
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json)
Hash identifier: Lw/rebgPt01tyGqW0GQP+o7J1jk1ftj0Vms0NJAgBXY=
Subject key identifier: 21:E1:9B:6A:CF:62:CC:0F:E7:02:3C:F1:E3:ED:24:5F:7A:13:DB:AF
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
Manifest number: 0111
Signing time: Tue 03 Mar 2026 05:39:57 +0000
Manifest this update: Tue 03 Mar 2026 05:39:57 +0000
Manifest next update: Tue 10 Mar 2026 05:39:57 +0000
Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: rrPe7koGhE/d6ZjXgz1AKzkbJIRBWNONiLWQ/iNHIqc=)
2: 97A6188EFEAC11F0AB4A61AF656F56BC.roa (hash: yCEj6qPX9EqfGe8wQyMh/zdjEFh0bs/DoKx+c7+TATU=)
3: F9EB418CFEAB11F094E473AD656F56BC.roa (hash: 2I2kxtV9Go+yS4kEarl3OYdWVe9zcH7xNuKQWD2RGXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Validity
Not Before: Mar 3 05:39:57 2026 GMT
Not After : Mar 10 05:39:57 2026 GMT
Subject: CN=69a6742d-e6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:aa:fe:a9:1a:8f:59:f3:bc:33:81:22:b5:
d3:67:fe:80:c2:de:19:58:36:95:4a:12:6a:2f:3f:
a7:18:10:49:02:36:e2:6c:ae:52:98:09:41:59:d2:
f1:e2:63:34:cf:ad:00:08:c9:49:91:38:60:ba:05:
c1:4b:02:2a:df:85:3d:ae:80:ff:f4:56:44:20:b6:
3f:62:4b:6d:b5:0e:ca:e6:89:6c:4a:68:dc:d9:7e:
b3:e0:4d:5d:2c:fd:6c:64:b8:4e:df:b1:4c:fe:40:
08:1b:e5:d3:5d:24:75:bc:f2:06:71:9a:ea:96:8b:
1a:f7:79:93:07:5e:6e:64:6a:39:16:f8:fb:55:99:
bf:21:78:e1:5b:9e:f4:96:aa:51:19:c1:69:d5:27:
9d:5a:d6:97:bc:33:f2:e5:67:72:f4:ac:59:97:35:
0e:eb:c1:4d:75:d5:68:8d:bf:54:56:a9:4d:5b:54:
4d:6a:7f:a5:b1:b9:72:cc:68:2b:49:c1:3f:d9:67:
50:ea:38:cb:d6:40:bc:de:ea:a6:db:8e:d6:67:1c:
ad:40:25:a7:a8:ef:bc:12:6b:39:7e:6a:c7:18:7b:
4b:b5:b6:61:8a:46:b6:0d:0e:56:18:78:6b:14:20:
be:ea:29:64:bd:65:42:4c:f0:ff:76:14:c6:fc:97:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:9B:6A:CF:62:CC:0F:E7:02:3C:F1:E3:ED:24:5F:7A:13:DB:AF
X509v3 Authority Key Identifier:
keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:29:03:ac:76:d2:0a:99:23:1c:e6:bd:58:31:13:f9:8a:45:
3f:32:23:0d:ee:39:ff:e5:30:3b:c1:5b:81:ea:4c:69:51:2d:
af:b6:b9:3f:ee:9f:7f:9f:41:ce:6f:97:5b:50:cd:ea:57:ff:
3d:13:6b:3c:c1:a9:53:40:1b:a2:2c:38:52:65:6e:5c:fb:0b:
86:0c:a5:fe:67:c1:e1:1b:20:85:df:c8:f5:14:49:8e:ab:25:
cc:90:0b:70:c0:e6:ad:e1:d4:2d:d4:2d:dd:bc:c6:8f:4a:94:
ef:a3:df:60:70:e2:28:80:2f:58:59:49:b8:37:1f:6c:37:fe:
b0:3d:a1:07:fa:68:7c:f1:72:77:b1:a8:c6:d0:2d:e4:28:11:
ce:91:42:87:27:91:56:ff:9a:c4:8f:1b:47:f3:cc:d6:5b:50:
1d:d1:fb:1e:37:ce:eb:af:2f:84:43:98:c1:83:af:1d:c0:3c:
c4:89:be:40:97:9e:e4:20:b5:ac:63:ff:19:37:08:50:13:7c:
50:72:ab:fc:55:0a:27:bb:04:f9:1e:20:c1:dc:62:37:2b:34:
f4:db:87:91:9a:3d:f1:87:96:97:a7:77:70:31:00:2e:d5:65:
48:03:15:ef:4f:3e:c4:71:51:c9:64:f5:0a:2b:a1:63:5f:ca:
74:75:bd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:23 2026 by rpki-client