
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
File: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft (raw, json)
Hash identifier: 1E4gUaZJWP+Gqky+8ujkj/YQ7dIsIdu+imaUMx9a0oU=
Subject key identifier: 45:2F:DB:F1:A0:9E:0C:90:E8:B3:89:28:45:32:95:4B:70:F4:56:92
Authority key identifier: 66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD
Certificate issuer: /CN=A914DA9E/serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
Manifest number: 0110
Signing time: Thu 01 Oct 2026 07:13:36 +0000
Manifest this update: Thu 01 Oct 2026 07:13:36 +0000
Manifest next update: Thu 08 Oct 2026 07:13:36 +0000
Files and hashes: 1: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl (hash: ynxsfMOWObtHq0Xq/pCjBKaXFXKanPPW4RxbGU6+cJ0=)
2: 7E10232C1F3411F0BFBD616EC4F9AE02.roa (hash: nKzM70QPhUVpp0u2YyPA0zkA9ybuWJok66S7cxRVoIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl
rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 07:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA9E, serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
Validity
Not Before: Oct 1 07:13:36 2026 GMT
Not After : Oct 8 07:13:36 2026 GMT
Subject: CN=6abe0820-e061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:38:89:ac:16:99:e7:2d:52:c9:df:de:c0:
51:df:cb:9a:d0:e6:e3:81:0d:cf:73:e3:e6:ee:22:
06:97:78:b6:eb:24:65:66:77:19:e8:40:8e:3d:54:
dd:d5:6f:38:37:44:53:e1:93:09:6b:83:4f:ac:08:
2f:53:dc:10:4c:c3:53:89:36:6a:a1:66:84:19:66:
e6:80:5e:12:3b:3e:07:f4:8d:5d:b2:ea:b9:7b:78:
40:38:90:03:c1:ea:34:d9:50:05:2e:33:08:ac:2d:
06:f0:d3:5d:e1:db:70:45:50:55:52:8c:da:a9:9d:
3c:cf:65:77:9e:b1:5f:c4:75:a4:be:e8:e5:0d:07:
c4:73:02:23:39:70:29:56:f7:45:ee:be:13:d6:1a:
f8:6b:cb:c7:20:c8:bd:54:a4:83:d8:bc:a7:ee:5d:
d8:71:d2:65:09:76:37:03:5f:a7:6f:fa:34:36:26:
02:ff:6c:c1:6e:e4:8e:a6:ce:dd:6b:3b:8b:5a:2d:
7f:4d:96:d0:4b:5f:b3:1a:bf:49:9a:b5:91:97:43:
06:86:d6:b2:11:d8:89:9d:32:61:71:0d:55:8a:85:
ca:49:3c:32:22:5e:7f:dd:e1:4f:03:6c:23:08:77:
2d:19:e0:0c:48:4d:9b:77:36:d0:b5:f4:93:45:68:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2F:DB:F1:A0:9E:0C:90:E8:B3:89:28:45:32:95:4B:70:F4:56:92
X509v3 Authority Key Identifier:
keyid:66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:9f:45:0a:b4:67:08:ad:ea:ca:ea:93:ef:dc:b7:af:37:c7:
cc:17:7a:92:c0:5c:6f:6d:59:a0:8f:5a:f3:a5:78:6c:39:4c:
dd:33:e7:f9:b8:60:33:c4:db:79:e8:57:87:f4:28:6c:88:65:
b9:5a:0b:d6:ce:78:98:d5:95:20:c9:1d:05:9c:30:8b:a2:9c:
ae:a1:2c:9d:de:ac:37:32:bd:48:33:0f:36:ed:39:2c:9e:9f:
53:08:e0:f7:d7:60:dc:69:4a:32:c3:29:44:08:b1:e0:3b:fb:
a1:af:13:ed:ae:f1:50:06:37:d4:0b:f2:a1:5b:b6:01:69:fe:
21:5f:e0:a4:b7:b9:32:1d:80:98:45:f9:3e:32:f4:10:ba:72:
a6:59:68:ad:88:33:41:d0:b3:59:c8:fe:64:d5:e7:56:70:07:
02:a0:e8:bd:25:aa:aa:59:a4:97:a8:4b:ab:fb:dd:6c:62:74:
4f:7a:bc:40:8a:9e:66:42:a6:bb:ea:74:39:1f:f6:80:75:68:
e1:21:da:79:6a:38:47:19:70:1e:37:3a:85:83:a5:53:ae:c9:
12:52:12:03:72:3e:ae:4f:0e:69:8d:87:f3:18:df:72:aa:84:
31:6a:3b:f7:46:01:5a:79:12:39:4c:d5:c3:6b:c3:81:6a:22:
76:fb:8d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 07:40:18 2026 by rpki-client