
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
File: Z0fEVgFDfWEgWyv7QGfO0i6358E.mft (raw, json)
Hash identifier: FuRJQDtF6el3SkfQ+N1DNNLOh79ViNbue/PkzeWwhxY=
Subject key identifier: 64:41:B7:29:77:0F:B6:1E:6F:E3:7C:F9:6C:B2:F4:D3:3A:4E:01:94
Authority key identifier: 67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
Certificate issuer: /CN=A914AA99/serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
Manifest number: 45
Signing time: Wed 25 Mar 2026 07:32:15 +0000
Manifest this update: Wed 25 Mar 2026 07:32:15 +0000
Manifest next update: Wed 01 Apr 2026 07:32:15 +0000
Files and hashes: 1: Z0fEVgFDfWEgWyv7QGfO0i6358E.crl (hash: lhggjRMBFrpmwWLNCIFJF7V1dHJXs2j8EOipyaKRPHQ=)
2: 734D9ACCC2D711F09CE49A22C4F9AE02.roa (hash: DigoBL3jZPsvK4vfvJdvl7CVTthXEYN0He/kSRgVttQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AA99, serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Validity
Not Before: Mar 25 07:32:15 2026 GMT
Not After : Apr 1 07:32:15 2026 GMT
Subject: CN=69c38f7f-4a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:ba:e4:a6:99:2e:14:ee:ef:01:27:ce:d2:
fd:d4:9e:7a:b6:e0:f5:0c:ad:05:f6:3f:c4:89:7a:
00:71:34:91:41:fc:55:f1:ef:a9:21:84:a5:66:75:
b7:bc:1b:ce:98:5c:9e:4f:37:56:5e:13:ce:5a:77:
f7:3a:dd:d9:30:da:9a:e8:46:3b:36:7c:2c:e1:c9:
34:62:f6:a1:d2:25:2c:c0:57:6b:17:7d:0a:f1:d3:
ed:17:d4:2d:ea:35:0b:b2:1d:18:d5:29:89:b1:b6:
5e:37:d4:a8:bb:ae:73:2d:11:14:39:30:af:ed:e3:
99:0e:9d:0d:65:8b:95:9e:74:99:83:20:79:98:0f:
2b:70:11:5c:fd:2d:a1:85:cf:78:48:cd:da:9f:81:
b4:7f:90:cb:76:60:8a:5c:b9:f4:e9:fe:26:49:e2:
6c:77:77:33:f4:94:8b:51:0f:e2:dd:8e:9e:67:17:
47:fd:ba:8a:4c:00:47:8d:f2:99:c8:ba:31:a3:9f:
8e:da:af:47:3b:d5:54:2f:ed:8e:f2:f0:23:2c:2f:
53:51:47:53:50:46:36:8a:a0:28:db:d8:7e:4b:3f:
78:e1:a1:76:17:52:c3:9e:5e:ae:4c:69:3f:15:54:
a0:b9:de:eb:3f:52:19:93:82:f1:64:27:51:76:22:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:41:B7:29:77:0F:B6:1E:6F:E3:7C:F9:6C:B2:F4:D3:3A:4E:01:94
X509v3 Authority Key Identifier:
keyid:67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:c7:b8:c6:25:48:3c:22:c3:aa:01:86:f6:8f:62:7a:33:26:
eb:10:56:57:9d:c6:78:bc:f8:b9:b0:da:f0:d5:92:04:7f:06:
e4:08:72:ba:f6:83:e6:a6:7d:71:cb:31:a4:f6:4f:61:90:d6:
92:8a:80:b4:11:a3:6c:bf:c9:c9:6d:64:f8:bb:a7:89:60:2e:
02:fa:c2:c7:31:8b:51:21:d3:90:a6:dc:3e:36:ce:f2:e0:a7:
00:23:c3:5d:4e:cf:f5:24:21:04:f2:dc:27:5b:17:5b:cd:00:
f1:91:27:ed:a8:a6:77:05:41:00:25:b2:a0:5f:e1:2d:38:03:
76:75:63:af:d1:4e:29:0c:6d:74:93:78:4d:d2:bb:58:9a:df:
c5:80:8e:3d:f1:e7:d6:6e:0c:05:3b:15:bf:7e:58:5b:4b:85:
e2:85:b3:ed:73:b1:9f:97:db:69:37:33:e1:cf:fe:6f:11:15:
43:b3:0e:d6:76:d0:b7:e6:39:c8:47:cf:01:56:05:20:3b:d0:
77:79:7a:d0:99:9d:b9:ef:55:b4:4e:40:a3:00:51:34:26:7f:
af:fe:25:19:82:73:5d:7b:ea:ed:0c:42:c7:3f:ae:bb:cc:6c:
ee:85:c2:7d:c4:35:ee:e1:1b:c0:00:1d:1f:86:29:33:6f:93:
9e:fc:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:09 2026 by rpki-client