
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier: A9k1GvYZCAo+XSPuN6S8wSLI9oPbxIaUWaKVyLSFrb0=
Subject key identifier: 14:30:BF:A6:2A:E9:3C:0A:E6:79:A7:BB:57:5B:75:E3:B2:93:E2:79
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number: 64
Signing time: Tue 03 Mar 2026 07:54:16 +0000
Manifest this update: Tue 03 Mar 2026 07:54:15 +0000
Manifest next update: Tue 10 Mar 2026 07:54:15 +0000
Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: KmYGcfHDWvPXLevYpQqpSQF26Sf2+XT2tyH053NGLOA=)
2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Validity
Not Before: Mar 3 07:54:15 2026 GMT
Not After : Mar 10 07:54:15 2026 GMT
Subject: CN=69a693a8-9b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:a6:7f:26:1d:37:95:d3:f1:91:5f:f3:73:
fd:6f:eb:aa:37:f0:4b:76:4c:e6:ff:3c:2c:a4:9e:
21:fe:30:1c:4e:db:ab:03:1a:fd:be:26:38:e5:a7:
ce:a7:0a:a1:e2:98:a4:b2:23:24:cf:bf:16:c5:67:
96:51:2b:96:26:49:c4:a0:52:7d:32:77:8a:b2:de:
dd:32:f8:c2:e3:38:e8:b2:af:12:d7:fa:36:10:29:
ea:ec:cb:48:69:20:dd:d9:48:bf:04:92:07:c2:34:
97:1a:ba:68:f1:af:4f:2c:fb:51:9b:05:ce:51:d0:
d0:68:60:d6:ea:00:aa:4e:58:e8:b3:e5:d9:96:ff:
c5:ba:4c:84:6b:73:d8:ca:b8:fc:99:f9:b1:2b:0f:
9f:87:a2:70:e4:a5:39:35:8d:51:e5:35:93:e7:35:
3b:bc:2c:72:b8:1a:f2:f1:d5:54:26:b6:bc:ba:f7:
f3:0d:2d:6d:9b:b0:c3:ea:0a:36:22:40:79:91:54:
5f:0d:2d:cc:e5:b8:83:70:59:c2:2f:bd:b9:55:1a:
4f:c5:06:78:e0:96:c7:36:26:8b:cc:6e:46:64:04:
61:40:57:96:07:fc:48:eb:fb:18:eb:dd:a9:b1:36:
b4:a2:ab:c8:a1:5b:c0:fe:41:a9:6f:53:8d:0b:09:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:30:BF:A6:2A:E9:3C:0A:E6:79:A7:BB:57:5B:75:E3:B2:93:E2:79
X509v3 Authority Key Identifier:
keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:75:bf:62:6f:fc:27:94:b0:54:f6:3b:4d:f0:a2:5a:02:ca:
ec:b4:f0:1c:58:a1:a5:73:8d:cf:4d:e8:e7:08:ac:ac:6a:0e:
ec:17:6b:cd:3b:4d:c6:92:28:3d:62:6b:e5:34:06:0a:ba:ba:
b0:4b:49:43:e3:20:86:b7:95:b6:b9:fd:5e:23:51:27:43:65:
94:f0:7d:7a:ef:94:df:06:b6:fd:27:1a:57:ba:4f:7e:9c:df:
f4:e1:9a:43:b3:26:a9:bd:ee:1d:f7:e2:af:d0:5a:be:83:a4:
63:92:56:e1:73:a8:7e:5b:4a:c2:5d:48:76:fc:aa:2c:7a:3d:
17:61:38:3a:44:02:3d:df:3a:c8:d1:09:f5:40:83:2b:d6:63:
20:8d:db:f1:be:77:17:0b:84:3f:54:18:3d:73:64:93:46:19:
64:96:27:40:ea:2e:e1:46:63:1e:41:b2:36:89:96:11:3a:0d:
a0:b1:5d:b2:b9:41:92:85:d8:2e:aa:69:b4:e0:8a:54:3e:45:
1a:2d:ad:81:c6:44:e6:16:0a:19:dd:bf:7e:e8:d1:0f:08:18:
05:ff:99:09:f4:d0:d6:55:2b:82:be:18:6b:c1:90:bc:73:c8:
d2:38:13:9e:3e:0a:30:d3:86:c0:37:e5:73:3c:b4:7e:66:05:
fc:0d:de:0e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MEFFRTExMC8GA1UEBRMoQ0M0MjQwNzA3NDEwMzYzNzM1RUJGNkVGQjE5NEZCNjcw
RjM0NUY0MjAeFw0yNjAzMDMwNzU0MTVaFw0yNjAzMTAwNzU0MTVaMBgxFjAUBgNV
BAMTDTY5YTY5M2E4LTliNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDlW6Z/Jh03ldPxkV/zc/1v66o38Et2TOb/PCykniH+MBxO26sDGv2+Jjjlp86n
CqHimKSyIyTPvxbFZ5ZRK5YmScSgUn0yd4qy3t0y+MLjOOiyrxLX+jYQKersy0hp
IN3ZSL8EkgfCNJcaumjxr08s+1GbBc5R0NBoYNbqAKpOWOiz5dmW/8W6TIRrc9jK
uPyZ+bErD5+HonDkpTk1jVHlNZPnNTu8LHK4GvLx1VQmtry69/MNLW2bsMPqCjYi
QHmRVF8NLczluINwWcIvvblVGk/FBnjglsc2JovMbkZkBGFAV5YH/Ejr+xjr3amx
NrSiq8ihW8D+QalvU40LCdRpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFDC/pirp
PArmeae7V1t147KT4nkwHwYDVR0jBBgwFoAUzEJAcHQQNjc16/bvsZT7Zw80X0Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzE4OENBRjA2QTNF
QzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgw
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvekVKQWNIUVFOamMxNl9idnNaVDdadzgwWDBJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw
QUVFLzE4OENBRjA2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpj
MTZfYnZzWlQ3Wnc4MFgwSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB7db9ib/wnlLBU9jtN8KJaAsrstPAcWKGlc43PTejnCKysag7sF2vNO03Gkig9
YmvlNAYKurqwS0lD4yCGt5W2uf1eI1EnQ2WU8H1675TfBrb9JxpXuk9+nN/04ZpD
syapve4d9+Kv0Fq+g6Rjklbhc6h+W0rCXUh2/Kosej0XYTg6RAI93zrI0Qn1QIMr
1mMgjdvxvncXC4Q/VBg9c2STRhlklidA6i7hRmMeQbI2iZYROg2gsV2yuUGShdgu
qmm04IpUPkUaLa2BxkTmFgoZ3b9+6NEPCBgF/5kJ9NDWVSuCvhhrwZC8c8jSOBOe
Pgow04bAN+VzPLR+ZgX8Dd4O
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:08 2026 by rpki-client