
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json)
Hash identifier: p8qczUOLj/0Chnl3C343c3mPW+5ofb0L7TgWApUbleY=
Subject key identifier: B2:A5:CF:C2:9C:81:7E:AD:82:67:36:BC:AE:E6:61:D8:FE:E0:19:51
Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
Manifest number: 5A
Signing time: Wed 11 Mar 2026 06:56:41 +0000
Manifest this update: Wed 11 Mar 2026 06:56:40 +0000
Manifest next update: Wed 18 Mar 2026 06:56:40 +0000
Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: pjKCtH61PyJ/CHuSSxto7gm++dduUmWf5ERVT/pbFK0=)
2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=)
3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 06:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Validity
Not Before: Mar 11 06:56:40 2026 GMT
Not After : Mar 18 06:56:40 2026 GMT
Subject: CN=69b11229-bd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:d3:4a:85:21:c9:dd:39:d3:9c:ca:d1:ea:
d9:5c:cb:98:28:1c:87:ef:d8:0b:c1:d8:bb:f5:2c:
5a:a2:62:62:9b:a9:51:49:8c:bf:6e:1c:8d:ca:79:
b3:ff:e4:79:76:d9:66:30:a7:1c:cf:25:2b:63:11:
37:22:66:b0:19:09:9c:2e:07:a0:26:02:1e:eb:c8:
d3:65:a7:fa:4f:3f:d3:54:70:16:96:16:41:cf:92:
2a:e4:0a:4d:71:ea:4a:57:e6:c3:0a:db:21:e5:65:
66:03:83:c4:52:ce:b7:e9:46:13:98:bc:10:a6:e5:
a9:36:e0:b4:68:82:df:ee:58:3f:83:18:4f:4d:72:
55:6a:b0:ff:fe:0f:58:7b:c8:a6:1e:fd:13:01:23:
56:10:e8:64:c3:68:07:31:67:5b:71:33:34:8e:94:
c4:a5:07:4c:76:88:34:e3:39:35:3d:d6:c4:5f:87:
28:d9:1b:f1:60:e8:b2:6b:35:3e:ed:4d:16:01:e6:
ad:7e:ae:98:cb:d0:a8:a3:7e:e4:92:98:de:a6:d8:
d8:73:e1:b9:96:4a:f4:32:84:6c:dd:da:55:ea:c1:
ec:5f:30:5f:79:e7:5c:61:7f:7c:d6:08:f5:6c:14:
3c:a3:bd:dc:77:3d:e7:f1:72:5f:90:8b:ec:41:31:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A5:CF:C2:9C:81:7E:AD:82:67:36:BC:AE:E6:61:D8:FE:E0:19:51
X509v3 Authority Key Identifier:
keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:09:57:b5:59:cd:88:ec:64:2d:e2:6e:03:cb:ae:77:39:d2:
6b:06:6c:fc:bf:fc:ad:11:d4:85:15:9a:fe:3c:a8:e6:33:0d:
7b:94:21:1f:23:5d:bf:61:c7:4e:3e:f8:1b:6e:b1:e8:f8:76:
38:46:5f:69:29:90:4c:d5:0c:5b:d3:3b:13:f6:a0:3c:e8:66:
87:71:7d:fa:fa:6f:69:2c:16:5b:ed:c4:cf:65:7d:43:c2:b7:
fe:51:02:a1:64:bf:31:4f:96:0a:65:ec:4a:0f:44:d2:87:d6:
c7:6f:14:ef:51:07:03:7e:9f:9a:46:fa:61:8c:37:42:e4:20:
71:fa:12:14:b4:d3:87:28:bd:a9:8d:ef:5b:1d:7d:ca:37:a0:
30:b6:c1:d4:31:c3:f9:9f:cd:23:21:8b:e8:7b:c6:a1:79:24:
b5:fc:84:80:d3:65:c6:d5:bf:48:c2:9d:89:fa:2a:a6:01:0b:
ea:ef:2b:e1:92:e4:b6:db:e2:a1:84:1d:77:fd:dd:6d:6d:67:
a3:01:59:8f:d1:58:f0:12:26:3e:af:c1:ba:f5:59:bd:41:5b:
d7:c2:e4:ba:a5:80:ce:fa:a5:88:ca:6c:12:83:10:96:b7:a6:
9d:57:6c:e5:b4:9c:cd:cc:e0:77:6a:c7:fc:5e:c6:83:29:56:
22:03:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:06:54 2026 by rpki-client