
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
File: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json)
Hash identifier: 5JoP9Da7Yk7KBhiTQOXrcwdWzVtfxyrg/1n1c5LTfHk=
Subject key identifier: 70:F9:D7:5B:CF:3E:BE:5A:C6:C6:56:BD:7A:A8:9D:2E:45:01:BE:B9
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Certificate issuer: /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
Manifest number: 1C
Signing time: Sat 07 Mar 2026 08:10:29 +0000
Manifest this update: Sat 07 Mar 2026 08:10:29 +0000
Manifest next update: Sat 14 Mar 2026 08:10:29 +0000
Files and hashes: 1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: ZiUX/t5FosTO8NQiuaZywCHMORR5oO7PnB+zAU3lApA=)
2: 8B10B888061111F18D858310203D8C67.roa (hash: tOl6umKX3unrAEmRMF9DGSQuWUSsAqCraLPKeYMTquU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 08:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Validity
Not Before: Mar 7 08:10:29 2026 GMT
Not After : Mar 14 08:10:29 2026 GMT
Subject: CN=69abdd75-3b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:64:20:91:48:22:8e:94:a1:28:6c:b7:6a:
1b:4f:24:bf:e3:6e:79:15:2a:72:5c:62:cc:9b:43:
f5:1d:dc:db:f8:10:4d:e0:30:00:bb:98:9f:34:d6:
d1:89:9b:0d:9f:d7:db:bc:a7:b1:84:b4:79:c1:c9:
8e:e7:bd:d3:7f:d6:6e:93:ef:f9:35:df:26:15:da:
96:6f:26:c6:9c:2e:b4:6d:ae:a5:f9:79:9b:5b:85:
69:4a:a9:29:21:02:b6:6e:5a:0f:87:be:5e:66:97:
18:6d:3b:17:49:f6:78:87:e7:f3:fc:3f:85:8c:50:
32:74:3d:d2:86:16:18:a1:e0:d6:1c:23:a8:b7:39:
b8:18:d3:a1:ac:aa:5a:1b:9c:72:44:ad:0b:51:f7:
b3:00:ce:1d:ac:f9:ca:d1:87:9c:6c:fe:60:e0:65:
4f:61:6c:8f:f3:62:58:90:6e:3f:bf:3c:5f:93:5b:
71:aa:b5:6e:80:62:d1:ab:73:64:fe:cf:41:7c:e1:
14:81:63:de:f7:34:3b:cd:b0:aa:b1:9a:b9:10:d7:
79:fd:32:f4:02:30:80:86:b0:3b:d4:43:98:f7:2b:
64:96:4a:33:2c:fc:56:25:f8:e7:04:f7:1b:91:6a:
26:8e:22:fa:88:7e:ff:84:c0:2e:1b:e8:b8:d3:10:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F9:D7:5B:CF:3E:BE:5A:C6:C6:56:BD:7A:A8:9D:2E:45:01:BE:B9
X509v3 Authority Key Identifier:
keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:c8:1a:d0:f9:6c:4f:83:d9:ea:08:8e:1f:01:bf:45:d4:fa:
82:bf:c7:c7:c5:21:66:fa:41:72:e6:a0:19:64:31:4e:7f:bb:
2a:6d:05:aa:5b:db:23:dc:f1:0f:0f:cf:7d:be:18:ce:a1:da:
e8:64:86:4d:c8:6a:94:df:6a:47:8c:e2:85:77:ac:2c:51:8f:
e4:1b:7d:55:6b:19:eb:68:5c:09:64:3d:15:65:c1:7d:77:d1:
8c:05:65:3a:46:c5:e4:9a:4d:16:90:1c:5e:1a:1f:08:b8:0a:
e0:bc:96:f9:f1:c9:bf:89:31:aa:6c:f3:ad:98:e9:a0:18:e2:
64:c1:35:79:3a:99:b0:ab:9d:c5:ed:f6:6a:21:20:5c:02:93:
ba:f6:1b:b8:2b:2d:1a:a6:e8:a6:a6:0e:c1:51:1a:be:40:66:
09:c9:ba:ce:f6:a7:cb:55:f1:12:bc:22:d4:b2:db:61:ef:8d:
9d:9e:85:49:f5:f5:6f:2b:dd:2b:6f:97:32:5b:01:44:ba:41:
4a:1d:6d:1b:2c:08:61:9e:64:d0:f4:56:75:5b:68:29:c8:68:
71:db:7a:4a:e1:8d:8e:56:8c:db:e4:77:7b:50:26:25:db:3c:
5d:2c:b4:e4:05:02:c0:79:c9:58:02:6b:e8:ea:4b:06:a8:2c:
bd:38:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:18:08 2026 by rpki-client