
$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
File: ZTiBnzv0kyyggsFGry_qy--HjLg.mft (raw, json)
Hash identifier: TLYxsMopJVwlkJG5mq9aRhwj16/ZERQOnmYqSGWd3UI=
Subject key identifier: 1E:EC:47:26:FD:F7:52:7A:5C:15:97:FF:3E:F5:F7:A2:E7:5A:7D:DF
Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8
Certificate issuer: /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
Manifest number: 0199
Signing time: Wed 25 Mar 2026 03:35:59 +0000
Manifest this update: Wed 25 Mar 2026 03:35:58 +0000
Manifest next update: Wed 01 Apr 2026 03:35:58 +0000
Files and hashes: 1: ZTiBnzv0kyyggsFGry_qy--HjLg.crl (hash: VheNx1K5fPOHzzB/WvnAJZAhxznvdVircNpktZ7bgcw=)
2: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (hash: 0RrI3zPu4iw8c6if0Z3CHjsmuPuiPR5KsKC2Fg/4jUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl
rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918134E, serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8
Validity
Not Before: Mar 25 03:35:58 2026 GMT
Not After : Apr 1 03:35:58 2026 GMT
Subject: CN=69c3581f-554d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:cf:d7:45:c6:f6:03:b3:96:10:94:bf:ef:
d6:ac:6e:87:93:30:e1:8a:e0:7f:0e:80:21:bd:8e:
af:f7:6c:b6:98:75:67:70:5b:df:68:e7:dd:c9:6d:
a6:d7:77:4a:6e:de:ac:8c:87:2f:60:dc:f6:4e:02:
8d:28:24:f4:4e:20:6f:b8:88:9e:ee:13:fa:fb:c1:
1b:8c:e8:b3:c1:07:8f:59:af:6d:17:36:aa:07:f6:
e9:26:d3:8d:2e:04:dc:23:d3:31:47:8e:d2:56:5e:
03:01:53:a5:82:26:ac:21:ae:56:52:cc:b7:80:16:
f8:e0:7d:d0:a0:36:f2:1a:fa:8c:b6:87:ac:dd:56:
4a:f7:2a:cc:8e:cd:2b:04:38:40:cb:56:17:00:47:
eb:af:d0:53:97:45:7a:4e:61:7e:63:e6:1c:cf:cf:
75:ea:9a:c0:d9:1c:ab:c5:4e:f9:7e:3b:ab:d5:d6:
9f:17:b2:a3:15:3f:d1:e9:b4:59:2b:37:c6:19:8e:
2a:ae:9b:6a:37:1c:c5:c9:cc:f2:ed:ac:15:75:4e:
91:34:95:c7:8c:24:32:a5:49:0d:4f:0f:a2:c7:c4:
36:d5:b4:ec:e1:b4:78:04:6e:c9:d7:ba:18:db:51:
5f:b8:dd:a5:61:be:3f:49:ef:07:19:28:96:e5:71:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:47:26:FD:F7:52:7A:5C:15:97:FF:3E:F5:F7:A2:E7:5A:7D:DF
X509v3 Authority Key Identifier:
keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:38:7f:1f:68:fa:16:4d:8d:0e:28:b4:85:ef:57:cf:ff:f9:
db:f5:64:16:da:d3:3f:c9:33:d8:c8:36:68:e0:76:b4:dd:82:
70:9c:e7:04:f6:ce:ff:f6:d4:eb:36:7c:81:a8:16:a2:63:c0:
86:2c:65:0a:f1:2c:88:49:4c:9c:fe:8b:67:5f:0b:8a:b5:58:
16:6b:26:df:62:26:de:07:74:f9:2c:f4:f1:2f:d9:60:41:c6:
07:84:5e:3d:c0:25:cc:da:b1:4b:e5:a3:f1:a2:7c:3f:31:ae:
c9:81:f7:6b:43:b7:97:d6:ef:db:06:39:84:d1:72:22:b9:29:
5c:fd:aa:b9:29:40:23:8a:ae:3e:0d:0a:8b:43:bb:0c:8b:d7:
15:f0:13:84:02:bc:4f:ef:b5:89:b2:e1:ad:79:7d:c3:ef:4f:
36:f3:0a:ff:88:03:48:5e:98:b0:56:79:98:dd:6b:ec:fc:3c:
f7:2d:84:8d:d1:93:e3:c6:dc:b0:76:02:fe:1a:40:48:fa:f3:
7d:24:ce:18:fa:d7:22:0b:9f:7e:a0:e2:33:90:01:cd:eb:98:
62:2d:bc:8d:42:57:6e:25:c8:90:47:e5:4a:ee:94:d4:d8:85:
c2:2f:bd:f5:6d:01:38:0d:96:88:8d:06:50:f9:ae:1e:94:85:
ab:a3:88:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:07:49 2026 by rpki-client