
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json)
Hash identifier: VgYT3KndI5pimiU9v+CRJt2YCnIF8V1e6+dXqXKduL0=
Subject key identifier: E7:CF:59:11:C1:B1:3A:86:4C:A2:6B:47:65:7D:2D:4F:7D:6E:4B:1E
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
Manifest number: 03BC
Signing time: Fri 27 Mar 2026 00:25:23 +0000
Manifest this update: Fri 27 Mar 2026 00:25:22 +0000
Manifest next update: Fri 03 Apr 2026 00:25:22 +0000
Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: WR2DPTm+jC0tuPM8rHeIeOShJUd4c7mgHTxLiTsPRAk=)
2: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: gapT1kNW12nUbHr8c3uu1/58dn16AFUjAC6CWS5jWek=)
3: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: aOmB52lB3tdTkD/g4putrA9Nb5xL/svY0l4KIr3M4Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Validity
Not Before: Mar 27 00:25:22 2026 GMT
Not After : Apr 3 00:25:22 2026 GMT
Subject: CN=69c5ce72-ee3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:31:65:ea:fa:87:c9:2d:01:01:06:5b:7d:
00:29:1b:e8:a3:da:d1:f2:dc:e9:10:a8:8b:e8:18:
31:ab:5f:3d:5f:97:01:3c:0a:38:4c:38:12:d0:3e:
c2:8b:13:ab:3b:ba:16:cd:db:cd:88:52:38:52:6e:
cc:6d:ca:30:52:bb:e7:b5:a1:2f:5b:d3:31:4d:87:
fe:84:8f:7a:3a:40:46:f5:9c:b2:0c:f0:74:57:bb:
20:de:c9:01:b3:55:92:5d:04:f4:69:8e:bd:1f:23:
c5:9c:56:77:12:d5:72:e3:96:d1:a6:c8:bb:15:9b:
05:fe:71:d5:04:29:59:18:91:1e:8b:b2:d1:a5:0d:
96:76:fa:97:3f:51:10:7b:c1:a1:8a:ab:08:94:9d:
07:d2:56:4f:49:da:a1:06:ff:7c:17:64:7e:fa:5a:
3d:f0:0e:7f:45:d9:e1:c4:7f:45:66:c9:d6:cd:db:
b1:24:80:a3:2e:ca:48:5b:f8:96:67:06:19:f9:7e:
7d:3e:19:4a:5f:4b:39:db:d8:aa:de:e1:b9:e8:f4:
ce:6d:d2:8c:b5:fd:06:c6:dd:43:3a:9b:d5:66:60:
e7:db:29:00:59:56:df:7e:7c:03:ab:ef:25:98:26:
62:9a:60:65:89:0a:67:44:13:5f:d6:b8:42:4b:9e:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:59:11:C1:B1:3A:86:4C:A2:6B:47:65:7D:2D:4F:7D:6E:4B:1E
X509v3 Authority Key Identifier:
keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:71:61:90:f9:97:16:73:9a:82:39:6a:ca:c7:07:08:ae:25:
08:5b:b0:1a:16:b4:12:87:af:ad:80:1a:55:6c:5b:0c:0b:f8:
3c:89:69:62:6c:09:42:b5:e3:6d:76:f6:8a:d0:76:fd:cd:6e:
e0:72:af:c5:86:fb:a0:ff:13:bd:52:d4:25:95:26:4d:1f:09:
4f:f0:d0:c6:df:7e:cc:51:87:95:e4:b3:a4:6a:15:ee:2a:0e:
0a:7c:11:f8:7f:a7:ad:45:b1:7a:16:27:fb:42:dc:92:86:c6:
c8:57:cb:cf:2d:a5:7e:2c:17:5d:f1:39:5f:28:6f:5a:d9:e2:
98:52:93:53:ce:43:94:16:35:42:6d:a5:71:e3:2d:7f:67:76:
a1:bd:de:eb:71:a6:ee:1b:e9:00:32:9b:63:fe:f0:89:cc:7b:
32:f8:f5:74:cb:d1:c9:a8:e1:13:e5:84:3d:50:88:4d:92:14:
82:23:1a:01:9a:75:15:95:4d:cf:62:03:de:70:0c:4c:18:8a:
5f:bb:20:5e:85:58:68:9b:a9:45:05:4e:9d:2c:64:53:4c:93:
73:ef:67:04:65:f2:e5:dc:c0:a0:01:a2:9d:7e:a0:57:9d:b5:
38:38:43:fe:be:00:ad:9e:91:2c:9f:f7:28:9a:be:87:52:9a:
68:21:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:32:08 2026 by rpki-client