
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier: g69yMXvexUQZbB7etzDdlZ2GoonKrLFnFDpw40tTBaI=
Subject key identifier: 82:8F:3B:8D:FF:3C:38:17:15:AD:A2:3A:70:AF:CA:B6:9D:96:B9:41
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial: 08D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number: 08BE
Signing time: Sat 04 Apr 2026 20:13:30 +0000
Manifest this update: Sat 04 Apr 2026 20:13:29 +0000
Manifest next update: Sat 11 Apr 2026 20:13:29 +0000
Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: mcqMNZ2/22xdMCoINg5ZtwoupM7dU+1LymhtbRjI/3c=)
2: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: 5k8cO87Qj/gNgbt2kI9Eh+2F5/UczXoTj75VoZrq4q4=)
3: 3A4918D41DED11F18280100E163D8C67.roa (hash: Juhjiq7zpIGJ2ca6uyWvgKrk4pkgUf8b9Px9rrY5jmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Validity
Not Before: Apr 4 20:13:29 2026 GMT
Not After : Apr 11 20:13:29 2026 GMT
Subject: CN=69d170ea-9b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:ed:44:7e:5a:5b:6c:9f:37:e3:f6:39:4b:
eb:ab:ad:ab:4b:fc:6e:4a:e1:45:b6:1f:9e:b3:a8:
a5:f3:17:ad:0d:4f:95:c5:f4:8d:b7:13:53:e4:92:
7e:14:4c:9c:df:49:c4:16:dc:cb:e0:93:13:94:2e:
8a:3f:b0:a1:57:0a:0e:17:30:a1:25:32:43:85:e0:
da:36:f6:d0:3c:1f:a8:56:00:3d:9a:b7:ab:2f:18:
d4:76:15:6c:23:5b:ca:4b:bc:27:9d:e6:df:14:06:
36:05:4a:27:9b:d4:15:0b:71:3a:0d:03:0e:71:0b:
e3:85:ae:5b:51:17:85:3d:68:14:bb:09:35:9c:e4:
9b:46:e9:29:c6:59:2b:66:73:bc:22:64:4a:53:2c:
7a:87:4c:ad:34:07:4e:ce:bd:fc:be:31:6f:f7:1b:
e4:ca:d7:e1:5e:e0:c4:48:b0:33:45:6e:fb:99:04:
cf:d6:ac:6a:fc:97:a8:ab:e4:ab:37:87:89:58:1d:
fc:b0:50:b5:59:a0:c5:43:3a:30:58:d7:bf:c1:85:
02:e4:94:a0:9b:8d:50:37:85:0d:3f:43:52:28:5d:
a4:79:70:70:10:6c:6b:79:3e:44:1f:36:8c:fe:aa:
0d:31:6c:f2:0e:50:62:a7:7e:8d:18:02:32:e4:20:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:3B:8D:FF:3C:38:17:15:AD:A2:3A:70:AF:CA:B6:9D:96:B9:41
X509v3 Authority Key Identifier:
keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:42:0b:20:4d:5e:fa:25:68:99:09:91:6f:30:7f:ed:d6:9b:
2b:1c:6a:de:02:e9:ce:70:22:7a:23:b0:8c:83:f3:b9:97:2e:
c3:04:77:ec:8f:af:40:58:5e:40:d7:10:33:f7:28:fe:9b:fe:
91:39:91:b6:8d:49:9e:ed:50:d8:1e:60:fe:ea:16:d0:d0:7e:
80:7e:96:85:37:c4:25:d2:a8:c0:ae:64:5c:6b:db:5c:ba:85:
30:1f:6a:f0:eb:be:28:84:37:40:1d:f4:b1:4d:99:09:43:0e:
a1:e5:7c:9f:8b:63:06:45:98:b5:40:b6:df:2c:55:c1:08:46:
40:fa:d1:15:e9:78:21:fc:97:37:7f:80:4a:eb:9d:85:5c:7b:
b4:70:f1:dc:d2:a6:60:a3:d5:2e:55:f1:07:2c:8a:48:ef:f5:
78:8c:4d:72:07:60:ea:8b:26:26:b6:fd:a6:d0:42:37:7a:60:
a1:a5:4d:ff:29:a6:4a:34:55:88:19:06:b0:53:a3:ef:20:a2:
ab:bc:82:77:c7:1e:0d:63:89:a9:b9:a1:6e:73:67:07:96:19:
d5:35:14:e7:1f:d5:51:fa:c8:6e:85:90:17:c6:15:ad:42:1c:
49:16:d3:a5:3d:32:68:16:64:1b:8b:52:5c:02:40:7e:24:85:
76:af:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:10 2026 by rpki-client