
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
File: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json)
Hash identifier: 9a3+TB3LYxss8eLeT/MNkYh6ir87LI/LkhztNZhYro8=
Subject key identifier: 06:C5:7C:73:27:C2:CB:F1:DE:75:B6:64:CD:E7:A4:B4:04:B2:E7:8B
Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
Certificate issuer: /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
Manifest number: 36
Signing time: Tue 03 Mar 2026 08:12:14 +0000
Manifest this update: Tue 03 Mar 2026 08:12:13 +0000
Manifest next update: Tue 10 Mar 2026 08:12:13 +0000
Files and hashes: 1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: y4q+gCp1CVqctZETTtYTSCgpRVJTxKOvhWhVYtvWECg=)
2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: qhmDYrXSka0BnnAzbzb+vh6r8WiWcCMdpJjXHDEOqUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Validity
Not Before: Mar 3 08:12:13 2026 GMT
Not After : Mar 10 08:12:13 2026 GMT
Subject: CN=69a697de-4495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:62:36:54:f9:67:24:08:53:e7:4f:ae:6b:75:
59:85:50:00:87:a6:5a:b5:2c:d3:ef:27:e0:ac:d5:
4f:65:94:d4:30:2b:3a:c4:41:34:6c:d5:ca:2c:fd:
40:af:ae:ff:e4:5c:a5:e5:7f:4b:74:2b:f4:97:8f:
5a:0c:34:d5:46:e0:8d:20:5d:26:a3:61:bc:c6:3a:
7d:cc:10:8c:06:d9:21:09:30:63:7a:50:fb:23:a0:
f1:09:13:63:28:42:ae:0e:b7:37:7b:55:97:8f:56:
99:a8:69:ed:01:c8:4e:6b:82:e4:ae:2b:83:9d:a6:
e0:99:2e:b9:02:b4:fe:28:9f:80:f3:f1:1a:e0:fd:
71:91:83:60:d7:8c:08:5f:c2:b4:98:81:7e:37:f7:
0e:f7:08:17:2c:2c:49:f2:f4:a7:42:20:b2:30:a6:
5a:60:4a:b4:22:6b:ee:e3:4d:00:6f:6a:e1:63:8a:
36:11:95:ea:88:fb:a7:0b:d4:28:01:06:24:3f:91:
d9:0c:d4:71:81:65:99:33:5a:f0:a4:0a:1e:d6:98:
35:6f:8b:1a:5c:2e:be:5a:a0:4e:34:da:6c:bd:c8:
94:22:e3:e8:9a:ec:58:ea:22:a2:5c:92:b3:48:cf:
e0:2e:fe:34:27:64:b0:34:43:2a:21:4a:49:e5:0b:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C5:7C:73:27:C2:CB:F1:DE:75:B6:64:CD:E7:A4:B4:04:B2:E7:8B
X509v3 Authority Key Identifier:
keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:f9:6d:cc:83:89:22:65:a0:58:cb:a5:31:df:e0:71:1d:91:
7e:59:cf:84:7b:ce:c6:7b:e2:b7:08:43:c8:8a:fd:6f:34:e5:
f9:41:14:b5:b8:45:7c:c7:53:1d:dd:b3:78:c1:4f:85:88:58:
43:f1:ab:c4:45:8e:56:cc:64:4b:33:44:5b:bb:16:58:29:09:
db:4c:b5:1b:0c:b3:60:ea:ba:40:21:31:87:52:5f:f6:2e:38:
bd:24:42:b7:6b:94:83:52:ac:dd:69:9a:a6:9c:52:03:23:65:
43:00:90:1f:25:47:6d:26:c2:28:9f:bb:29:be:ba:0f:31:6e:
2b:c6:5e:75:d2:78:80:02:bc:d9:51:bb:96:6f:7f:29:fb:29:
07:f9:dc:5d:89:26:3d:0a:90:58:46:4b:ab:ad:5a:30:2c:af:
a9:7e:b3:8b:46:51:9d:15:d9:ce:03:82:a8:db:48:cf:5f:5a:
30:33:2a:0e:bd:f0:f7:04:42:bb:e6:97:3f:28:bd:d3:66:37:
15:34:a4:51:ef:ef:66:37:e1:7a:ad:00:a9:e8:80:ff:50:e1:
40:3c:3d:3b:fd:b6:fb:fc:ac:ed:7b:4f:7e:f7:d7:f3:1a:32:
6c:6b:b5:5a:e7:d7:71:23:29:4e:39:ca:7d:67:70:bd:4b:62:
4c:d3:86:86
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Q0UxODExMC8GA1UEBRMoQ0Y5QTNGMzE2NDgzQTJBNzk0NDExRDU5MTQ2RjlGQzU2
NDA5MTk5NzAeFw0yNjAzMDMwODEyMTNaFw0yNjAzMTAwODEyMTNaMBgxFjAUBgNV
BAMTDTY5YTY5N2RlLTQ0OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD1YjZU+WckCFPnT65rdVmFUACHplq1LNPvJ+Cs1U9llNQwKzrEQTRs1cos/UCv
rv/kXKXlf0t0K/SXj1oMNNVG4I0gXSajYbzGOn3MEIwG2SEJMGN6UPsjoPEJE2Mo
Qq4Otzd7VZePVpmoae0ByE5rguSuK4OdpuCZLrkCtP4on4Dz8Rrg/XGRg2DXjAhf
wrSYgX439w73CBcsLEny9KdCILIwplpgSrQia+7jTQBvauFjijYRleqI+6cL1CgB
BiQ/kdkM1HGBZZkzWvCkCh7WmDVvixpcLr5aoE402my9yJQi4+ia7FjqIqJckrNI
z+Au/jQnZLA0QyohSknlC0HHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBsV8cyfC
y/HedbZkzeektASy54swHwYDVR0jBBgwFoAUz5o/MWSDoqeUQR1ZFG+fxWQJGZcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDRTE4L0IzNzUyQUIyQzY4
MjExRjBCNzZFMTc0NkM0RjlBRTAyL3o1b19NV1NEb3FlVVFSMVpGRy1meFdRSkda
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvejVvX01XU0RvcWVVUVIxWkZHLWZ4V1FKR1pjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND
RTE4L0IzNzUyQUIyQzY4MjExRjBCNzZFMTc0NkM0RjlBRTAyL3o1b19NV1NEb3Fl
VVFSMVpGRy1meFdRSkdaYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAW+W3Mg4kiZaBYy6Ux3+BxHZF+Wc+Ee87Ge+K3CEPIiv1vNOX5QRS1uEV8x1Md
3bN4wU+FiFhD8avERY5WzGRLM0RbuxZYKQnbTLUbDLNg6rpAITGHUl/2Lji9JEK3
a5SDUqzdaZqmnFIDI2VDAJAfJUdtJsIon7spvroPMW4rxl510niAArzZUbuWb38p
+ykH+dxdiSY9CpBYRkurrVowLK+pfrOLRlGdFdnOA4Ko20jPX1owMyoOvfD3BEK7
5pc/KL3TZjcVNKRR7+9mN+F6rQCp6ID/UOFAPD07/bb7/Kzte09+99fzGjJsa7Va
59dxIylOOcp9Z3C9S2JM04aG
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:55 2026 by rpki-client