
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier: AAxu4bQNZ6g5zFSV+t6La5upEgr14mDZLjCf9H3nQD8=
Subject key identifier: 63:3A:C7:3A:28:DD:95:98:AC:9A:C5:1A:05:C3:93:40:47:03:8D:88
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer: /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number: 4D
Signing time: Tue 03 Mar 2026 07:55:28 +0000
Manifest this update: Tue 03 Mar 2026 07:55:27 +0000
Manifest next update: Tue 10 Mar 2026 07:55:27 +0000
Files and hashes: 1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: qfdNwgtgK+nAii/AxkXEhSmNr+j6iHsDwmD6uSXWvbY=)
2: 06ED25D2A7CF11F0927DA829C4F9AE02.roa (hash: x1p58QyGOEEZzvkP+F1o5eBxOfZdy5EZehyc+fW6wlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Validity
Not Before: Mar 3 07:55:27 2026 GMT
Not After : Mar 10 07:55:27 2026 GMT
Subject: CN=69a693f0-d3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:01:2f:93:fa:a1:d7:db:c3:7c:be:27:4c:
6b:c8:35:ba:43:62:2c:d5:b4:29:ca:2d:6a:80:8d:
16:bf:54:f9:41:a9:e9:8b:66:30:9e:6a:25:5b:4f:
26:57:8a:10:e5:b5:60:d4:1d:1d:ae:93:21:99:17:
4b:02:bf:95:0e:43:53:5c:b2:a5:ad:2c:1f:84:bb:
c0:c7:9d:a3:45:1d:61:24:b5:50:28:2b:a6:38:f0:
22:28:aa:95:80:11:7e:18:4b:12:58:53:72:48:72:
ae:c9:b0:0f:ee:af:ca:aa:ef:e1:29:30:86:e4:95:
63:dc:9b:f9:5a:7c:8f:18:6b:fc:82:e3:51:a4:85:
fe:73:6a:a9:a4:bd:1d:a3:66:d5:f4:41:b9:bf:1b:
3c:4a:c5:3a:f8:42:ac:f8:d2:1c:8d:af:fc:49:da:
31:6a:00:55:45:c5:3e:bc:72:de:9d:98:3d:23:87:
e1:8f:24:83:e8:19:cc:c1:67:57:b9:9a:2e:6c:3b:
02:f7:b3:f2:aa:85:ee:d9:48:b5:a3:10:8a:6e:49:
dc:97:8f:91:5e:b7:1d:11:4f:ca:5e:8c:b8:3a:6a:
67:70:ec:8b:5c:ac:08:f7:f7:45:1d:51:59:cf:db:
6a:39:4a:5e:f3:d5:7c:fb:e4:29:f3:95:88:cf:61:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:C7:3A:28:DD:95:98:AC:9A:C5:1A:05:C3:93:40:47:03:8D:88
X509v3 Authority Key Identifier:
keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:33:16:38:f0:f5:de:d7:69:55:8e:59:6e:c6:bb:aa:99:3c:
86:c1:a9:34:a8:77:67:43:ff:c1:0f:05:a3:a4:ba:33:ca:5a:
26:6b:55:b4:d6:48:34:93:5b:a5:f1:af:2f:13:bd:da:99:7c:
69:63:a1:a0:26:b0:07:60:16:6e:22:c0:42:0d:01:16:9d:59:
25:03:ae:69:07:d5:fc:6b:a7:e2:d9:83:f5:31:45:e8:02:c3:
e0:2a:39:7d:57:c8:10:89:bc:16:66:93:b5:37:60:af:2c:bc:
ab:57:1d:20:27:dc:43:25:94:c6:6d:da:c7:d2:55:7e:e5:08:
5f:9c:8f:93:f5:e8:04:69:a4:cc:23:a4:39:81:33:06:7b:99:
70:90:a3:bd:b5:9b:04:0f:cf:87:36:b0:fc:66:e3:0b:8f:41:
57:46:5e:25:4d:25:f5:1b:26:80:f6:d9:7c:5e:d8:f5:8c:50:
45:67:9b:2c:47:b0:0a:38:78:31:eb:7f:77:62:d2:9f:96:ea:
68:74:44:a8:45:18:15:2a:4d:ed:98:3d:6f:57:2c:bf:c4:d5:
4d:8b:c2:e0:1b:8a:b3:28:36:c7:c5:cf:e8:d1:ee:38:00:5b:
e3:3d:47:92:e1:54:20:64:73:eb:6f:c7:5b:22:c8:36:d4:29:
c2:42:db:07
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NDMwQjExMC8GA1UEBRMoRDE5QkI2OEUzQ0NEQzRCNzhDRTM2Rjg3Rjk0RTdGNzEw
NTEyM0EyNDAeFw0yNjAzMDMwNzU1MjdaFw0yNjAzMTAwNzU1MjdaMBgxFjAUBgNV
BAMTDTY5YTY5M2YwLWQzZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCa8AEvk/qh19vDfL4nTGvINbpDYizVtCnKLWqAjRa/VPlBqemLZjCeaiVbTyZX
ihDltWDUHR2ukyGZF0sCv5UOQ1NcsqWtLB+Eu8DHnaNFHWEktVAoK6Y48CIoqpWA
EX4YSxJYU3JIcq7JsA/ur8qq7+EpMIbklWPcm/lafI8Ya/yC41Gkhf5zaqmkvR2j
ZtX0Qbm/GzxKxTr4Qqz40hyNr/xJ2jFqAFVFxT68ct6dmD0jh+GPJIPoGczBZ1e5
mi5sOwL3s/Kqhe7ZSLWjEIpuSdyXj5Fetx0RT8pejLg6amdw7ItcrAj390UdUVnP
22o5Sl7z1Xz75CnzlYjPYQCrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYzrHOijd
lZismsUaBcOTQEcDjYgwHwYDVR0jBBgwFoAU0Zu2jjzNxLeM42+H+U5/cQUSOiQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MzBCLzgyMzZFMjYwQTdD
RTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExlTTQyLUgtVTVfY1FVU09p
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMFp1Mmpqek54TGVNNDItSC1VNV9jUVVTT2lRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0
MzBCLzgyMzZFMjYwQTdDRTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExl
TTQyLUgtVTVfY1FVU09pUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBTMxY48PXe12lVjlluxruqmTyGwak0qHdnQ//BDwWjpLozyloma1W01kg0k1ul
8a8vE73amXxpY6GgJrAHYBZuIsBCDQEWnVklA65pB9X8a6fi2YP1MUXoAsPgKjl9
V8gQibwWZpO1N2CvLLyrVx0gJ9xDJZTGbdrH0lV+5QhfnI+T9egEaaTMI6Q5gTMG
e5lwkKO9tZsED8+HNrD8ZuMLj0FXRl4lTSX1GyaA9tl8Xtj1jFBFZ5ssR7AKOHgx
6393YtKflupodESoRRgVKk3tmD1vVyy/xNVNi8LgG4qzKDbHxc/o0e44AFvjPUeS
4VQgZHPrb8dbIsg21CnCQtsH
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:30:33 2026 by rpki-client