9T0.mft (raw, json)
Hash identifier: bEjF+LotWyK3VYtWo9UH2LOHJ+MfoKnRmGpvF5+K9YI=
Subject key identifier: 93:DD:D1:AD:C7:44:7D:D9:6B:6B:2A:66:CF:20:37:66:9F:F0:B8:A2
Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Certificate issuer: /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
Manifest number: 0124
Signing time: Wed 25 Mar 2026 05:08:55 +0000
Manifest this update: Wed 25 Mar 2026 05:08:54 +0000
Manifest next update: Wed 01 Apr 2026 05:08:54 +0000
Files and hashes: 1: ZWJxEurnsskvifeninGipPqV9T0.crl (hash: jgywSxlMmN2IDIdymH2LFdR5/src4Sbkh2CIXJP598c=)
2: 74D48D868CED11EF820CF762C4F9AE02.roa (hash: Lei85g1gzQpDPpvgkfskCv8Gyrvp0ElU5LNUTKu3ta4=)
3: 495B172A8B5711EFBFF2106FC4F9AE02.roa (hash: D2waJZ9ZKnglnqwWXE1Wf6oMX3DDNI794wB3GBkWCik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913860A, serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Validity
Not Before: Mar 25 05:08:54 2026 GMT
Not After : Apr 1 05:08:54 2026 GMT
Subject: CN=69c36de7-7c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:69:cd:49:3f:d7:8a:32:8e:7f:ac:be:8b:
1c:46:09:29:f6:ad:5b:ea:21:3e:ca:84:a3:fa:05:
d4:a7:29:19:d2:50:89:b6:cb:81:92:23:fc:a5:be:
42:7e:bf:01:ae:92:0a:e4:65:29:b5:6c:2b:1b:60:
66:8c:a7:25:93:1b:44:c9:ae:5d:32:96:e0:53:61:
bd:bc:6f:5e:f4:b5:b8:86:02:98:a7:08:e4:5b:67:
fc:d1:45:3c:0d:35:43:40:cc:79:a8:89:0e:64:18:
7c:fa:b2:67:84:bb:cb:ff:b6:d9:e4:8f:58:9a:8e:
6d:b9:df:30:21:fe:44:bf:fa:7c:08:8a:a1:e6:4a:
d2:06:81:fa:4a:ce:d9:8e:3b:8f:58:ca:b0:2e:14:
89:50:47:99:86:5a:2d:0f:2a:9d:26:84:a9:43:66:
cb:69:a1:5f:55:83:97:52:6f:b7:d5:b1:44:14:0d:
87:2a:f9:1c:bd:f4:8d:70:e9:82:9e:f6:09:24:10:
c3:ca:b9:d3:df:61:4d:c0:95:17:3d:56:a9:c7:98:
3a:62:91:b9:22:93:cc:88:51:c7:63:91:6f:97:3f:
64:c0:09:d6:1f:20:89:15:81:8d:f3:50:67:b0:83:
af:74:73:3e:4d:3c:12:8a:ae:16:fa:26:49:0c:d6:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DD:D1:AD:C7:44:7D:D9:6B:6B:2A:66:CF:20:37:66:9F:F0:B8:A2
X509v3 Authority Key Identifier:
keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bb:a0:ef:60:06:eb:13:6b:1a:7f:12:d2:ad:12:5b:73:87:
32:07:4d:65:39:b3:4f:97:1a:37:85:2c:33:3c:a8:27:03:c0:
ab:10:92:0b:e4:0b:c2:09:ed:98:23:45:2d:99:f1:9a:e7:78:
05:0c:75:be:87:b1:b0:b5:e5:e9:cb:69:2a:da:40:96:eb:63:
d1:39:bc:0d:48:6b:b0:be:d6:00:1a:e3:c4:b7:42:97:02:68:
7d:44:53:89:04:4c:00:64:2c:1a:01:54:84:bb:a5:35:9f:92:
d8:9d:10:0d:73:ac:0d:23:22:c9:6a:c5:6f:99:49:fd:03:95:
ac:83:28:f7:a8:32:d2:dd:28:a3:15:0d:0c:52:e0:8d:ca:bd:
19:49:58:50:c2:bd:21:7a:37:3d:0b:d5:92:84:31:2d:c7:e5:
10:9a:6c:76:65:b8:f6:82:fb:9d:fa:ba:2a:91:f2:ec:48:c8:
1b:7c:77:e7:d2:31:ec:aa:c9:66:76:ac:00:6a:74:b6:9d:72:
3a:57:1f:e4:9c:f9:5e:af:98:44:44:4c:01:c5:55:eb:1d:4f:
be:b8:f1:94:a5:21:7d:c0:d1:35:88:4f:2e:55:b6:24:1a:43:
e6:a2:7d:b6:d0:6f:16:46:fe:bd:3f:df:7d:de:bb:b2:ff:92:
47:1b:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:46 2026 by rpki-client