
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier: 2e/K+nvskHfZGV1xbtBMfLyeqwCeel7iY4fKT9H9OM4=
Subject key identifier: 3C:93:CC:AC:FF:45:58:13:71:04:11:A0:8E:C8:9D:E5:FB:4C:AF:71
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number: 01EE
Signing time: Mon 19 Oct 2026 03:58:29 +0000
Manifest this update: Mon 19 Oct 2026 03:58:28 +0000
Manifest next update: Mon 26 Oct 2026 03:58:28 +0000
Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: YtB+EZxa2MOJj1OFYuzv57yJjjcM+SOJ7IuYnTZ8L8g=)
2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: mDopMfVTaRsFnm6rlLIEGyxqISgf4DxErZsfORfZaA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 03:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Validity
Not Before: Oct 19 03:58:28 2026 GMT
Not After : Oct 26 03:58:28 2026 GMT
Subject: CN=6ad59565-e250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0f:97:95:53:4a:bc:86:cd:87:d8:c9:34:cc:
9e:33:e9:f6:34:19:85:80:c8:61:1c:d6:b5:cb:e2:
be:ee:ab:7e:bc:0f:c8:9b:cf:da:2f:2f:b1:13:73:
52:a4:c2:cd:ab:71:3f:3b:c9:e8:b8:bb:8d:7c:2b:
3f:75:3a:f0:d0:f1:4f:56:94:0a:2b:c2:5f:4d:98:
15:5a:3e:54:ea:ca:4e:77:ef:09:ba:4e:7c:a6:5a:
fe:ff:c7:47:10:5d:07:d4:2d:f4:e7:05:b0:6c:dc:
48:a9:ef:48:5b:6a:e5:3d:61:5c:5d:6b:45:99:cc:
45:92:e8:9c:97:6c:ff:c8:cc:11:e9:0b:b2:3b:8c:
e7:f6:83:b0:12:fb:8e:26:c3:6b:c3:c6:0b:06:0b:
d3:7e:9f:17:f9:20:8e:2e:bc:5f:fe:84:97:5a:65:
20:ef:52:6c:d8:57:7c:a8:b7:38:bc:8a:88:7f:6c:
15:6f:86:6e:e1:b2:69:cd:6c:2f:8e:72:12:28:a8:
49:fb:1a:58:93:89:78:54:c4:2e:b0:a6:86:88:c9:
4c:c4:26:64:73:72:84:72:61:12:ca:3c:e2:fa:98:
3e:70:fe:57:4f:01:d3:16:61:fd:37:c9:87:82:34:
34:a6:57:45:47:f2:ac:ee:45:7e:fc:b3:f8:1a:7b:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:93:CC:AC:FF:45:58:13:71:04:11:A0:8E:C8:9D:E5:FB:4C:AF:71
X509v3 Authority Key Identifier:
keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c2:28:41:af:52:51:bd:c0:01:1a:1c:53:7f:ee:d7:a7:eb:
57:57:a9:72:16:c8:2c:87:1c:d2:1c:a2:9a:7d:83:70:a7:03:
cb:9e:8a:37:91:5f:a9:a6:bb:7b:14:cc:1a:7e:f1:6e:5d:6e:
3f:62:9d:4e:2f:58:2c:cd:07:6f:54:45:5f:7c:f0:f2:ec:b6:
f1:02:b0:54:92:1f:bf:c8:91:f2:05:4a:8c:cd:ff:d0:7a:5f:
b4:22:f9:32:3b:5c:ff:f1:a5:2b:ed:99:dd:a6:5a:14:a3:fd:
98:9c:98:06:b3:e6:b6:68:9b:3e:af:a5:45:2f:db:b7:e8:64:
3d:56:b8:02:59:c1:0f:2b:94:5d:64:93:76:4b:a9:ae:78:cc:
0b:16:3f:90:3e:99:0e:dc:c5:32:ab:db:31:6a:9b:1c:e9:ee:
bc:55:16:f7:03:7d:19:44:b5:b3:ff:51:87:a4:e1:0b:c6:db:
b7:f9:19:67:99:90:97:03:fd:c1:5c:1a:8f:0d:4c:f3:51:df:
09:a3:87:62:28:21:f5:1f:d1:32:1e:b9:5e:53:0a:5a:5e:e0:
4a:9d:38:48:3c:a2:82:ea:72:1b:c4:1c:2b:61:26:ad:60:f5:
7c:2e:57:13:4b:a1:32:34:f7:f7:3b:4e:ff:6a:de:75:c7:ec:
5a:cc:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:16:54 2026 by rpki-client