
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json)
Hash identifier: IQx4Ez1QvMz2tAkUrhHpPa8hcaR8BqZxfiM2uff63Tw=
Subject key identifier: C9:24:0A:BC:02:58:A5:4E:FF:81:5E:4F:36:69:AA:59:B2:49:73:BD
Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Certificate serial: 05FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
Manifest number: 05F6
Signing time: Sat 04 Apr 2026 22:41:36 +0000
Manifest this update: Sat 04 Apr 2026 22:41:35 +0000
Manifest next update: Sat 11 Apr 2026 22:41:35 +0000
Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: lSZtoV0tGuZFzi95iNfy3rur0f+09epfBqRaals3zsU=)
2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: 14hjxCWDN1Xl0Tkh1WoOKZgmhqThzo7epHMxj3MS5qU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1530 (0x5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Validity
Not Before: Apr 4 22:41:35 2026 GMT
Not After : Apr 11 22:41:35 2026 GMT
Subject: CN=69d193a0-35e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:ba:2c:f2:05:85:f1:47:af:d4:46:c5:61:
8d:b1:33:f1:d6:d3:6a:82:54:f8:30:95:e3:a5:db:
83:56:5a:87:b3:0c:8d:5c:f6:a9:a1:3e:26:28:b9:
a9:c2:d2:8b:91:ad:a3:de:da:3b:4d:0b:91:27:57:
2f:ec:3c:d2:4e:a8:b1:82:ce:d5:cf:fe:f1:6b:71:
e0:04:8e:82:7a:d7:4a:b8:58:77:4b:37:36:08:00:
1c:01:db:96:61:ad:b2:2e:07:0e:f6:0f:f1:c7:95:
b9:ca:3b:3f:f7:e0:c8:13:5a:5e:7f:9b:ed:b3:85:
37:0e:5e:b7:cf:71:b4:6a:58:04:ac:89:ff:88:74:
ac:d7:53:7c:b4:88:fe:28:66:27:89:56:8c:ac:2d:
1f:0f:fe:69:d4:5e:08:bc:52:de:64:06:38:20:36:
ec:bd:f3:8c:1e:1b:41:a6:88:a6:b1:26:c1:52:50:
bd:61:95:91:e5:bb:7f:99:8b:12:bf:b5:c2:70:ef:
6e:b1:8e:4b:e5:b2:59:03:b8:d8:12:7f:cc:db:2d:
60:aa:97:af:17:69:f7:81:59:00:c2:71:01:12:b5:
a9:b1:de:93:21:95:98:f0:50:63:04:b3:46:a5:02:
d1:26:cd:b3:53:dc:62:e3:6d:61:c4:ed:56:41:32:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:24:0A:BC:02:58:A5:4E:FF:81:5E:4F:36:69:AA:59:B2:49:73:BD
X509v3 Authority Key Identifier:
keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ba:c8:00:09:d0:22:a3:66:e2:e9:f0:cb:d1:8e:7f:62:31:
5a:d6:0d:0d:2e:54:c5:0d:5e:f7:dd:35:ae:12:19:21:ba:9e:
7a:3d:e0:44:dd:ef:ee:6d:ee:85:d6:88:48:4e:74:3e:23:6e:
00:a0:8d:1b:34:9c:7c:39:db:85:89:2b:fa:55:fb:d1:7b:7f:
b8:67:47:4c:35:fb:90:74:d5:1e:00:c6:85:f9:40:b7:3f:e0:
fc:b1:c9:1a:69:1b:80:55:1d:c4:0e:85:d9:db:4f:25:1f:fd:
0b:60:97:4d:aa:29:e6:34:ce:dc:5b:3b:65:1b:c3:5e:a2:34:
48:c9:8e:7c:72:6a:0d:2a:d7:71:69:30:1b:a4:36:67:fb:a6:
02:5f:c8:56:b5:3b:a8:29:e4:e4:bf:c7:e9:0a:64:dd:18:f1:
24:e2:b7:a5:5f:5a:23:f0:c6:b2:da:ea:4f:35:d4:3e:f0:af:
1a:5b:8d:0a:8c:29:b3:19:1f:ce:d6:0d:c6:c3:16:85:f3:8c:
80:d5:08:c7:f8:e0:7d:46:4e:00:63:9a:90:ba:7d:bd:4d:cc:
02:8f:d6:36:03:97:92:d0:fd:3d:d7:d9:97:1c:c3:ca:f0:35:
f7:4c:03:00:0b:1b:bc:44:33:28:b9:a0:41:3e:12:66:98:c1:
74:97:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:13:52 2026 by rpki-client