
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json)
Hash identifier: hHf0Xs6EnSQAY2r6FxI8a4H1umXIQNJ8ifaAcOZRfY0=
Subject key identifier: BB:96:0A:98:88:38:82:6A:4F:44:FB:6A:A6:05:EE:C6:EA:23:74:4C
Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
Manifest number: E5
Signing time: Wed 25 Mar 2026 05:40:16 +0000
Manifest this update: Wed 25 Mar 2026 05:40:15 +0000
Manifest next update: Wed 01 Apr 2026 05:40:15 +0000
Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: GbUcgEfS8AZpB3inKRS2wgOBMJ1GbQcGCCFqU1pqhD0=)
2: B8587822CBF611EFAE14812EC4F9AE02.roa (hash: 16/ssMDX+/I1k87w5myFJlNdn8mVFtVtg6BKpi/1aLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Validity
Not Before: Mar 25 05:40:15 2026 GMT
Not After : Apr 1 05:40:15 2026 GMT
Subject: CN=69c37540-1d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:e7:d1:de:33:a7:12:28:44:f2:7c:b5:e9:
fc:7e:2b:68:9e:b0:72:21:00:e2:03:24:f3:2c:ec:
da:fe:be:de:65:13:e7:0c:e4:08:b2:05:ca:2e:ab:
cb:7b:35:93:c2:8c:f5:5e:90:da:54:e8:09:48:8f:
5f:54:18:1e:74:ad:39:3a:a6:15:da:7d:69:6e:76:
7b:ba:35:d4:a9:d7:f2:6f:22:03:88:7a:d6:d5:5d:
01:7a:d6:ad:60:ff:1f:d1:07:a8:e3:5f:7a:86:dd:
67:80:e7:59:a1:93:1b:dd:4f:3d:e8:c0:4b:7c:bd:
cc:5d:d2:09:3c:53:2b:0c:19:d9:79:b8:a9:a9:f4:
7f:b8:65:87:85:7e:d8:03:f6:07:b4:ae:a3:d3:d9:
bb:6c:b3:52:b0:de:d6:40:82:14:f1:05:c4:4d:19:
66:83:d9:53:2e:dd:4d:c6:db:ae:c4:70:19:bc:17:
1e:25:31:f3:bc:ac:03:90:8b:87:40:c8:e8:7a:b5:
71:28:98:8c:d0:b2:96:17:2b:74:bb:94:2b:75:09:
d9:ff:7d:54:de:f2:51:d3:a9:4f:7d:bc:5c:c8:2a:
b5:4b:20:9e:42:1c:f4:dd:a3:e5:f4:ad:a2:15:47:
76:d3:74:a1:9e:ba:31:0f:a9:19:c8:c6:94:f8:25:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:96:0A:98:88:38:82:6A:4F:44:FB:6A:A6:05:EE:C6:EA:23:74:4C
X509v3 Authority Key Identifier:
keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:13:55:eb:09:64:bc:a9:52:05:2a:76:1a:84:d8:0d:a8:c2:
f1:48:42:82:7c:c1:f6:08:71:ed:67:c0:a2:71:54:5b:a7:c2:
46:ca:56:30:18:45:3e:bb:4a:ff:4e:2c:d7:fe:0e:3a:91:b4:
af:52:16:df:8b:b4:dc:97:cf:71:da:48:ee:93:49:39:29:fc:
f9:86:26:79:2c:7e:ae:33:e0:24:66:86:de:6d:f0:08:15:36:
14:97:b9:a8:1d:f5:18:d9:60:09:24:e7:5a:f8:58:11:73:5c:
e0:eb:f4:b1:9b:59:75:4f:88:2a:e4:e1:d4:b7:08:57:c6:fd:
d2:7d:de:b2:b0:a7:04:10:76:e2:bb:96:fa:f9:3b:f2:9f:38:
26:67:07:35:c3:bc:d5:3a:22:d6:e5:a8:77:ee:4c:b1:45:8b:
22:e2:cb:82:22:13:10:40:25:16:30:f5:07:be:9f:7e:87:7d:
15:15:83:95:34:6f:65:41:ba:5a:71:a3:f7:cd:46:36:e5:bd:
65:de:9a:ec:c7:1a:9a:ea:ee:d4:10:11:c1:1d:82:9f:4d:f4:
26:9f:6d:b4:57:5b:ca:b5:b8:fc:fe:eb:49:a4:4c:68:a3:3b:
39:12:5c:e1:40:18:a6:8f:4c:3b:5e:88:b6:c5:26:47:53:9c:
bb:6b:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:26 2026 by rpki-client