
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json)
Hash identifier: UZ+BV0hlUzdvOzA3mOH9ozSWjmSWXEP/rlLqf1FGxgs=
Subject key identifier: 65:01:8F:72:AE:88:3D:EA:B4:37:E2:43:D1:DB:BE:88:11:47:EC:48
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
Manifest number: 028C
Signing time: Mon 27 Apr 2026 01:41:01 +0000
Manifest this update: Mon 27 Apr 2026 01:41:01 +0000
Manifest next update: Mon 04 May 2026 01:41:01 +0000
Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: KNwAvrenGu8Q2HPUzrGwwOfaA/izibNyHUCDJfUufwg=)
2: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=)
3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=)
4: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Validity
Not Before: Apr 27 01:41:01 2026 GMT
Not After : May 4 01:41:01 2026 GMT
Subject: CN=69eebead-2861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:45:8f:d1:1e:95:12:a4:c2:26:7a:54:c3:
7c:51:c3:cb:3f:b3:e5:6d:b3:92:95:3f:be:b7:31:
8d:75:e4:df:ff:8d:71:21:1e:18:d2:f1:56:66:c5:
d7:a5:ee:ac:64:59:b7:20:df:1c:ba:d4:c7:84:da:
db:fb:a4:c7:be:ab:4e:fc:2f:fb:d5:eb:f6:b6:97:
52:ff:cc:f6:1d:f2:98:4f:b8:de:33:71:54:37:48:
9c:98:90:98:57:73:35:e3:0a:f7:ae:52:1e:62:9c:
d8:ae:f3:b5:9d:bb:c4:b9:ef:84:eb:d7:c2:64:1c:
a2:00:09:9f:24:07:14:23:a1:61:72:42:e6:11:1b:
d9:70:25:18:32:c3:5c:b7:31:66:80:5c:ae:5e:21:
36:92:c3:c7:e5:ec:c1:1a:a9:c3:92:3b:fe:59:6e:
35:a8:c4:1f:b3:48:d0:34:6a:cb:94:e9:10:e5:72:
2d:e0:c5:75:85:6c:d7:89:a3:87:2a:db:aa:34:fd:
36:67:bd:6f:d4:33:02:fa:14:35:c6:15:86:57:d4:
ef:26:f9:c6:8b:0a:30:23:16:9c:7d:62:59:07:52:
5b:16:ee:ab:62:c2:da:df:f8:ea:2b:3c:df:ff:79:
3b:23:00:28:54:06:24:01:6b:fe:d2:20:e0:98:7b:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:01:8F:72:AE:88:3D:EA:B4:37:E2:43:D1:DB:BE:88:11:47:EC:48
X509v3 Authority Key Identifier:
keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:85:cc:df:b5:96:56:f3:00:2f:c2:fa:ec:86:b8:0d:5a:73:
ad:85:01:ae:6d:13:c5:85:b3:23:71:c8:56:f3:ec:d4:f8:6e:
d6:89:4a:83:87:9d:4d:89:71:01:4d:ac:49:c5:6e:42:1f:aa:
ec:23:0e:c7:97:b8:82:81:09:30:ae:1d:1c:93:42:9d:bd:81:
63:ec:26:05:01:2a:2e:71:76:f8:94:0e:98:c1:68:f0:c6:d6:
5e:14:d1:86:6f:f8:c4:32:f9:f9:01:d7:67:e2:49:94:0c:db:
1b:db:64:27:0f:6f:63:f1:c9:7e:9b:17:48:ae:c5:7e:c0:02:
00:6c:0d:0a:c9:76:fb:51:a4:f4:8c:11:9a:ff:04:dd:5f:9f:
7f:29:83:b9:56:64:a7:4c:0e:4e:e2:88:3c:f6:9a:50:64:69:
a6:de:5c:d1:5b:e1:f6:63:4b:09:47:0f:59:90:de:9b:91:e9:
e2:25:a0:59:56:6f:b3:d3:7b:c6:d9:c5:4d:72:6e:d1:0c:ea:
0c:a4:f2:c4:0c:9d:b0:2f:d4:10:7a:70:42:0e:9c:43:13:c0:
dd:7b:72:c7:e3:ac:1f:bf:c0:cb:e8:7c:f6:25:4a:65:c4:10:
88:a9:77:a3:17:ea:5b:bc:f0:38:fc:d5:b5:03:0c:90:c6:74:
b3:ff:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:44:53 2026 by rpki-client