
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
File: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json)
Hash identifier: pIvAcKEqkD7SbLekp5CPXecKxUOab3DiSzkcrOQS/jc=
Subject key identifier: 05:F2:45:12:21:5C:3F:EE:EB:42:25:C7:4E:E2:4F:F3:90:9F:D0:4C
Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Certificate serial: 0476
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
Manifest number: 044C
Signing time: Sun 05 Apr 2026 00:05:26 +0000
Manifest this update: Sun 05 Apr 2026 00:05:26 +0000
Manifest next update: Sun 12 Apr 2026 00:05:26 +0000
Files and hashes: 1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: 1cLRhTXva5nTWmKZsQvVcOSDPSyWgnv+bTr9Jbk3MB0=)
2: 62AC0F740B1511F189F6F0D93B3D8C67.roa (hash: 3cQBG+eCngkux1xOr3AWliZdBv2QypSCmE9xW1mHxwE=)
3: E57F70C206C311F185D816DB103D8C67.roa (hash: ldEkt8AnQQd4OxqJC4JbMV5PgPlGcaBYG25O0CezBnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Validity
Not Before: Apr 5 00:05:26 2026 GMT
Not After : Apr 12 00:05:26 2026 GMT
Subject: CN=69d1a746-5ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:1e:dd:e5:c2:51:16:37:66:e3:6c:a2:58:
e7:f3:a3:da:df:7b:3c:39:44:db:97:2e:cd:5b:19:
93:e2:bd:7f:42:51:2e:50:f8:ca:0e:6d:16:7b:1e:
02:65:9e:3e:83:42:2b:2d:58:98:24:59:c5:ca:9b:
27:d6:26:9a:85:1f:6c:ec:eb:2d:e7:c3:ad:3e:5e:
db:41:c0:da:ff:7c:4b:a6:5b:fb:14:c0:06:47:60:
84:25:22:99:63:68:c9:01:9e:4c:60:aa:01:6a:c8:
13:ec:e0:53:58:2a:8a:73:e6:64:69:d7:e2:aa:78:
04:0a:11:4c:cd:90:6a:95:bc:a3:ad:79:28:51:64:
07:ba:bc:fb:26:42:59:60:fe:59:a7:97:7a:5b:04:
08:29:b5:9a:9a:64:47:2a:5e:6c:e4:56:b2:10:da:
69:fa:41:50:28:13:fa:38:f5:19:4e:ce:ab:82:ad:
37:ae:13:21:d9:2c:65:b9:b2:e1:6f:57:0a:fc:5f:
25:cc:16:88:97:4a:ba:23:ba:c4:0e:76:51:8c:42:
da:51:77:33:60:86:04:f4:79:bf:f4:77:25:26:45:
8c:4a:c1:2c:62:82:c2:7e:2c:e4:96:2e:be:ce:2c:
42:e1:be:96:7a:de:c8:5c:71:0f:55:98:e6:3d:fe:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F2:45:12:21:5C:3F:EE:EB:42:25:C7:4E:E2:4F:F3:90:9F:D0:4C
X509v3 Authority Key Identifier:
keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:6d:17:ff:b0:68:da:95:a7:28:78:96:30:5b:56:78:19:dc:
f0:70:e9:d4:d2:62:b4:98:71:04:52:ec:ff:50:fb:05:56:58:
3d:fd:e8:22:f0:26:6c:7d:30:49:bd:44:d2:a3:c2:9f:d6:61:
eb:3b:46:ea:12:da:ff:6a:63:53:4e:89:65:17:b4:25:b1:eb:
72:93:cd:9f:a5:a0:df:6f:e0:93:6f:67:65:1d:7a:5e:f4:9b:
9f:98:b0:26:7c:46:60:62:c7:42:76:c2:f2:08:a4:6a:da:03:
d9:16:d8:dc:49:33:c2:1a:08:40:0f:d8:d6:0e:1b:d4:0f:47:
34:0e:0d:70:20:b1:6f:1f:8a:8e:5a:cd:86:41:7c:4a:e5:34:
2f:c2:07:26:31:a1:04:28:01:07:e1:0a:bc:df:c7:40:9e:6d:
e8:32:c0:5e:97:0e:86:9d:9f:5e:9e:67:66:80:12:c8:db:a9:
50:24:7f:bf:c6:45:02:37:4a:1a:73:6a:f4:c5:8d:50:d5:7e:
31:8c:64:5a:10:00:81:65:63:46:5e:63:c2:31:de:61:36:6b:
e5:2e:5b:7d:6a:ec:d0:c9:6c:01:0d:b5:27:37:e6:dd:37:97:
a7:18:02:26:ef:97:1c:5d:05:8e:fc:cf:3c:16:53:aa:f6:55:
ff:53:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:13:59 2026 by rpki-client