
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
File: ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft (raw, json)
Hash identifier: lIqag6cWZEQ9C1CEgYxpG5QzpEOf1qOTRP63eanLa7A=
Subject key identifier: C7:09:39:53:CC:EF:C8:9C:6B:EF:93:AD:37:16:3D:93:15:83:DD:F3
Authority key identifier: 67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D
Certificate issuer: /CN=A91CAA4E/serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D
Certificate serial: 13D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
Manifest number: 1B91
Signing time: Sat 04 Apr 2026 16:50:23 +0000
Manifest this update: Sat 04 Apr 2026 16:50:23 +0000
Manifest next update: Sat 11 Apr 2026 16:50:23 +0000
Files and hashes: 1: ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl (hash: k7UAn8RGK0ca/FNt3kqfU09p1dHRE4JPmt5lyo9zg58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl
rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5075 (0x13d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA4E, serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D
Validity
Not Before: Apr 4 16:50:23 2026 GMT
Not After : Apr 11 16:50:23 2026 GMT
Subject: CN=69d1414f-24e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:38:a1:f0:16:56:77:17:17:ea:98:7d:e9:
1e:35:f1:8f:d3:7a:90:f8:3a:f4:8e:ff:06:b6:a5:
6f:bf:fe:8b:d8:af:d0:24:01:32:08:35:ff:7a:a9:
5a:cd:f2:6b:09:15:ce:17:06:d8:32:43:71:72:d6:
d2:78:fe:a4:9c:16:ff:18:56:dc:10:6d:36:58:92:
8a:c6:c8:f6:9d:14:87:45:79:63:8c:84:ad:17:ad:
0d:78:0e:5e:bc:61:b2:99:d5:1d:27:02:a4:95:f1:
d1:51:25:32:90:e2:c9:b7:24:2f:4a:1f:8f:0c:f8:
c4:3e:bc:1f:dd:9d:8b:f3:db:d9:3c:a1:7c:61:7b:
10:16:45:c5:e3:0c:ca:7d:95:0b:71:1e:7d:35:fe:
bf:53:b8:59:7c:c1:ce:6c:78:6b:65:48:c9:d7:ff:
e2:aa:65:f7:31:0d:f9:fd:34:b7:fe:d5:cc:f8:66:
c9:77:85:ba:d6:cf:94:f9:ba:69:24:69:cd:9a:11:
09:db:5f:22:bd:3c:79:8e:76:6b:df:2a:80:06:83:
fa:d8:63:4b:37:ff:d9:4e:01:5e:ed:bf:76:73:ff:
bd:ed:12:99:c9:61:e7:73:97:c9:c3:72:a6:03:e2:
7f:e3:ba:15:e5:bd:68:37:83:4d:91:e9:f7:61:43:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:09:39:53:CC:EF:C8:9C:6B:EF:93:AD:37:16:3D:93:15:83:DD:F3
X509v3 Authority Key Identifier:
keyid:67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:9d:83:98:89:86:69:32:43:f0:9e:9e:57:f0:39:14:f7:dc:
2c:34:9d:4d:51:9f:55:f5:fb:62:63:db:fa:b4:53:b3:35:c5:
ff:a7:18:04:8d:80:f5:2b:e9:b7:41:7a:24:63:0a:44:2d:37:
90:ec:1b:14:d8:15:c5:e4:15:6c:c1:9f:4f:d7:ec:b2:d7:8b:
a4:34:65:6f:f2:c0:28:f3:6f:98:57:f0:35:20:ef:14:df:c8:
e7:2e:70:e0:f7:e8:5b:f4:d0:97:6d:36:c8:7c:dd:90:0f:c0:
e8:48:c4:03:eb:e5:1f:03:7e:7f:47:61:19:6f:38:9b:28:e0:
68:5e:c1:bc:0a:19:28:d4:9c:d8:31:85:f0:22:31:ab:ba:da:
43:33:db:b1:97:2b:f9:d5:d8:44:ae:9c:61:fa:38:a6:1a:2d:
ed:85:13:94:be:0a:43:72:96:b9:dc:3a:d1:2e:a3:06:33:bd:
b7:28:29:0b:7b:c2:be:2f:5a:0a:c8:3a:c9:75:9d:d8:18:ae:
6b:bc:75:d5:23:85:51:a1:52:8d:47:88:02:6e:63:92:22:a8:
26:b2:dd:1b:81:54:2c:92:30:97:c7:26:8f:2a:f4:f6:5f:5c:
8d:3b:83:86:17:ff:c9:ce:de:f7:8d:35:2e:00:6c:b2:10:c4:
24:be:16:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:25 2026 by rpki-client