
$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier: Y57kFNtqmA+OQ5LV+abe2gBlLoW7AQJmBEiBH6x2eBI=
Subject key identifier: 49:2C:1B:23:8D:B6:E5:02:C6:C1:D0:24:8F:0B:2E:9A:D4:91:82:11
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number: 0178
Signing time: Tue 03 Mar 2026 04:18:22 +0000
Manifest this update: Tue 03 Mar 2026 04:18:21 +0000
Manifest next update: Tue 10 Mar 2026 04:18:21 +0000
Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: TK34kuuWenpeB486lQiwA1b8FYwdwQ/T0Aw9JDq3Opo=)
2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: rwz3fq3MaRlSnA/1ObGPfFXAkirRwtHLWQadfcMjbxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Validity
Not Before: Mar 3 04:18:21 2026 GMT
Not After : Mar 10 04:18:21 2026 GMT
Subject: CN=69a6610e-6a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:3c:62:79:eb:0b:18:68:c7:71:1d:7b:28:
33:eb:7b:cc:e2:f4:c0:e6:08:0f:0a:c7:85:9a:0b:
19:f8:14:ac:42:46:5d:17:f0:95:c8:07:42:76:92:
1b:68:ee:af:ca:d9:47:16:7c:44:5b:5a:92:21:06:
c2:04:73:71:1f:f6:95:8e:0e:47:c2:e2:87:8c:5d:
49:92:dc:c1:d0:eb:91:92:9c:dc:d4:9b:25:a4:bc:
0c:9e:5f:ba:53:7e:f6:20:d8:7d:18:03:d8:c6:a2:
4f:42:37:cc:e8:93:c8:3e:7b:4e:4b:d9:b4:25:d8:
aa:2c:78:e3:b1:dc:9c:43:d3:b2:8a:05:bc:bf:f1:
55:aa:bd:c3:24:5c:15:53:f6:8b:47:84:22:2f:ce:
05:8c:44:66:7d:f4:05:87:8c:e0:6c:31:6e:fb:a1:
91:16:98:19:5e:3e:47:4f:08:bc:67:13:8d:cc:a9:
df:e2:40:40:62:bf:37:4b:f6:d4:12:e1:fe:a6:8d:
67:50:b9:7f:92:0c:7d:56:db:8a:c6:26:7b:f3:6b:
4c:7e:6c:b4:58:ef:ad:4b:35:82:0a:51:e1:88:b7:
07:fb:ae:a8:d7:8a:63:84:d0:3c:52:32:c4:df:76:
8f:64:bf:98:89:ec:c9:b0:93:f9:9c:88:ae:dd:55:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2C:1B:23:8D:B6:E5:02:C6:C1:D0:24:8F:0B:2E:9A:D4:91:82:11
X509v3 Authority Key Identifier:
keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:ce:39:4d:48:8f:1d:1a:e9:05:56:31:cf:29:07:32:8b:4e:
94:62:8e:1f:a8:03:79:87:1b:c8:71:9d:9d:92:91:a9:43:a9:
2a:c3:48:02:01:c2:35:5d:54:a2:bf:28:28:68:92:83:a4:bb:
dc:18:46:0a:7e:60:e3:2b:3c:d8:c0:c2:56:25:79:5d:a0:08:
ca:ac:60:0b:16:a0:0b:77:85:ac:52:eb:d6:d6:ce:ee:84:3d:
8d:37:b0:c9:5a:af:ab:ad:1d:b5:3f:31:cc:d5:7a:71:e5:2f:
47:10:ea:0a:9a:de:ee:0b:b1:51:f3:a5:2f:18:32:73:f0:13:
d4:ad:77:21:2c:39:6b:fc:d9:aa:f2:03:11:0f:c2:90:0d:1a:
cb:45:b6:78:dd:06:42:6e:56:02:1b:53:40:c6:81:de:8d:da:
6c:3b:fd:b7:2c:b6:c3:dc:64:c6:3b:8d:34:a8:c4:28:15:96:
54:65:9d:56:02:ba:60:52:81:08:4f:d9:4d:c4:66:1f:ef:a5:
a4:80:68:f5:01:bf:27:f0:81:71:ac:a2:4f:85:6f:4b:fe:32:
57:08:95:ed:f6:ae:fb:bd:8d:b3:d3:61:20:0d:bf:41:b9:23:
d7:bb:92:e8:68:32:9f:72:e5:65:e7:2f:f5:8d:04:02:55:8a:
31:08:84:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2
RTdGQTUzNUUwHhcNMjYwMzAzMDQxODIxWhcNMjYwMzEwMDQxODIxWjAYMRYwFAYD
VQQDEw02OWE2NjEwZS02YTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3BM8YnnrCxhox3Edeygz63vM4vTA5ggPCseFmgsZ+BSsQkZdF/CVyAdCdpIb
aO6vytlHFnxEW1qSIQbCBHNxH/aVjg5HwuKHjF1JktzB0OuRkpzc1JslpLwMnl+6
U372INh9GAPYxqJPQjfM6JPIPntOS9m0JdiqLHjjsdycQ9OyigW8v/FVqr3DJFwV
U/aLR4QiL84FjERmffQFh4zgbDFu+6GRFpgZXj5HTwi8ZxONzKnf4kBAYr83S/bU
EuH+po1nULl/kgx9VtuKxiZ782tMfmy0WO+tSzWCClHhiLcH+66o14pjhNA8UjLE
33aPZL+YiezJsJP5nIiu3VWrCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEksGyON
tuUCxsHQJI8LLprUkYIRMB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5
NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0
ejByYU5GcUNpSzF1ZjZVMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmM45TUiPHRrpBVYxzykHMotOlGKOH6gDeYcbyHGdnZKRqUOpKsNIAgHCNV1U
or8oKGiSg6S73BhGCn5g4ys82MDCViV5XaAIyqxgCxagC3eFrFLr1tbO7oQ9jTew
yVqvq60dtT8xzNV6ceUvRxDqCpre7guxUfOlLxgyc/AT1K13ISw5a/zZqvIDEQ/C
kA0ay0W2eN0GQm5WAhtTQMaB3o3abDv9tyy2w9xkxjuNNKjEKBWWVGWdVgK6YFKB
CE/ZTcRmH++lpIBo9QG/J/CBcayiT4VvS/4yVwiV7fau+72Ns9NhIA2/Qbkj17uS
6Ggyn3LlZecv9Y0EAlWKMQiEVA==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:08 2026 by rpki-client