
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier: h3mB5LHFil6o4CQC66drKJA5QbZ3pKcCaShA/S5rEyI=
Subject key identifier: FA:5E:2E:73:28:CC:17:DB:F9:73:CD:FD:89:49:71:A9:65:4C:9B:D7
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial: 2395
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number: 2385
Signing time: Tue 24 Mar 2026 15:45:42 +0000
Manifest this update: Tue 24 Mar 2026 15:45:41 +0000
Manifest next update: Tue 31 Mar 2026 15:45:41 +0000
Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: Nf8sK0w+9lf/jCuRKcUCwMh73JMNQFZdEVNAeIbse2A=)
2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: jZXI3ipxYqcT93E6OoTntF08+ARhGbsAg+OWr8b/Iio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9109 (0x2395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Validity
Not Before: Mar 24 15:45:41 2026 GMT
Not After : Mar 31 15:45:41 2026 GMT
Subject: CN=69c2b1a6-6f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:bf:48:ea:18:bb:38:69:8b:20:64:f6:2e:
bb:14:17:ce:c2:51:59:0a:99:2f:7c:45:5d:74:99:
86:18:2a:66:b8:c9:d0:81:3f:24:57:6b:9a:1d:75:
12:df:aa:b9:8a:b3:b7:27:c4:8c:d8:bf:35:a5:5c:
27:cf:d3:6f:d6:e0:b3:cb:d0:19:1e:a7:7f:2f:b2:
2f:55:39:c9:49:ad:64:8a:d5:f9:2f:2b:36:a0:78:
6e:c2:57:fc:fc:79:46:18:ce:a5:6b:fe:b6:6f:cc:
6c:86:7d:f2:4c:21:15:01:88:b7:b8:68:45:10:d2:
d1:0f:ca:81:d6:72:c1:2e:84:ad:3f:bf:6f:64:0c:
77:3f:f2:1d:61:1c:39:ac:cc:5a:90:53:d5:1a:be:
4d:38:1f:f0:7d:2a:45:2c:dc:7c:d7:12:dc:de:d4:
db:84:8e:94:ed:9c:49:66:d2:6b:91:b5:ae:0a:25:
7b:32:09:bd:f7:39:69:ca:28:0e:8e:2c:62:32:ef:
6d:aa:e7:e6:15:33:c7:3c:89:51:ec:dd:bd:e2:12:
e9:b5:7e:a3:1a:bf:94:bf:0a:cf:f2:bf:39:fd:f4:
e2:29:99:53:f4:86:ab:e2:ea:36:71:88:c2:56:3a:
1e:c6:e5:11:58:b9:fa:ac:9c:7c:e7:18:b0:ca:db:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5E:2E:73:28:CC:17:DB:F9:73:CD:FD:89:49:71:A9:65:4C:9B:D7
X509v3 Authority Key Identifier:
keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:16:88:03:aa:e4:5f:d2:b3:c4:05:51:77:cc:79:01:f6:8d:
8b:b0:1d:e1:a6:cc:93:eb:d3:c0:6f:a5:2e:05:f6:dc:aa:0a:
aa:aa:9e:a2:f5:c4:b7:3b:24:a0:de:66:51:1a:6b:b7:18:bc:
7d:65:95:6b:25:d2:80:cc:7f:04:50:fd:d8:44:8c:0b:3c:b6:
b2:a3:04:ce:d5:cf:4e:45:af:88:83:59:ec:79:5c:b4:cb:f0:
8c:24:15:06:14:76:3f:c3:a7:85:dc:12:6d:39:2b:ca:f3:82:
05:22:db:38:26:fb:0e:8b:43:00:f5:62:af:9a:f8:09:49:79:
79:39:d6:e7:d1:70:0f:76:b3:3e:c4:33:7c:a2:5d:e7:c6:37:
12:a9:97:df:b6:23:a8:48:c2:a7:02:77:9c:72:4b:5d:e2:05:
1e:58:33:4b:94:dc:6e:b2:d5:cf:cc:9a:91:ee:6c:d3:83:66:
61:24:f1:f0:76:ac:d2:28:35:c5:9c:d8:cb:2c:29:bf:f6:14:
a5:1a:4a:85:d0:bb:64:3b:95:f5:b6:dd:93:e1:89:70:85:13:
92:d7:d1:f3:55:91:5b:73:63:cd:ec:36:14:62:bc:ae:5c:91:
b3:9f:6f:44:08:31:c6:24:c0:17:cb:a6:ad:c1:cb:fd:d1:41:
ab:db:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:34 2026 by rpki-client