
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
File: zyFayRHKpSBlx-xKx5V4NTgr4-0.mft (raw, json)
Hash identifier: wRgD7NFCpsYUOIGDYEyGQjdHNPT4nA10tEb/I9+hVWM=
Subject key identifier: D8:42:02:B2:ED:A7:76:47:AE:CC:EE:2B:5D:7D:70:60:BE:FE:B5:3A
Authority key identifier: CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED
Certificate issuer: /CN=A91BF2DB/serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
Manifest number: 3C
Signing time: Tue 03 Mar 2026 08:09:33 +0000
Manifest this update: Tue 03 Mar 2026 08:09:32 +0000
Manifest next update: Tue 10 Mar 2026 08:09:32 +0000
Files and hashes: 1: zyFayRHKpSBlx-xKx5V4NTgr4-0.crl (hash: an/akiqUcTjZXCJ7BGEhjkZzfyEKc13po0j8DU/8Vco=)
2: FD88540EF5E311F0AB8204204D6F56BC.roa (hash: 15B38ymuojJsU1lBlmAxw+iYaANkqD35wxiK+F+Bx6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl
rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2DB, serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED
Validity
Not Before: Mar 3 08:09:32 2026 GMT
Not After : Mar 10 08:09:32 2026 GMT
Subject: CN=69a6973c-8c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:e3:b6:60:31:52:50:b3:58:8c:a3:25:d5:
5f:84:7e:48:cc:ef:7c:54:b9:50:08:dd:f0:64:6a:
0c:a6:0a:ab:fe:aa:12:6b:cb:6e:0d:0e:d5:da:84:
7f:c0:60:73:64:65:b5:2b:1a:b3:de:cb:f8:d9:02:
e1:11:52:2a:c0:04:8f:54:d0:04:60:68:3c:db:09:
af:58:cc:fe:b9:56:0a:30:b0:dd:22:b8:9c:34:97:
6b:50:2d:ac:b5:cf:89:d5:b2:e5:40:dd:e0:46:36:
db:d0:fa:b0:8c:05:bf:d0:e8:d4:05:e6:9a:26:ec:
29:a2:ab:b0:7d:41:10:ea:7f:2c:e0:b9:10:13:c7:
88:eb:af:05:48:28:8c:bf:6a:ee:50:df:54:59:39:
bf:f8:42:25:8b:36:0f:65:d2:97:41:5e:ee:3b:c1:
c0:fd:5c:a1:71:aa:2d:40:cc:a5:bb:4d:01:f1:bb:
ba:33:7e:5e:3a:07:ae:40:64:65:33:5a:97:e6:76:
50:ea:ed:e4:78:55:d0:00:62:ff:4f:2d:99:08:c4:
54:46:7e:cf:d0:65:3f:93:3d:42:38:ca:f7:88:75:
7c:88:e1:88:aa:4b:e4:d8:64:6d:43:e9:15:75:e8:
3e:42:14:15:c8:1c:f6:af:7d:45:d9:f2:24:41:f4:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:02:B2:ED:A7:76:47:AE:CC:EE:2B:5D:7D:70:60:BE:FE:B5:3A
X509v3 Authority Key Identifier:
keyid:CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4d:1b:16:fe:1f:45:73:17:4a:07:b6:71:f3:d0:04:5e:00:
ef:2e:13:f3:f8:fb:70:a3:fd:79:7b:1a:ef:7b:53:ae:03:ae:
87:11:0e:58:b9:cf:a2:ac:98:45:8b:56:74:d1:83:ff:4c:45:
6c:2a:3a:33:50:4b:84:c5:e5:87:95:d6:49:2f:66:c3:af:9d:
af:5e:16:6d:47:bb:79:1d:fb:34:06:7e:05:16:6c:40:52:1a:
eb:00:cc:b9:95:ba:a9:a0:10:31:6f:47:20:03:ce:78:4d:75:
55:e3:4a:23:96:6d:06:64:d2:17:d5:ca:b7:aa:c2:bf:f5:73:
62:67:a5:9b:f1:51:23:8f:e5:83:dc:3e:56:17:93:4a:1b:97:
8c:76:b7:67:b6:c0:70:f2:85:ac:d5:28:49:c3:bb:11:a3:6c:
a6:f9:b3:e1:5b:de:b6:d0:62:15:20:e4:82:58:3c:03:48:f5:
49:10:a4:68:cd:e4:35:67:9d:62:f4:3f:18:15:77:f2:54:b4:
28:ef:45:e3:e8:99:d0:93:eb:40:59:35:1a:1a:96:89:52:21:
05:d7:73:a0:1f:c5:ec:00:a3:77:57:93:c4:39:32:49:8e:8c:
83:24:51:27:2d:a5:fd:5b:d4:17:db:fb:22:b7:12:f0:8c:18:
97:c4:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:42:49 2026 by rpki-client