
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
File: ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json)
Hash identifier: 9qhCc2Ph40mtxMI5nHG9s0jt72NfBvjwtW+lvRBGv54=
Subject key identifier: 33:F2:82:53:64:45:6C:CD:8D:A8:00:90:02:8D:4E:E3:3E:32:7A:3D
Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
Certificate issuer: /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
Manifest number: 3F
Signing time: Wed 25 Mar 2026 12:55:30 +0000
Manifest this update: Wed 25 Mar 2026 12:55:30 +0000
Manifest next update: Wed 01 Apr 2026 12:55:30 +0000
Files and hashes: 1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: ozdGYURkvhoVJp9oGFcByZlWzVQEs/IWSDlbzu7HJOc=)
2: E4DCE562284911F19931E6E894833773.roa (hash: pymYvzDiEd6MVM1mAART6Uf7E7T5qzObEVBsUn0yB5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 12:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Validity
Not Before: Mar 25 12:55:30 2026 GMT
Not After : Apr 1 12:55:30 2026 GMT
Subject: CN=69c3db42-a2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:1b:77:19:44:f8:34:70:9b:4b:f3:50:01:
e9:4e:be:a7:81:5d:84:d5:a9:02:57:6a:e2:f7:44:
ad:45:9f:22:b8:15:75:d4:31:c3:15:5b:0c:dd:dd:
21:e7:3d:74:08:18:2d:68:e0:9e:14:45:03:0f:85:
40:2a:31:b5:e0:3e:7f:00:f2:60:a2:5b:d4:67:05:
72:1d:48:fb:2a:ef:9e:4b:be:c2:c4:71:a9:44:24:
94:05:cf:3d:e3:ca:b8:38:01:3b:d1:a5:fd:6c:b8:
9e:f5:cd:0d:f2:bd:d1:13:01:be:77:e8:af:d0:e3:
49:8e:30:49:87:2b:59:e7:a3:b4:6f:fd:2e:1a:f0:
33:57:27:08:ab:c1:87:a0:43:2e:22:d4:d8:25:c7:
dc:1c:d9:1c:1d:44:58:e9:66:b9:95:84:9d:91:df:
b9:d0:c3:f5:a4:72:a1:8c:39:2c:aa:c2:e5:d7:cf:
ee:fd:6f:48:12:a0:aa:78:f9:4b:19:f1:f3:10:17:
98:51:00:15:2b:64:8c:22:69:b7:71:36:bd:ab:de:
a7:33:18:7c:0b:ee:0d:b1:72:a3:ec:e0:31:83:a4:
08:36:81:fe:e5:b0:f4:6f:42:29:81:26:4c:82:5b:
fc:0a:e6:6f:fa:5c:7c:0b:57:16:90:31:63:3a:f8:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:82:53:64:45:6C:CD:8D:A8:00:90:02:8D:4E:E3:3E:32:7A:3D
X509v3 Authority Key Identifier:
keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:48:17:05:8c:8e:bd:eb:eb:56:ce:6d:dd:6b:3d:e5:2e:a0:
84:bb:9a:ac:a8:a7:2f:8d:d1:9a:4d:81:bd:ec:4a:b2:02:14:
f7:b6:6d:ee:fa:7c:ba:13:84:f2:f0:52:29:00:06:91:47:de:
35:79:04:43:84:22:cb:79:a4:e0:7a:e9:db:1a:38:88:90:44:
14:66:e8:c4:16:f1:6d:a5:26:97:68:d1:96:97:50:0b:5c:66:
1d:50:5c:1f:e8:6b:79:35:5d:74:60:9b:b2:2e:62:1e:6c:49:
e8:cb:14:02:41:b7:aa:66:68:82:f6:9c:b7:35:dd:88:8b:7b:
b7:ff:d4:1d:03:b4:3a:cc:e4:2a:31:19:16:82:3a:66:88:21:
dd:a1:93:0c:5a:12:1a:b6:4b:d9:44:89:78:01:f6:b0:7d:de:
2d:d3:c9:dd:a8:cb:f9:2a:5b:30:fa:bd:a0:2b:6a:33:cc:b0:
b3:17:c7:2f:6c:bc:fd:02:e3:d6:fb:86:d3:e6:36:2b:b2:db:
8d:f2:6b:79:f1:29:93:c5:19:cc:5c:3e:79:ee:b1:a0:2f:dc:
83:a5:cb:0d:29:87:7c:b8:9f:e5:90:f8:1f:6e:6e:8f:68:52:
ec:6c:e6:ba:bb:60:db:b1:06:df:3a:d3:2b:2a:dd:37:28:4a:
c1:11:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:49 2026 by rpki-client