
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json)
Hash identifier: sli1agCH3ygML8duyNyJ9WCxHm/Z45pyMKXFco11DHc=
Subject key identifier: 92:3B:6C:9C:79:49:3B:6E:4B:AD:02:A2:D9:37:59:E3:89:A5:A7:70
Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Certificate serial: 2874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
Manifest number: 2861
Signing time: Thu 26 Mar 2026 15:37:10 +0000
Manifest this update: Thu 26 Mar 2026 15:37:09 +0000
Manifest next update: Thu 02 Apr 2026 15:37:09 +0000
Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: 8DF/aeSyysX+SLimiU/+MFn01OXP8a8tcNKA3m2VL+s=)
2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: VmiDWWZcXS/8NwiQU0Cj011GwuJY7i5hDmIVSX2ZEao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10356 (0x2874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Validity
Not Before: Mar 26 15:37:09 2026 GMT
Not After : Apr 2 15:37:09 2026 GMT
Subject: CN=69c552a6-edfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:34:1b:32:bd:47:1b:d5:5d:f2:e1:a2:65:
9e:93:91:79:ca:01:2b:de:60:0b:cd:ad:1e:21:55:
40:f9:3f:f3:51:41:3c:b7:d6:ad:70:42:1d:c0:ad:
b1:ff:49:bc:34:23:00:c5:fd:2d:ea:a8:32:10:89:
fb:8b:65:39:7b:6e:64:a5:80:d7:b5:a1:c7:c7:1f:
e8:fe:5b:35:c7:26:93:33:62:86:62:5b:b9:9d:75:
ae:8e:4e:4f:d6:b4:5c:6b:19:c2:ff:eb:fd:37:e6:
6d:bf:7b:9e:d5:d5:37:b0:90:48:51:0e:92:dc:50:
36:dc:fb:29:ca:31:fb:7e:33:72:80:7f:08:52:f1:
a4:c7:b6:35:1a:fc:a0:cb:93:79:65:7a:65:70:57:
7d:fe:c7:cc:82:3c:5c:4b:c0:41:76:78:84:99:22:
4b:ed:ed:db:c2:03:21:b3:bd:5e:d6:c0:b6:f0:7a:
b1:04:24:a5:cf:c1:af:d3:f7:a6:2e:93:31:c3:07:
80:0e:ed:cf:5b:28:3a:1b:fb:c1:79:11:31:93:88:
19:67:c7:b0:84:28:c8:46:c8:81:b5:94:0d:2d:3a:
01:55:46:94:a5:4a:d2:77:e1:39:13:13:06:77:3b:
8d:69:db:30:27:11:a5:4c:da:1d:b6:9a:d5:f3:e0:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3B:6C:9C:79:49:3B:6E:4B:AD:02:A2:D9:37:59:E3:89:A5:A7:70
X509v3 Authority Key Identifier:
keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:2f:e6:98:b9:46:ed:65:b5:1f:e2:b7:d7:5e:4c:40:db:f4:
a8:bd:59:d7:2c:9f:c1:e2:bf:af:99:14:27:3f:b9:2c:db:6b:
1e:64:35:43:01:24:96:80:89:1a:49:29:5d:9f:3e:dc:87:98:
04:12:52:77:d8:3b:5c:ef:b7:00:2a:e6:3e:a3:52:90:60:02:
28:b4:9e:96:27:17:0b:c7:8d:fb:ab:f3:0e:a2:b6:cd:b2:8b:
4a:3c:e0:73:c3:4e:1d:0d:ff:0f:7b:16:74:2d:86:28:a6:80:
52:81:62:14:d9:5c:2d:32:d0:13:2f:17:d1:3e:fb:36:88:82:
5b:42:32:4c:0b:a7:a2:da:a9:0d:10:ea:75:0b:1b:ff:ef:c5:
97:c3:79:76:b4:fb:d3:90:31:9a:ba:fa:b7:a1:b8:c5:ef:df:
97:f1:7c:48:11:e4:59:66:35:68:41:a0:0d:a7:8b:28:e4:f2:
ec:23:b6:06:5e:73:4b:6b:fc:74:f9:a0:a0:c6:93:44:ee:3a:
b7:25:ba:82:87:2a:96:65:9f:dd:75:db:5f:33:59:7d:5e:10:
81:9a:2d:3f:dc:fb:09:fe:e5:da:49:3f:1a:d8:15:ed:68:f8:
d7:b0:f2:47:02:07:df:db:fe:ff:84:49:0b:c5:5c:ac:c0:6b:
cc:c1:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:55 2026 by rpki-client