
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json)
Hash identifier: 6MyFioF8nGsVR7guHhwD3+u1W18h+/eE/50Fo0spLcs=
Subject key identifier: 24:4F:7D:DF:23:87:1D:2B:0B:E7:15:3D:08:99:DB:EB:D7:10:AE:B9
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial: 08C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
Manifest number: 08B3
Signing time: Sat 04 Apr 2026 20:15:44 +0000
Manifest this update: Sat 04 Apr 2026 20:15:44 +0000
Manifest next update: Sat 11 Apr 2026 20:15:44 +0000
Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: LHCyCMjtz/50zIjOmc3bJ/I6jIFzKpgO4PW7WBht5hQ=)
2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: hgHBm4hp3RapLpi/uDm+lqvL2Jv07HJ2pVNo82bX6vM=)
3: CCB2690EED0B11F0949792B43C6F56BC.roa (hash: CZgH9sRalQIh6CRftMF2d66cWrAC6h6CJtvjvDnCQhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Validity
Not Before: Apr 4 20:15:44 2026 GMT
Not After : Apr 11 20:15:44 2026 GMT
Subject: CN=69d17170-c12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bb:97:dc:e9:03:61:f6:4c:10:f6:42:99:31:
03:46:2b:99:72:ea:39:60:10:ec:40:dd:64:dd:0a:
86:d5:2b:5c:f7:c9:cd:2b:b5:16:d8:a2:ea:7a:b9:
fd:94:16:ee:2a:3b:be:af:df:04:7d:50:09:77:f5:
2b:06:83:47:3f:20:70:2e:b5:94:48:90:0b:28:ef:
79:fe:41:d1:77:d7:46:7a:59:8a:6c:75:49:05:13:
46:83:53:01:99:d4:20:75:13:7f:cf:23:15:6f:db:
06:47:89:fa:be:4a:66:28:17:43:5c:22:c7:2f:65:
e6:f0:47:7e:d8:84:db:b6:b8:de:a2:40:dd:79:96:
78:fa:e2:5c:73:dd:91:8f:cb:c1:36:6e:02:13:b4:
1f:b0:84:e1:1b:6e:1b:32:f3:60:5a:a6:ac:11:82:
2a:6d:13:7f:1b:8d:24:64:ea:b7:59:5c:1c:b5:55:
59:7a:3b:20:a0:1c:6f:83:8e:a9:ea:40:f0:c7:78:
b3:17:93:31:e2:f4:74:b5:54:07:ff:27:23:95:ac:
f1:bb:f6:7c:3f:15:df:9b:89:cc:d0:fb:55:7a:7a:
27:89:b6:46:39:87:1f:17:2e:85:52:70:e0:8b:d1:
e2:a0:37:98:2c:e6:09:f8:50:4c:cd:73:09:84:44:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:7D:DF:23:87:1D:2B:0B:E7:15:3D:08:99:DB:EB:D7:10:AE:B9
X509v3 Authority Key Identifier:
keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:d6:e5:a5:e9:5a:50:e2:67:8f:db:e3:61:fd:ba:46:74:00:
e1:97:84:a2:7a:a8:ca:7c:63:42:c8:b8:15:b9:46:ba:a6:55:
d4:40:b9:de:dc:d1:c1:ac:bb:42:2f:35:61:85:e1:07:bb:0c:
74:4f:d6:66:1f:c7:14:df:b2:2e:f3:25:2b:57:5f:07:67:9f:
dc:00:b1:4d:31:d3:f1:5e:e6:26:1c:50:a4:38:6f:88:ae:31:
d3:50:2a:b3:48:e0:3c:ad:57:6f:96:d2:5c:ac:b6:e0:3f:57:
8c:65:f6:94:6e:a9:d6:94:75:98:f8:4e:97:f9:3f:f9:12:09:
39:41:ca:84:10:3f:eb:a8:ca:dc:e5:99:2a:ea:03:62:91:85:
9b:c3:24:d5:76:bd:47:30:d2:e5:4a:b5:f7:e3:b5:45:91:c9:
a9:b3:21:9b:f1:44:fe:fa:04:20:20:a0:c9:b0:ef:f1:2d:bc:
ab:aa:df:7c:45:00:8c:e3:37:f6:19:14:60:7c:ee:82:65:89:
4d:ad:a9:98:47:39:6d:8c:c9:89:5c:ce:53:41:ba:39:74:35:
cf:44:17:49:59:0d:3b:d9:d4:fb:f6:a5:9f:13:4b:69:f9:b0:
e1:3d:d9:ce:32:db:2c:05:d3:80:bf:58:d6:da:8d:19:36:3c:
aa:0f:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:13 2026 by rpki-client