
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier: jwt6HfgscI9tHQuRQ4/2VM/i8BI9ENGVuGeCTmrTsN0=
Subject key identifier: C6:06:D0:CB:B0:AC:D9:31:B4:F5:1F:BB:60:5D:A8:9D:89:94:7C:91
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial: 358E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number: 355D
Signing time: Sat 04 Apr 2026 14:27:57 +0000
Manifest this update: Sat 04 Apr 2026 14:27:57 +0000
Manifest next update: Sat 11 Apr 2026 14:27:57 +0000
Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: Dwchst3uOw24o2eA5N1dAACe31AY4NK+22oYWWTw3Qk=)
2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: Uyndl2RNPQU8Q6UunWd7sOPMzU0qjSa6Yu6/kDwXZIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13710 (0x358e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Validity
Not Before: Apr 4 14:27:57 2026 GMT
Not After : Apr 11 14:27:57 2026 GMT
Subject: CN=69d11fed-f180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fd:0b:b6:4e:73:31:df:7e:38:a6:a5:34:35:
2e:45:ab:e5:fc:9f:71:91:15:7c:2c:8c:a8:1f:dc:
74:02:90:6b:aa:bc:80:e2:d8:90:63:13:0e:63:32:
c7:4b:2a:17:58:29:8b:9b:57:56:88:b9:de:a6:57:
1f:5c:32:fb:d4:f1:7b:c8:f1:4c:a5:79:bf:c6:b4:
88:bc:78:9d:d1:8c:65:78:a1:c0:6d:ba:2a:da:64:
71:30:37:b8:dc:24:07:3a:55:4c:5c:66:e9:6f:7c:
5b:5b:ac:45:4b:b5:d1:e3:62:8d:32:fb:78:ce:ce:
87:25:5a:f8:ad:05:54:dc:a6:ac:11:6b:e9:05:9a:
bc:ef:51:fe:64:a4:d0:84:71:c1:60:99:bc:48:1a:
13:97:f5:3c:4f:48:ea:8b:54:f4:7b:99:ff:d4:1e:
76:68:6e:3d:70:07:8a:4b:68:55:9a:e7:ee:7e:10:
83:d2:7c:74:23:ab:87:36:34:a2:d1:36:6f:c4:f0:
31:e7:a5:b9:05:58:fa:cf:69:69:16:46:4c:e6:cc:
ab:25:d3:06:16:c1:fb:a5:e6:c4:40:06:e1:99:c5:
0b:40:f1:b4:fc:6a:23:3c:c5:37:6e:88:6d:b8:fe:
61:1e:cd:fa:9a:39:ab:d6:dd:ac:13:b6:cc:d6:eb:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:06:D0:CB:B0:AC:D9:31:B4:F5:1F:BB:60:5D:A8:9D:89:94:7C:91
X509v3 Authority Key Identifier:
keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:23:d5:5f:0e:b6:8e:5d:fa:0a:cd:3a:ce:68:18:08:2e:ec:
9a:60:7d:d4:6e:a2:08:20:87:9e:2e:80:c8:30:8e:5c:2d:f4:
84:58:b0:7b:c8:5a:13:14:1b:5c:7b:c6:c1:9d:2e:22:7d:9a:
e7:77:7e:79:a2:fa:13:81:77:9e:c9:17:9b:b3:4e:cf:98:1e:
07:33:69:b9:e7:a2:5d:28:82:fc:81:26:80:bb:af:0c:df:dc:
ac:4e:1d:f6:2a:e6:d7:15:28:cb:ec:88:10:0d:86:1b:54:de:
e3:fd:8e:56:ad:47:f7:51:95:0a:df:66:53:ef:07:c5:c4:2d:
88:26:5d:18:d6:d1:71:ce:c1:d3:a4:ad:3d:ae:1c:8c:7b:2d:
c4:19:97:a2:21:bd:4a:25:f9:17:b3:b2:35:fa:cd:d2:87:be:
76:d8:82:dc:7f:5d:35:ec:a2:30:38:c5:29:89:97:30:ea:91:
35:f8:a9:e6:e0:17:35:41:88:19:8e:e2:a9:a9:b2:ad:5e:d0:
f7:5f:c2:cd:61:37:6e:c8:77:2d:2e:d1:56:a1:56:3b:a6:d8:
e1:a7:58:45:1a:5a:10:6a:d9:d6:f1:d8:f1:89:a3:25:64:28:
2c:17:76:f4:80:e3:74:42:a4:36:bf:3f:51:48:e3:94:7d:62:
82:40:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:49 2026 by rpki-client