
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json)
Hash identifier: 5xsXr9WDbOr/yYAkDA+rYnflnXOQRc4ijDYLRqI9g9U=
Subject key identifier: 0D:6F:F7:2D:8D:2E:BA:73:00:AC:2D:9A:78:7B:8A:04:C5:AF:A7:EF
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
Manifest number: 0139
Signing time: Mon 27 Apr 2026 05:17:22 +0000
Manifest this update: Mon 27 Apr 2026 05:17:22 +0000
Manifest next update: Mon 04 May 2026 05:17:22 +0000
Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: hVICzXZ9Zp5w1mFoNIP1U/Ump5qSDVTSFpJZBbv1p4k=)
2: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: dguyqJJlfQdrZxS7gBVnP+fhLGVgFc3v59CnlE7InbE=)
3: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: VacfDcobXZwt2pK6XAvRhxuJBdzslSZAkq50qpH5PGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 05:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Validity
Not Before: Apr 27 05:17:22 2026 GMT
Not After : May 4 05:17:22 2026 GMT
Subject: CN=69eef162-5ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:64:d4:ad:f3:7b:56:db:2d:b5:ac:19:18:
34:0a:1c:f4:47:c7:f7:0a:db:28:3e:44:20:84:25:
9f:2a:26:e9:f4:a1:a7:e0:4a:0c:cc:4e:a6:37:65:
53:6d:7f:cb:f5:21:a6:a2:8c:eb:7a:4d:be:53:cd:
20:d7:32:5c:09:6b:4e:30:de:e7:1f:f5:f2:ed:57:
1f:ec:66:37:3e:3e:67:34:fe:1c:8e:1b:3a:ac:6c:
69:fe:4a:de:78:48:cc:c3:f6:13:99:fd:f7:b0:f2:
e4:ba:ab:b2:f5:14:2a:4b:10:b9:be:64:3e:ae:70:
eb:1e:b5:9a:e7:6e:a8:a7:00:e3:5c:97:c8:cb:4a:
79:e0:60:dc:e0:7a:cd:5f:dd:e2:0c:e6:7c:34:b1:
d6:11:47:bf:da:f3:3f:78:97:e3:ca:a5:6f:e6:fa:
66:4f:78:4c:0d:96:5c:9a:74:ad:02:c2:5b:b0:f8:
f9:6f:70:5e:87:b8:5e:05:06:9a:0a:1f:59:26:0e:
12:a3:13:80:1b:13:b4:e2:45:2d:38:44:55:e1:8f:
d9:c9:a5:83:eb:4b:f3:91:76:51:05:53:8a:98:7a:
cc:c6:60:74:c6:22:29:b7:62:f9:e7:d0:67:ec:73:
d6:56:a5:e8:b2:4d:2e:03:20:ce:da:b6:0e:4d:56:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:F7:2D:8D:2E:BA:73:00:AC:2D:9A:78:7B:8A:04:C5:AF:A7:EF
X509v3 Authority Key Identifier:
keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:62:be:f6:75:2e:03:cf:12:8a:3e:c2:82:07:12:27:fb:07:
17:66:c3:5e:e7:fd:08:83:fd:01:ee:77:ab:b9:a7:af:2b:51:
d6:50:79:8c:41:ef:7c:82:91:f4:e0:6b:d4:44:f7:4d:0e:08:
d2:7d:76:0f:8f:d2:26:fd:b2:d8:b4:00:a3:50:51:23:4d:fc:
b3:87:7d:d7:af:56:14:a2:3c:a1:3d:d4:fa:0a:25:e1:3c:a6:
17:b3:c6:77:9e:23:d4:92:c0:f2:85:e2:23:24:57:27:24:ed:
55:67:77:22:4b:e7:80:64:30:55:76:51:c2:7c:16:75:dc:2e:
d8:43:03:3c:d3:65:06:82:be:cd:1e:68:d6:86:55:dc:cf:b9:
4e:64:8e:7a:72:46:d6:79:df:2f:f9:b1:ea:2f:ce:cb:83:fe:
f1:5a:40:e1:a1:23:ef:23:04:8d:b1:2b:09:42:a7:15:c8:59:
26:0e:c1:d5:e7:e6:31:38:8b:ac:49:62:70:e8:b9:bf:6a:6c:
c6:0b:ce:c5:c7:34:e8:54:ad:db:6c:4c:bd:79:c1:ee:f0:e0:
7c:df:f2:0c:42:9a:e9:ce:36:32:e7:18:0d:47:78:cd:73:53:
8c:2d:80:98:df:15:e2:f2:d5:4b:fc:ef:46:2e:07:3c:50:63:
f1:a0:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:42:07 2026 by rpki-client