
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json)
Hash identifier: tarzUOsY4ixzco8p48FoK5IWAQ7xdfA0CmiVF9e0TeA=
Subject key identifier: 84:29:B6:18:CE:EC:7F:8A:87:2A:80:83:74:9E:34:F7:91:86:03:E6
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 1455
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
Manifest number: 1413
Signing time: Sun 08 Mar 2026 16:45:43 +0000
Manifest this update: Sun 08 Mar 2026 16:45:42 +0000
Manifest next update: Sun 15 Mar 2026 16:45:42 +0000
Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: /McIWZyKcWNHxzqahIjpW0PrD579jRr+DnKGH5pv8zI=)
2: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: FRQ+DT10D+zkaCvxI+Qd7phB0uQvPJfA96uHFNE/wXA=)
3: 98FB9AA812EB11F1974F37D30E3D8C67.roa (hash: Se0I8eDDaC/8yhzniql+f7h2soMxMsS+mHw18desYKc=)
4: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: eguoD2KwCEeVtfvLaJuhvGErHeJK8RyABQd8zfSveG4=)
5: 99A1A6E612EB11F1974F37D30E3D8C67.roa (hash: IHrAProFNEBmzzxFvkgejVqjw20u0zA2ggmfDoxw1nc=)
6: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: eMdCwd4thZUd7vQOqxG8t2aPfsobCFO0nB9eD759A1M=)
7: 2191F8C8161E11F1ABA6B0B1313D8C67.roa (hash: 4BqdekGP6TOJvlcxDVIKX748VvIpKr54ejupCldnA4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 16:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5205 (0x1455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Mar 8 16:45:42 2026 GMT
Not After : Mar 15 16:45:42 2026 GMT
Subject: CN=69ada7b7-a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:2e:d4:b5:05:3e:1a:18:b4:7b:9e:ed:8f:
5c:95:3f:76:e4:64:e6:91:87:55:42:89:bd:8a:55:
52:ea:a9:21:cc:4c:32:27:56:eb:3e:00:89:df:96:
37:c5:80:5a:87:15:93:24:d4:98:2f:c7:6b:fa:13:
57:78:bf:04:fd:6f:ef:d4:7e:dd:3c:61:e5:c0:9f:
aa:54:a6:bd:26:b7:7a:a7:f1:41:b1:60:cb:4f:3c:
e3:88:df:bf:28:99:1a:54:af:83:30:81:d2:2b:38:
05:74:1a:8a:f5:19:ff:6e:66:40:db:7f:14:3a:0c:
8c:0b:0e:0b:e3:ca:7d:a4:36:36:64:c2:49:f8:99:
17:71:19:a5:41:74:61:4e:56:6c:1a:a5:50:e8:14:
1d:72:96:4a:4f:51:69:9d:47:a3:e5:74:c8:f7:1d:
2b:ab:43:e0:4c:6e:88:2f:9d:31:3b:2e:d6:83:6b:
85:a5:92:07:50:d3:5e:9c:a8:4d:88:73:76:81:7d:
0f:b1:42:b9:76:2b:97:82:33:40:d6:40:09:84:1f:
b7:14:9b:c9:82:e6:86:4a:04:b3:0a:63:69:8b:dd:
6a:fa:f0:b3:66:23:77:d5:0c:e8:c9:31:46:bf:13:
50:ca:63:6e:cd:69:d2:b9:13:07:29:61:cb:9a:79:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:29:B6:18:CE:EC:7F:8A:87:2A:80:83:74:9E:34:F7:91:86:03:E6
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:81:02:69:9c:da:8e:00:05:03:64:f7:38:fb:ac:7c:be:56:
7d:5b:21:61:6c:ab:27:7d:05:1d:23:96:23:a6:65:f3:a5:1b:
13:67:b8:ee:0b:a3:67:78:19:c0:ad:5d:8d:fb:8f:c9:25:35:
b5:77:02:0d:d7:55:14:87:ee:33:10:90:e9:f0:95:93:7b:d4:
ca:1e:4f:04:c8:94:25:c4:f1:15:36:43:96:79:e6:e5:cd:46:
24:95:ba:d9:63:40:ff:a7:ba:5f:ba:4c:54:dd:92:95:5a:2b:
36:18:44:a8:5b:5c:e3:ff:8c:c7:00:96:9c:b5:d5:f4:5f:92:
b7:25:1a:ca:97:3a:cf:52:5f:7d:f0:2e:8e:4e:39:6d:64:60:
ec:94:9b:0c:c4:9e:df:62:2f:a7:4a:ec:5b:b6:9f:11:45:dc:
9d:46:68:4b:c7:84:ad:ad:31:95:98:da:4c:23:8a:73:ce:ed:
8a:9f:69:8a:97:4e:08:bd:e8:17:86:99:95:e2:cf:a3:ff:86:
8f:c6:19:8c:c0:a5:07:f8:ab:da:79:24:83:84:54:16:aa:54:
61:03:cb:12:32:7e:fe:a8:cd:eb:e1:75:cb:49:02:71:45:47:
80:0d:d2:e1:5a:77:ae:76:77:32:ef:15:31:82:a1:c2:39:bc:
86:62:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 04:40:31 2026 by rpki-client