
$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
File: zES2e9GPRfbhN63kcxM1pVGmYSc.mft (raw, json)
Hash identifier: TALyDOdCLaTIhmq+fJMPGQNb0tMuL9uIxNRqSP94emA=
Subject key identifier: BB:5F:6C:8B:D6:12:CC:CF:9B:4B:E6:CE:60:3C:F0:5C:08:E0:93:F2
Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
Certificate issuer: /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
Manifest number: 90
Signing time: Wed 25 Mar 2026 06:42:50 +0000
Manifest this update: Wed 25 Mar 2026 06:42:50 +0000
Manifest next update: Wed 01 Apr 2026 06:42:50 +0000
Files and hashes: 1: zES2e9GPRfbhN63kcxM1pVGmYSc.crl (hash: 8tqKNYTYgceSr4BAke2wChowHpWAQ1MHgGywNyDo3kU=)
2: 469F3FE44CDF11F08D2EFF16C4F9AE02.roa (hash: daCSAN1/L7FpC1GH73B6zID6rVi/iS9JfJ6E1UGDmuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Validity
Not Before: Mar 25 06:42:50 2026 GMT
Not After : Apr 1 06:42:50 2026 GMT
Subject: CN=69c383ea-69f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:b9:dc:e5:cb:18:3a:95:ba:49:cf:14:cb:
3c:ae:b0:86:f4:d6:c7:7d:3d:6b:25:73:86:22:2d:
d7:53:16:99:64:c0:7c:97:ea:2d:77:21:72:ea:98:
14:ed:bc:41:47:eb:6c:2d:9a:fb:e4:99:86:1e:01:
b3:37:bd:ee:e0:32:30:3f:7a:e1:69:98:89:ca:cc:
2f:82:b7:4a:4c:86:ed:ee:65:72:a5:e4:35:ac:5d:
60:56:f6:ee:42:6c:eb:61:d0:16:fc:c4:26:8e:37:
d5:24:8b:50:b3:4c:a9:47:f2:c9:5a:3b:cf:2e:d8:
5b:a2:dd:a5:aa:52:9e:40:2f:4a:32:a3:9e:33:15:
73:14:d4:53:ed:4f:53:c7:9b:9d:94:85:03:0a:c2:
98:27:6d:83:7b:44:aa:ec:ce:24:bd:c4:22:e4:c7:
d3:19:0c:3c:a7:12:02:a3:15:95:04:1d:b1:65:f2:
72:4c:55:ef:d5:59:0f:51:d4:d7:0b:ec:0a:ac:b0:
c6:6c:51:9e:f5:af:c1:e0:2e:10:93:b6:bd:7c:48:
0a:8c:b6:80:c4:c5:75:ea:d4:18:d2:64:93:5c:0a:
5f:8b:c5:3d:f7:bb:04:21:4b:8d:1e:ac:c0:9f:c1:
fc:d5:a6:76:d9:be:6a:e7:30:41:89:1e:5e:84:bd:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5F:6C:8B:D6:12:CC:CF:9B:4B:E6:CE:60:3C:F0:5C:08:E0:93:F2
X509v3 Authority Key Identifier:
keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:af:94:88:2f:14:57:8d:fd:fd:98:a7:d0:3b:b1:cc:38:4a:
9e:2c:27:5b:f5:11:13:66:7f:5f:73:7b:42:b7:98:59:e9:bc:
f4:68:bc:5c:d0:15:e9:8b:29:28:d5:40:b1:3b:d4:28:04:b9:
89:59:dd:a3:9a:77:26:62:7d:86:ff:d9:5b:25:af:8f:6f:33:
c9:60:82:44:a2:f9:9e:80:7d:2c:f9:0a:1a:a8:3c:f2:2b:ee:
b6:8c:71:7d:68:db:b8:a8:f2:37:5c:ea:00:2c:a3:13:99:10:
4e:19:03:96:a5:8d:3d:bd:d9:96:82:0a:92:be:8f:8b:85:35:
6b:2b:9a:6e:b9:19:38:da:36:63:ff:ca:0b:69:be:bf:72:85:
34:8a:2a:a8:d9:d5:7a:f3:ce:4b:10:51:f8:3e:76:34:96:23:
e7:bc:dd:47:46:f6:1a:ff:c5:0f:5f:a4:e2:89:03:64:e3:29:
0f:3b:84:31:f1:d9:15:01:c2:18:31:98:6e:09:e8:67:1b:0a:
68:a9:d2:4f:54:09:20:ec:c8:7e:71:5a:80:ee:f9:08:0f:ce:
9b:a1:0c:0e:7a:27:13:cb:73:34:2d:75:55:6e:7f:7c:80:cd:
ac:65:29:9d:85:94:99:5c:ee:9a:e1:3a:b5:19:71:9f:e1:f1:
5f:a4:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:28 2026 by rpki-client