
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json)
Hash identifier: 9B8gsqEu6juDT74/j2jfrTLARNktudymMT3uLe5bPcY=
Subject key identifier: 3B:3C:39:01:4E:E1:AC:71:32:E3:95:64:2F:CE:83:0E:B8:1F:91:7A
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial: 09B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
Manifest number: 09AD
Signing time: Tue 24 Mar 2026 19:43:55 +0000
Manifest this update: Tue 24 Mar 2026 19:43:55 +0000
Manifest next update: Tue 31 Mar 2026 19:43:55 +0000
Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: /Qrqxz9ECefCxbMJjSEIGZhrUxrnhEQncfRn7llf/zc=)
2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: vhdqqkcNqmMd48JT0EbRdWraEL2WjKdJfgJwZYRmNdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2485 (0x9b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Validity
Not Before: Mar 24 19:43:55 2026 GMT
Not After : Mar 31 19:43:55 2026 GMT
Subject: CN=69c2e97b-1339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:48:78:77:ae:9e:dc:42:1d:7e:eb:92:66:
f6:28:95:c4:88:89:12:1c:8e:11:70:8a:55:b3:73:
5d:c8:e3:74:f3:fa:7f:49:5d:c8:24:47:6a:3f:bf:
d8:16:4e:08:41:2d:6d:44:c4:1d:ea:04:e2:04:eb:
53:5a:bb:c9:35:c2:82:f2:3c:df:fd:c7:c4:98:30:
d6:48:7b:d9:d0:e9:85:d4:fe:4d:ab:bd:3f:62:29:
54:40:b2:6f:0f:f6:d6:a4:6e:7f:a4:2f:29:90:c9:
7a:bf:9a:3c:6e:f1:6a:06:33:c0:ee:61:4b:9e:38:
39:19:03:d7:0c:90:39:14:db:df:de:ef:c5:8a:3c:
85:23:25:74:93:fc:31:9a:f0:f2:f8:3e:ca:71:d1:
fd:ff:fd:90:7b:61:70:de:a8:6d:83:77:a5:4d:ec:
62:e5:3b:60:8e:6c:96:6d:81:9c:24:f5:66:18:fe:
13:59:d5:2a:3b:93:d5:07:02:18:99:6e:f3:03:0d:
6c:56:48:b4:cf:a6:2e:bf:9c:4b:f2:e5:d2:9b:77:
a4:7b:72:65:79:92:91:fa:71:3e:78:34:38:a7:10:
2e:08:25:92:00:3c:d2:eb:fb:ae:a2:70:2f:23:68:
33:d0:60:3b:cb:e4:00:7e:8c:c5:0e:cb:a3:9f:29:
96:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3C:39:01:4E:E1:AC:71:32:E3:95:64:2F:CE:83:0E:B8:1F:91:7A
X509v3 Authority Key Identifier:
keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:70:da:ff:d2:ec:33:28:db:fd:c8:f2:8f:ee:94:87:45:25:
cd:00:76:06:4c:f1:fd:08:75:34:3b:a9:af:74:a3:1b:8f:49:
06:c7:ea:b9:0d:27:00:2c:50:b6:67:95:b3:c9:75:76:2b:9a:
41:b7:61:bd:37:16:13:22:89:46:43:e2:33:29:8a:cd:60:85:
2f:57:4d:20:6a:10:41:12:98:5e:96:30:f7:d0:40:09:4d:a3:
16:1b:4f:4e:14:ba:73:73:d4:96:d4:2e:1c:f9:25:1f:5b:53:
3f:cc:24:2f:45:94:92:d7:b5:97:18:ae:63:ea:4c:ea:bf:37:
0e:49:a5:a5:72:40:a9:2f:cd:28:6f:f0:49:77:e8:06:fb:99:
60:d7:dc:f1:d8:1c:1f:b9:b8:08:14:81:02:56:5c:06:e7:91:
b0:0a:3a:ff:f4:db:88:cb:6f:c3:88:dc:e2:d2:6f:a2:8d:d1:
32:fa:9b:af:2f:eb:01:cf:c6:dd:72:78:d2:b2:f1:dd:b4:4d:
73:61:7a:4c:d3:4c:23:f8:b5:19:83:67:5b:cb:d8:7d:31:0c:
5a:81:45:0c:69:d1:51:74:08:d2:90:3f:55:9a:72:c8:9a:ea:
0f:bc:74:a5:b4:ab:c5:31:12:de:43:39:5e:33:36:6d:83:95:
71:ce:92:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:54 2026 by rpki-client