
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json)
Hash identifier: a+KzZu3cKCzwml4mZ+Vkof3Trbz1HAcz1p0+VQfmPps=
Subject key identifier: 45:C6:FE:39:CD:A0:E1:04:BA:4F:B5:01:1B:5D:F8:D0:DC:31:7C:1A
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
Manifest number: 011C
Signing time: Wed 25 Mar 2026 05:09:22 +0000
Manifest this update: Wed 25 Mar 2026 05:09:21 +0000
Manifest next update: Wed 01 Apr 2026 05:09:21 +0000
Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: Xr1fOerGtrbfCsfmdbYraNsz+VC+rB3mOJY96ra4nRY=)
2: F9EB418CFEAB11F094E473AD656F56BC.roa (hash: 2I2kxtV9Go+yS4kEarl3OYdWVe9zcH7xNuKQWD2RGXU=)
3: 97A6188EFEAC11F0AB4A61AF656F56BC.roa (hash: yCEj6qPX9EqfGe8wQyMh/zdjEFh0bs/DoKx+c7+TATU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Validity
Not Before: Mar 25 05:09:21 2026 GMT
Not After : Apr 1 05:09:21 2026 GMT
Subject: CN=69c36e02-22e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:35:06:60:05:14:8b:54:7f:07:84:21:17:
86:cd:97:30:a0:00:a2:57:c3:ec:b7:4a:9d:44:3f:
39:d3:60:8a:41:f4:85:8e:60:85:61:ef:21:df:c5:
69:45:04:69:2f:69:b7:2a:64:ef:66:1a:ca:e8:18:
b0:5f:af:a5:55:b4:3b:57:5b:dc:e9:74:83:7c:28:
7c:60:9e:6a:b2:35:6f:ed:63:96:66:75:87:95:81:
d0:0d:e7:86:d4:43:c8:6f:de:8c:39:21:11:69:48:
ad:07:6a:d8:21:a2:12:00:05:9c:8b:a0:3a:db:e4:
8d:a1:e9:34:5f:c2:34:b0:b9:9a:26:3f:cd:4a:b0:
70:16:e7:a6:70:3d:b6:d0:59:90:53:3b:e0:80:65:
65:89:91:68:ee:09:68:0c:31:46:19:a9:f5:98:4d:
07:3f:c3:c8:f7:34:b8:0b:a9:5a:14:6b:fc:df:e6:
49:3d:d9:fe:f4:14:04:20:4c:44:2d:7e:ed:26:4e:
60:7c:af:83:0f:ec:2b:76:1c:46:d9:63:b6:f7:08:
6a:a6:ec:57:b5:3a:34:51:5d:6b:10:35:a9:92:a3:
4f:61:92:02:17:3f:2a:9a:70:63:ef:3a:1b:df:f6:
2f:bd:4a:80:b3:56:21:18:6d:dc:1b:99:a7:f8:02:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C6:FE:39:CD:A0:E1:04:BA:4F:B5:01:1B:5D:F8:D0:DC:31:7C:1A
X509v3 Authority Key Identifier:
keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:95:0a:25:f8:7a:b9:89:ac:64:83:37:63:4e:b3:d2:8f:67:
2d:97:cc:b3:cf:8e:ba:d3:92:e0:8d:a4:83:3b:bd:b0:71:36:
b2:44:15:d2:c6:5c:81:ca:8f:0e:d6:9b:b9:b9:7a:92:53:d2:
58:58:cb:3e:c2:96:65:1f:ac:57:f1:24:46:14:47:72:d6:64:
94:ee:0e:8e:a5:1c:8a:a3:1d:87:c1:ca:b2:0d:2e:0f:f1:8f:
2f:b8:ab:86:35:e9:1f:5e:88:a9:5e:5a:31:78:e6:24:38:7d:
ba:e9:80:26:98:b2:77:b5:de:09:63:f5:32:a2:77:8c:0b:f3:
a2:8e:c5:eb:95:1f:75:ba:d0:46:a4:95:6e:cb:2a:dc:9d:64:
87:f6:c0:de:b0:9e:90:34:22:15:b4:ab:b9:6c:ab:a5:9f:6e:
6c:a3:f3:89:6b:3c:2a:7b:5d:51:3a:0e:ae:83:c7:99:eb:51:
7d:9a:9c:eb:b6:ea:60:02:f3:90:1d:ff:c5:2a:ac:aa:90:f1:
c9:f1:0d:7c:67:42:c5:fd:51:7d:7e:96:e8:7e:22:51:0c:3d:
e6:eb:f6:2c:1e:80:28:90:c4:c6:5a:2d:55:b3:af:4f:6d:db:
a6:ac:67:b9:2f:ee:86:1d:75:1b:5f:57:a8:57:2c:8e:ff:bc:
d5:45:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:31 2026 by rpki-client