
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json)
Hash identifier: nG1XbuVLJ+N30hIaGaH5o0tBl0YkDOCuOaou/YpbUSQ=
Subject key identifier: 02:A6:AA:06:3F:49:26:09:54:36:FB:B7:65:FE:F7:E0:64:9D:CB:03
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
Manifest number: 0122
Signing time: Fri 13 Mar 2026 04:43:13 +0000
Manifest this update: Fri 13 Mar 2026 04:43:13 +0000
Manifest next update: Fri 20 Mar 2026 04:43:13 +0000
Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: iLdzEv8Lw6v35LEYd+gour5R3MxVejm3nJHpzE+aLiA=)
2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: VacfDcobXZwt2pK6XAvRhxuJBdzslSZAkq50qpH5PGU=)
3: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: dguyqJJlfQdrZxS7gBVnP+fhLGVgFc3v59CnlE7InbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Validity
Not Before: Mar 13 04:43:13 2026 GMT
Not After : Mar 20 04:43:13 2026 GMT
Subject: CN=69b395e1-5071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:91:18:79:46:e0:be:d4:9e:b6:98:8a:83:07:
9f:f5:5f:1f:0b:d4:d7:4e:11:91:58:ad:a3:c2:9c:
71:bd:2a:a6:8b:55:46:b5:45:f4:54:97:79:cc:91:
1c:b3:b0:66:28:e5:e3:9d:d1:97:6d:05:90:5b:f4:
15:1e:cd:28:d3:cb:97:c8:0a:d2:00:a8:ee:98:7a:
25:81:8c:f6:96:65:55:ef:9f:b2:e7:08:98:55:46:
7c:3a:28:c9:65:ba:9c:34:6c:6f:e0:0d:f8:37:a8:
32:00:26:37:65:4a:04:ec:98:51:b9:34:fb:e6:34:
29:33:d1:92:be:93:0b:a6:ec:bb:00:c6:9b:0f:43:
72:53:2d:70:34:aa:c1:82:f3:4e:1c:bf:d5:f4:d0:
2d:f2:a0:00:50:ec:0d:e6:ae:e5:4b:c7:1b:58:42:
9e:fd:75:34:0e:0a:96:3c:5a:44:cf:05:26:b7:27:
7a:33:f3:77:39:06:c2:72:23:e7:35:0e:6b:85:f4:
ce:b0:c1:54:be:e1:4b:2d:56:1e:f0:e3:f7:d2:b9:
ee:e0:ca:52:be:1a:21:b1:36:2a:8b:9a:4a:02:b7:
05:f4:92:c4:6d:aa:91:6f:a7:d2:2d:d7:02:8b:95:
c7:b8:13:c1:30:49:33:76:dd:ba:c0:e1:6d:dd:39:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A6:AA:06:3F:49:26:09:54:36:FB:B7:65:FE:F7:E0:64:9D:CB:03
X509v3 Authority Key Identifier:
keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:c6:a7:1a:80:0f:f0:ea:78:ad:35:da:f0:77:06:a0:5f:ca:
4e:29:0e:7d:44:90:a2:5a:34:69:ed:c4:19:6e:c3:b4:ff:18:
fc:a2:97:3e:ae:7f:c8:36:6b:b4:6e:70:d9:01:9f:7c:1e:ae:
02:3c:fe:f9:33:88:29:d2:20:2d:d9:02:76:52:f4:58:f8:0b:
fc:7f:b8:a6:ba:d7:37:6d:2b:3b:b0:63:d6:4c:62:d2:28:a3:
51:80:98:b8:b1:2b:4d:89:55:bc:4a:7f:6c:b5:14:52:f8:d5:
de:83:2c:8e:69:9d:a4:8b:57:63:43:a1:34:45:84:62:18:2a:
da:fc:18:d2:5e:ad:ba:c5:76:3d:2b:5b:f5:25:c1:3a:62:2b:
40:34:24:b3:f2:5e:e7:9d:f0:71:7d:98:cf:d8:9e:5e:6e:7c:
66:4f:e8:c5:a7:88:c9:41:9b:a8:d8:21:74:67:54:da:57:99:
20:10:86:a0:d1:d2:3a:67:dc:31:f8:dc:d6:01:c7:0d:1a:0d:
92:2a:06:62:90:2b:22:eb:51:62:f8:8a:db:cc:b0:c6:41:df:
c7:11:ba:68:62:81:72:d4:43:92:68:34:1b:32:c7:4d:d4:1c:
90:ef:da:92:4a:00:01:d5:76:21:c4:86:0c:da:77:e9:7e:2b:
26:f2:78:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 02:23:53 2026 by rpki-client