
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json)
Hash identifier: MKQ+bszcvC2QQfq2rUttNMNMZ8Gqk3/EHr4fCXtrf78=
Subject key identifier: A1:B9:54:99:F5:13:4C:AC:81:9E:21:A5:0A:64:DF:B8:47:8B:44:7F
Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Certificate serial: 0590
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
Manifest number: 0581
Signing time: Tue 22 Sep 2026 22:58:04 +0000
Manifest this update: Tue 22 Sep 2026 22:58:03 +0000
Manifest next update: Tue 29 Sep 2026 22:58:03 +0000
Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: hY5KnlI5m3w5sr4Y1NP2MCp5V4oBeiIbvgXMRBnO7ao=)
2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: xp7/pdQMYk2t7u02214OzsMR/nZgv77MRjYz0MrJbEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Validity
Not Before: Sep 22 22:58:03 2026 GMT
Not After : Sep 29 22:58:03 2026 GMT
Subject: CN=6ab307fc-c414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:22:36:d5:81:87:35:28:61:ff:dc:af:3c:
9c:00:73:8c:17:db:c1:72:41:fd:d5:58:94:50:03:
b0:76:d9:92:de:16:0f:21:fb:0a:e3:61:42:8f:bd:
ef:0a:4c:1d:83:14:bc:12:0d:78:72:53:16:bd:90:
77:01:1b:8a:90:6c:a4:84:73:8b:0e:8a:f6:c7:b7:
46:42:12:fc:5a:3e:14:83:69:59:1f:ed:df:3a:97:
07:71:9d:eb:b0:34:05:64:56:af:7d:5b:74:04:20:
4e:3e:cd:fa:64:99:af:5e:12:68:14:57:83:a2:cf:
dd:33:8c:a4:e6:5f:0e:5c:48:d1:ab:71:d8:9b:54:
20:81:f1:ad:14:d0:52:6f:4a:a7:0d:4d:e2:7f:7c:
6b:1a:5e:d8:af:18:ab:24:fc:17:f8:c3:e3:d6:d7:
cc:4d:da:fe:42:36:e7:52:c7:29:1a:db:91:e2:3c:
f6:1b:0f:39:7c:94:db:88:b7:11:0c:bb:90:3a:77:
39:11:5c:f9:71:32:b8:06:78:13:84:fe:a7:a5:a3:
bd:36:2a:70:60:d2:4a:25:29:a8:25:ca:de:de:df:
8a:48:ba:ce:d4:70:8f:e9:20:c2:6d:52:46:56:0c:
9e:c5:e4:34:0e:c8:30:aa:00:34:80:e7:dc:be:15:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:54:99:F5:13:4C:AC:81:9E:21:A5:0A:64:DF:B8:47:8B:44:7F
X509v3 Authority Key Identifier:
keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:71:7f:84:27:75:35:61:a6:12:42:5e:86:58:6f:8a:91:a2:
15:56:b5:75:2f:c0:14:4d:19:1a:b2:1a:c8:69:2c:21:24:d1:
f7:ab:b5:08:4d:7f:4d:5b:50:e4:e0:97:20:04:90:f7:15:d4:
c5:b3:47:c5:45:36:53:02:76:da:47:03:82:ee:5e:cd:84:d8:
c8:61:28:80:33:c2:73:ae:19:c5:d1:6f:a8:08:50:73:2a:4a:
53:b5:32:ad:ba:3c:5b:8f:ac:13:03:80:0a:28:e3:cf:2e:50:
da:c7:25:4f:24:f8:66:ee:4f:82:d0:fa:16:58:d0:f3:16:40:
7e:13:fe:a9:f7:3a:b7:a4:0e:d1:4a:35:33:53:36:dd:72:03:
51:f9:4e:55:f2:e5:25:76:f0:11:09:05:79:fb:12:50:ae:e2:
f6:aa:3d:0f:b9:0c:e6:1a:e3:ae:3f:8c:93:af:f1:b6:fc:50:
48:bb:94:a6:55:5a:67:0c:24:5f:ad:d8:55:1f:09:f5:bf:11:
89:c3:c9:05:a8:74:1c:c4:7e:f7:30:df:d3:2f:47:20:cb:e0:
a3:91:ad:84:78:c7:5a:70:e0:e1:18:c3:26:91:81:6c:07:08:
c3:15:19:ac:f0:7e:34:69:b2:0e:ef:f4:cb:7f:0b:ba:a1:55:
81:ce:f4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:28:01 2026 by rpki-client