
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json)
Hash identifier: uSnQaQOMc9OZr6GhuEwvv+EBx4Au8gim1beVplQ8gEo=
Subject key identifier: 6D:52:60:BD:11:A4:18:CD:69:82:86:72:EE:76:EC:BD:6F:32:81:E3
Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
Manifest number: 0132
Signing time: Wed 25 Mar 2026 04:57:17 +0000
Manifest this update: Wed 25 Mar 2026 04:57:16 +0000
Manifest next update: Wed 01 Apr 2026 04:57:16 +0000
Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: qJywg7ajm4tjwVo2nmXURHjfVsQ++sJnfbPlR652teI=)
2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: OH2hF65EWIAHva3+wgIPXbWw2v0Q8Ee2C52axh8phMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Validity
Not Before: Mar 25 04:57:16 2026 GMT
Not After : Apr 1 04:57:16 2026 GMT
Subject: CN=69c36b2d-7496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:29:c5:38:9e:f0:27:41:be:5d:f1:a4:c6:
1e:81:57:f3:82:9c:b3:ea:7f:ea:fb:32:9a:08:7e:
ce:92:21:d5:b3:74:42:f3:06:ca:5d:67:5f:3b:f5:
03:8b:d5:d4:43:b4:1c:17:b4:c2:e2:de:50:f1:8b:
64:83:f1:b2:81:24:16:62:4d:0e:f8:9f:56:99:39:
43:62:06:fa:68:fb:17:3b:98:99:f8:ba:a7:e9:04:
19:ad:db:e1:b7:56:ff:9c:12:b8:e1:56:65:6a:97:
cc:fa:ea:32:a4:b1:36:99:81:59:d0:56:1b:bb:22:
c1:eb:a1:78:37:e6:a7:4b:aa:5f:11:64:3d:5c:c7:
b5:fe:e9:6b:52:33:61:e3:68:bb:44:f7:1e:86:0c:
a3:74:9e:ac:47:7e:b9:ff:ea:a8:ed:2f:f6:e0:41:
1b:b0:ac:96:ef:e8:ea:ae:68:a6:6e:4e:f7:5a:51:
85:b9:4e:c2:a2:59:3d:09:4c:e5:7c:43:cb:a2:e9:
39:19:eb:d4:f3:2d:93:41:75:2c:fc:54:61:52:2d:
2b:29:9d:70:13:b3:77:fe:73:2b:23:4c:2a:42:b0:
3b:21:a4:b4:3d:97:e0:e1:a1:7d:6e:23:91:2e:76:
bf:56:a0:c7:f6:95:14:78:f8:ae:09:39:80:a8:1f:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:52:60:BD:11:A4:18:CD:69:82:86:72:EE:76:EC:BD:6F:32:81:E3
X509v3 Authority Key Identifier:
keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:e2:3a:4c:09:24:1d:a1:d6:a9:a2:ad:43:51:86:e7:bf:
27:c0:3e:75:ac:16:e1:53:25:ca:66:c3:d9:ee:90:31:21:e5:
32:05:e5:18:f2:9c:af:51:7b:40:1a:31:bd:4f:b8:d8:e3:28:
9a:8c:8c:32:cb:a3:82:d4:fc:ee:4c:ad:d9:f4:56:ed:d7:bb:
56:2f:6e:ef:ba:47:22:76:77:65:6b:24:7f:58:2d:1a:4b:2e:
10:33:57:ab:2b:97:95:d4:d3:59:b5:04:e9:b0:4c:15:93:cd:
4d:f5:3b:28:ed:bb:5e:c1:c2:0f:9e:17:fd:58:a0:2a:9b:3f:
da:b8:32:62:19:9d:93:ab:57:00:65:45:8a:ad:5b:4e:ca:29:
71:06:5f:64:ff:98:03:79:89:79:85:7b:28:ae:d7:7e:95:ca:
05:a3:49:c6:97:c3:b0:36:15:10:a2:77:04:9a:e5:72:d2:05:
d0:50:08:91:9b:d6:77:31:c6:35:85:09:24:a0:98:16:f6:91:
45:a2:60:7f:50:0e:0c:37:3a:4d:3b:36:e0:aa:2a:93:62:75:
b1:75:26:aa:83:0a:34:4b:d7:c0:35:91:64:90:a9:b1:db:db:
78:62:97:4e:36:e5:8c:03:f3:1c:0b:f0:78:15:4c:c8:79:ee:
a9:80:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:32 2026 by rpki-client