
$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json)
Hash identifier: LvHPFTzR9eTV+CoaeLmPRtyMEpemI/Lq6aoJzVN5f30=
Subject key identifier: B8:2B:B4:2A:9E:AF:E2:8F:BE:7E:3C:93:6C:DE:1E:EA:43:1C:90:74
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
Manifest number: 013E
Signing time: Sun 05 Apr 2026 04:46:26 +0000
Manifest this update: Sun 05 Apr 2026 04:46:26 +0000
Manifest next update: Sun 12 Apr 2026 04:46:26 +0000
Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: spyywyMSWiJNDgdHTE6Dznys+FYfseT9/ZbGreJjJOk=)
2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: 9qSoXVlEycNCIEdeN++oa2o1NIklOSP03YZ6af8JV3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Validity
Not Before: Apr 5 04:46:26 2026 GMT
Not After : Apr 12 04:46:26 2026 GMT
Subject: CN=69d1e922-7825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:74:8e:71:a0:59:45:4d:62:bf:bd:ca:3b:
1b:e3:ea:72:c5:4f:3c:bf:e3:36:f6:5e:8b:74:7b:
d5:79:35:70:73:4b:dc:29:ea:7a:aa:e9:00:dc:fa:
81:80:3d:81:a6:0f:f2:bc:50:35:ef:4e:09:c5:04:
d7:d2:18:34:93:45:b9:1e:1f:91:c0:b3:fa:8a:ff:
15:fc:cd:c1:7b:5b:bf:68:a2:fb:ce:54:3d:ca:e9:
ad:80:e0:f4:8d:a6:c7:61:97:14:5f:95:b8:26:48:
a1:06:5c:53:95:ac:64:18:0a:49:19:ec:e9:49:d1:
bc:cb:8e:bf:f1:ae:38:bb:2a:20:b9:b7:ac:d7:e0:
b8:cc:77:d8:4c:ba:1c:d2:77:77:0b:fa:a1:92:8c:
5f:b7:a0:4f:da:f9:db:55:80:f9:81:49:00:f1:94:
b2:2f:7f:ce:4a:d1:7f:dc:05:23:e1:ce:3a:23:d2:
70:b0:e5:cf:64:0c:bd:1e:c0:c0:b8:80:28:7d:d6:
e2:d2:35:ba:07:0f:b3:73:6f:e3:08:9e:14:43:d8:
6c:41:2f:41:53:67:3f:cd:8a:61:45:c5:44:dc:75:
63:c1:91:66:df:5c:e3:a5:53:23:bc:6e:d6:02:71:
c9:8f:cc:e3:bb:ba:dd:06:e2:d3:56:6e:91:ae:df:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:B4:2A:9E:AF:E2:8F:BE:7E:3C:93:6C:DE:1E:EA:43:1C:90:74
X509v3 Authority Key Identifier:
keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:29:2a:82:b2:7f:49:da:5c:3a:65:b4:53:60:e4:32:3d:dc:
5b:cc:c7:95:2d:f3:e1:59:7e:c1:30:bc:af:48:75:12:7d:04:
f9:ec:4d:c7:d1:b3:3b:a7:93:e9:9b:33:7d:ba:81:57:06:f0:
83:ab:b8:3b:5a:3f:b2:10:40:5c:b6:c2:8d:90:c3:32:90:9b:
78:62:51:89:6f:3b:7b:42:28:d0:ca:ef:05:9e:27:82:a6:02:
77:33:80:3d:bb:d2:14:63:eb:d8:ff:3b:42:af:ab:e5:09:29:
bf:cc:ba:e4:b1:94:d1:d2:1c:6e:74:67:32:44:8b:b7:5d:5d:
c2:d4:41:0c:c4:f2:bb:45:5d:6a:41:4c:3a:f9:cf:1b:0c:ef:
e7:04:a1:60:85:88:64:c5:91:b8:74:98:63:cf:12:ec:31:06:
19:8e:7c:73:3c:a2:58:c4:3d:1c:e9:51:d6:bc:bb:86:aa:2d:
ce:58:31:2d:cf:15:ad:0e:1a:c1:82:18:4e:58:96:c6:73:3e:
70:d7:84:7e:b7:a7:3c:ad:c2:1a:0b:fa:16:94:6c:13:e4:af:
64:32:f7:86:b5:c3:d5:db:c0:b8:1b:d9:05:c4:79:28:e8:e8:
b7:11:66:29:bb:84:b9:28:bc:00:14:3a:83:cc:b3:14:f2:f8:
b3:34:75:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF
MzZDRTg0MTgwHhcNMjYwNDA1MDQ0NjI2WhcNMjYwNDEyMDQ0NjI2WjAYMRYwFAYD
VQQDEw02OWQxZTkyMi03ODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuch0jnGgWUVNYr+9yjsb4+pyxU88v+M29l6LdHvVeTVwc0vcKep6qukA3PqB
gD2Bpg/yvFA1704JxQTX0hg0k0W5Hh+RwLP6iv8V/M3Be1u/aKL7zlQ9yumtgOD0
jabHYZcUX5W4JkihBlxTlaxkGApJGezpSdG8y46/8a44uyogubes1+C4zHfYTLoc
0nd3C/qhkoxft6BP2vnbVYD5gUkA8ZSyL3/OStF/3AUj4c46I9JwsOXPZAy9HsDA
uIAofdbi0jW6Bw+zc2/jCJ4UQ9hsQS9BU2c/zYphRcVE3HVjwZFm31zjpVMjvG7W
AnHJj8zju7rdBuLTVm6Rrt9xMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgrtCqe
r+KPvn48k2zeHupDHJB0MB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF
RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB
T1JxTzVrbS1UdnZqYk9oQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdSkqgrJ/SdpcOmW0U2DkMj3cW8zHlS3z4Vl+wTC8r0h1En0E+exNx9GzO6eT
6ZszfbqBVwbwg6u4O1o/shBAXLbCjZDDMpCbeGJRiW87e0Io0MrvBZ4ngqYCdzOA
PbvSFGPr2P87Qq+r5Qkpv8y65LGU0dIcbnRnMkSLt11dwtRBDMTyu0VdakFMOvnP
Gwzv5wShYIWIZMWRuHSYY88S7DEGGY58czyiWMQ9HOlR1ry7hqotzlgxLc8VrQ4a
wYIYTliWxnM+cNeEfrenPK3CGgv6FpRsE+SvZDL3hrXD1dvAuBvZBcR5KOjotxFm
KbuEuSi8ABQ6g8yzFPL4szR1HA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:48:29 2026 by rpki-client