
$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier: x2hVE0gshAZBBu1GYUF4LYWetmf14mwX5bwtTw01HGo=
Subject key identifier: C9:7F:79:F6:75:65:AA:15:4A:6E:3B:01:60:77:23:61:18:36:55:C6
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number: 022D
Signing time: Tue 21 Apr 2026 02:36:34 +0000
Manifest this update: Tue 21 Apr 2026 02:36:33 +0000
Manifest next update: Tue 28 Apr 2026 02:36:33 +0000
Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: o+lWoywo3thHcjjNS9SxpUtBD8UN0mhQPHjpI4aYRYQ=)
2: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: scwVpzCeBkgVHdEK5Uge9iAKaQk6Xc85PZeD5yXXw14=)
3: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: /BmEORI4Sm9n04Z4+KTIuZ6zRVPGTZM+9NIuoZsaL/0=)
4: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: wnHWbEnfjZ63RYB0ismM9UJFoOh9ccy7t7IsH2bosjo=)
5: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: xOcV+Ws+Sc04FIxL3ePl5cuu7X8jyPVzdlvtQncOg3Y=)
6: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: DCEbqUc1yheRBTgF9eKK2YLM6+N73DDKwX1+nfluYt8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 02:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Apr 21 02:36:33 2026 GMT
Not After : Apr 28 02:36:33 2026 GMT
Subject: CN=69e6e2b2-f910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:f1:1e:35:e5:5b:69:37:83:2c:51:4f:af:
ea:86:67:bc:8a:26:b0:c7:03:a1:5a:e5:6a:06:24:
49:22:b8:65:22:77:72:aa:40:f0:a1:30:a8:15:87:
51:29:16:6b:19:a8:e4:e0:f4:72:27:09:e9:83:97:
a7:09:da:29:aa:94:8c:6e:dc:2f:63:ec:4a:21:52:
5a:52:a6:2e:55:16:7a:8b:37:01:a5:c5:20:44:f3:
54:c3:d2:af:27:b3:80:a9:bb:96:9d:32:1d:a8:19:
22:ff:fa:cf:9d:aa:c0:7a:15:35:77:40:01:a3:4a:
32:79:21:4e:fd:47:a1:a5:07:ab:9a:d8:88:c2:e4:
6a:1c:c7:97:3b:c0:6d:f9:74:9d:06:3e:9b:f1:0b:
fa:e9:ab:79:64:6d:22:1c:65:fd:a9:47:ca:98:ac:
e3:b1:4d:68:6f:a3:2f:cf:b5:f7:cd:32:25:2c:b7:
63:09:3f:69:d1:35:90:f4:6c:57:82:c1:19:e9:2d:
40:29:ab:a0:42:4f:e5:9b:51:93:04:07:d9:57:dc:
a4:ab:4e:72:15:e3:c6:42:71:4c:25:8f:82:79:f9:
37:5e:30:ca:21:82:67:95:71:05:3e:8e:35:c8:9c:
07:08:01:51:8b:38:ab:56:ef:44:b6:74:cd:00:42:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7F:79:F6:75:65:AA:15:4A:6E:3B:01:60:77:23:61:18:36:55:C6
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d5:90:ac:10:fc:00:a7:0a:24:53:b1:a1:c7:13:9e:0a:c9:
4e:2d:89:38:0f:75:ae:ee:eb:6c:ed:7f:3c:8e:ac:c4:2b:14:
71:aa:13:7d:08:47:25:43:b7:ba:79:5a:43:bc:a6:a6:c7:a1:
a8:d5:e6:46:51:2a:ed:65:85:28:08:5d:c2:a5:c5:44:96:99:
70:77:56:64:af:29:cd:79:60:6e:a7:a1:9a:db:5f:25:52:84:
3c:f6:db:9f:81:a2:d1:e3:31:30:55:66:7e:52:20:77:0a:5c:
f4:76:68:51:65:8d:fb:eb:31:1c:ed:bd:40:39:a4:c3:82:fb:
3d:94:9e:d7:ef:cc:ac:ed:95:d2:f1:90:13:1d:4a:14:13:1d:
e4:22:60:4e:27:a5:2c:4f:34:bd:2b:81:a2:c9:18:2b:c4:e2:
3f:72:bf:97:5a:46:81:6a:73:5c:77:ca:a6:ba:dc:54:72:7a:
ac:ec:3f:10:66:21:b7:99:38:9a:b8:61:6f:f2:49:5f:25:db:
4f:6f:f5:23:c5:0b:ef:0e:b8:1c:ec:0c:b5:f0:57:b4:dd:0f:
42:30:9d:4d:96:f1:75:a1:2e:35:35:9e:9e:76:09:ea:a5:80:
37:5c:d8:ce:49:49:7f:9f:b8:71:ec:f9:72:4c:f1:82:20:1c:
b1:3b:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 17:29:36 2026 by rpki-client