
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json)
Hash identifier: ZwME68vPFBi8aNOAH/4qfMyAvBYUnPHM8Bc5zRkzFd8=
Subject key identifier: 3F:29:09:25:48:7E:EE:37:7B:DE:DC:3E:C9:8C:CC:4B:56:9C:53:8D
Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
Manifest number: F5
Signing time: Fri 17 Apr 2026 06:01:20 +0000
Manifest this update: Fri 17 Apr 2026 06:01:19 +0000
Manifest next update: Fri 24 Apr 2026 06:01:19 +0000
Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: BMTOA107VECjFeOoiXLns2olqmuY5Sd8cijdvmb5w7Y=)
2: BE8AB5962CAA11F188C8C19CC7833773.roa (hash: +HuQ1+KZiqgNFUPhLnP7t9LZlbQUAOttCYgCzCKpHnQ=)
3: 77A9961E2CAB11F1BF46ABE0C7833773.roa (hash: q2CV+pm6erT1RDaqImdaaQYJ9ljYcSo6QEqlYHcpD9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Validity
Not Before: Apr 17 06:01:19 2026 GMT
Not After : Apr 24 06:01:19 2026 GMT
Subject: CN=69e1ccb0-affa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:99:31:cf:f7:73:62:86:a8:27:25:61:9c:
c7:29:4b:3e:dc:55:a9:a5:68:cb:fd:f3:aa:f7:2c:
1e:c7:d7:c2:d2:43:30:ae:ea:41:9f:2e:fe:3f:6d:
3a:02:51:df:9e:fc:fe:b0:4e:3d:01:4e:a7:83:f9:
a8:bd:2e:24:a2:39:f0:97:7d:df:78:5f:ef:a8:a4:
9e:6c:42:ed:3c:fa:91:66:20:99:d1:93:ef:9b:c7:
db:97:37:05:f5:97:d7:6c:25:a7:b2:bd:03:f0:d7:
ab:f7:fd:50:f2:cd:ca:5c:8e:9c:fa:0f:29:a0:93:
e7:26:46:5e:a0:d8:25:68:0a:4b:87:45:91:12:9a:
94:1c:f0:a7:48:f6:e6:fd:02:91:92:c7:06:b7:96:
de:c1:e5:6f:a1:10:fb:1c:14:2b:7b:ae:f7:88:11:
31:d9:b9:0a:9a:68:9a:43:0e:ce:75:20:95:58:fe:
83:02:04:e7:1f:a1:3d:94:f4:e4:41:92:a7:db:b2:
a3:37:12:31:14:e9:15:b5:f7:02:d0:c3:9f:78:da:
47:fd:ce:22:33:43:f1:a6:91:12:b1:50:e4:21:a1:
be:81:41:c4:9a:11:4c:b6:0a:6b:c9:7d:90:1c:1c:
d2:6a:4b:43:d7:5f:96:43:3d:eb:77:9d:b8:44:03:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:29:09:25:48:7E:EE:37:7B:DE:DC:3E:C9:8C:CC:4B:56:9C:53:8D
X509v3 Authority Key Identifier:
keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:f3:73:57:3b:bb:83:86:26:ce:cc:67:bf:3e:ef:2c:dc:e0:
de:b7:19:ec:7d:10:f7:b6:ef:54:1f:33:76:d4:4d:4f:8b:78:
42:2f:93:4b:d7:b6:e0:fe:01:b9:b3:d2:34:81:a8:98:6f:59:
7c:9c:c8:1f:95:42:0a:ec:a6:b3:72:a8:44:7e:c3:72:d6:a6:
20:1b:29:a0:c1:a5:47:04:18:de:c4:d8:50:69:32:c2:d8:36:
d3:4b:d0:dc:00:57:20:8b:67:fd:06:a9:ee:13:18:e2:c9:d6:
dc:c2:58:e1:42:10:b1:d7:e9:96:29:de:ef:f0:b3:b1:1a:45:
eb:39:b4:c6:f8:8c:ff:fb:67:25:df:99:75:1e:25:1c:c1:7f:
8f:96:7a:37:3d:b0:1e:dd:8f:f3:b6:76:9e:c0:7c:e6:aa:b3:
94:24:cb:19:71:ae:ae:b8:cd:72:04:26:88:af:19:b0:4f:0c:
cd:6b:c5:7b:83:a4:97:a3:e9:62:12:40:8b:57:98:5e:c9:33:
0e:11:b8:b6:a3:11:44:9f:7e:41:b0:c7:1d:a0:08:35:fc:c8:
25:e3:73:73:5a:48:b6:b9:f9:ed:ba:4f:a1:ee:70:ea:ac:ea:
77:7c:d2:1c:a2:c3:e5:56:30:aa:ff:22:d3:d7:d1:00:51:1f:
a2:86:e9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:40:31 2026 by rpki-client