
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json)
Hash identifier: yXORQjfkI8ik2KGncW5yBEchvId76db1s5IuPPhbpPI=
Subject key identifier: 16:27:6C:9B:F6:97:15:15:54:2A:66:C3:28:A1:D7:F8:28:37:76:73
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
Manifest number: 01F3
Signing time: Wed 25 Mar 2026 02:36:42 +0000
Manifest this update: Wed 25 Mar 2026 02:36:41 +0000
Manifest next update: Wed 01 Apr 2026 02:36:41 +0000
Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: v6QTlPHPrPeghva2hsy7CPGz1bnGYFgmE3AbToO9kwk=)
2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: b/Saiu1AabxrsPj47AXLm3MK1rkDbyAOEnOPk0nFsqA=)
3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: IBvzA5r6hVshNungWhQmp5lB9eEIYNrjugpKnBqI56I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Validity
Not Before: Mar 25 02:36:41 2026 GMT
Not After : Apr 1 02:36:41 2026 GMT
Subject: CN=69c34a3a-9f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:a0:c3:c4:64:c8:d0:70:77:f8:3a:ae:22:
a8:8b:e7:e0:af:3c:f6:c3:b4:bd:61:01:4a:a0:4d:
31:f5:f9:87:c8:2b:46:5a:a3:b9:27:b5:c6:4b:f2:
af:39:28:fb:7f:3b:f7:1b:5c:f7:e1:2b:0e:1c:9b:
fd:0a:b1:61:04:a4:94:2d:e0:57:4c:9e:1d:7a:b4:
22:78:f3:61:32:7d:f2:93:02:77:22:f2:35:cf:3f:
ca:80:fc:04:5e:cd:55:47:a6:9b:90:c4:1a:55:f3:
af:5a:f4:cd:f8:cc:86:66:93:60:1b:b7:d7:d4:82:
9a:f8:41:f1:a9:4c:a6:c9:4c:75:c9:ba:75:04:1c:
87:55:c3:c3:3c:0b:13:ee:e4:37:32:75:95:74:e1:
64:e1:04:f5:3f:b0:66:5b:43:52:e7:d6:30:fe:43:
57:0f:97:43:9b:ef:a5:1a:74:0b:19:f3:ae:a0:8d:
6e:0c:5c:61:4f:30:76:8c:1d:85:54:af:eb:47:99:
25:48:76:23:ae:3b:6e:4e:db:de:3e:77:b2:21:16:
e4:a8:a8:ce:cd:3e:eb:e7:33:be:b5:27:c9:0d:46:
a0:df:5d:5a:68:45:e3:95:be:6e:ee:0f:2b:95:83:
a3:58:b8:14:33:2b:64:bf:24:bc:4c:3b:7f:9d:e0:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:27:6C:9B:F6:97:15:15:54:2A:66:C3:28:A1:D7:F8:28:37:76:73
X509v3 Authority Key Identifier:
keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ba:66:7d:30:32:98:61:78:95:e0:f6:16:1c:90:9a:ec:0e:
3d:b9:dd:cc:4a:61:43:a9:69:17:e7:0d:5c:a6:f9:b9:09:91:
7e:3d:a8:46:3d:f8:74:79:4c:7a:70:98:f8:0f:d7:72:6e:ab:
61:cb:7a:bd:09:1e:cc:fc:c8:95:45:5c:48:6a:3e:8e:6a:26:
50:3a:28:bc:18:65:cc:bb:b6:fd:91:80:bd:d7:d5:f8:86:df:
ba:b2:cd:ca:b5:fe:a0:9e:2f:59:9b:62:2c:55:56:e5:c5:b9:
e7:5d:0f:01:ca:bf:b0:be:28:bf:05:c7:fc:bd:6e:6a:af:27:
81:c1:2a:bb:09:38:4f:86:42:a9:f4:53:b4:03:e2:b6:53:6f:
b6:8d:2c:42:2c:d0:88:24:32:f5:02:4c:2f:71:76:c4:92:38:
5b:9c:c2:6b:23:8c:d5:e0:15:a1:30:76:15:03:99:f0:2d:cf:
69:97:b0:d8:ed:c6:54:c5:90:07:20:32:95:99:36:c7:de:9a:
3e:29:25:22:1e:34:5b:a7:ff:80:97:d7:57:21:e6:88:04:bf:
34:8b:b3:ad:52:04:94:3d:7d:ca:34:90:95:a7:98:bc:f0:24:
54:f3:3e:b1:e6:41:b8:66:eb:cb:d8:c1:1b:37:fc:c6:86:76:
ff:3d:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:47 2026 by rpki-client