
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json)
Hash identifier: pR4gm69aPs3FCMtNrsOV/w3zGf5OftKJQfKVVrUaYXo=
Subject key identifier: 75:30:BC:0F:B0:BE:83:AA:26:7B:CC:09:A8:AF:2A:CD:F5:75:39:67
Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
Manifest number: 010E
Signing time: Sun 15 Mar 2026 04:48:24 +0000
Manifest this update: Sun 15 Mar 2026 04:48:24 +0000
Manifest next update: Sun 22 Mar 2026 04:48:24 +0000
Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: B6YaK7qbX1cOIAq5+U+K55XYyCuB64p1WlrDLdUqZMs=)
2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=)
3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Validity
Not Before: Mar 15 04:48:24 2026 GMT
Not After : Mar 22 04:48:24 2026 GMT
Subject: CN=69b63a18-4991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:f5:85:42:f1:be:08:0e:8e:6d:ff:f7:74:
bd:1a:d2:34:ee:48:2b:91:5a:bc:55:69:23:ba:a8:
f7:6b:0b:d6:08:5b:a7:bb:e4:8e:6c:7d:13:fa:6c:
db:62:c8:8f:f3:98:d5:7e:04:8f:c5:e6:c4:87:04:
9b:1c:40:68:6e:c9:4f:aa:47:bc:56:42:7f:e0:67:
b0:f3:45:a3:f5:44:95:3f:46:a1:7c:69:ee:7a:9b:
77:a4:46:1a:5d:b1:be:22:16:fa:33:09:9b:bb:eb:
4f:e5:df:16:23:0a:78:da:87:1a:59:f3:8e:ca:b6:
ec:59:35:b1:3d:ca:c7:3a:2d:af:6b:20:57:d9:01:
00:d2:6d:4b:1b:a0:5f:56:b9:6e:89:1b:34:18:cd:
21:aa:7c:04:e1:e6:82:f9:71:76:88:50:c7:8c:37:
a5:e0:31:94:f2:bb:68:1c:13:bd:4c:4c:43:f3:9f:
9e:cb:67:54:12:16:b7:26:57:4c:36:47:19:e1:1b:
c5:2a:a2:4e:29:87:a4:6a:72:6d:72:22:7d:58:67:
01:f9:a8:2e:64:48:45:d7:99:b8:32:df:8e:6b:8a:
78:d7:7b:cd:d1:2f:e1:0c:99:74:d3:0c:c6:29:0b:
f7:d9:99:fa:e9:8a:09:92:b6:b7:70:09:ca:42:95:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:30:BC:0F:B0:BE:83:AA:26:7B:CC:09:A8:AF:2A:CD:F5:75:39:67
X509v3 Authority Key Identifier:
keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:4a:67:4c:e7:cd:84:59:4b:29:90:5a:aa:79:33:e9:db:50:
05:01:ad:53:21:65:86:d6:8a:61:68:f6:e7:31:33:4d:ee:c6:
81:aa:47:f4:32:28:cc:9b:50:88:d3:c4:cf:b2:b8:4b:e6:be:
4a:44:e7:4f:fa:c0:91:9a:7a:14:9c:07:db:79:71:ca:29:16:
ee:49:6b:3b:32:05:50:09:6f:f7:a5:86:08:a1:21:8b:ab:37:
da:55:0f:37:5f:57:8f:bc:9b:b9:7c:12:a7:c6:bd:95:4f:33:
5b:02:61:af:33:f4:04:43:19:e6:d2:23:2c:df:78:e4:19:48:
fd:3b:22:f1:8d:7a:f0:bd:bd:c8:84:6c:66:84:42:e1:9d:46:
9d:2a:87:16:e0:f9:8b:ab:c8:d0:42:c5:7f:d4:cc:05:82:50:
c2:5c:03:89:3c:6e:53:79:a6:22:8a:de:80:cb:58:62:a9:eb:
94:75:1c:a7:8c:33:6f:6e:5a:4d:b6:6c:e4:2a:b4:45:e8:aa:
cf:0c:c9:0b:82:ef:c8:45:9c:0f:fa:f8:f0:a3:21:4a:15:be:
bb:50:a9:b1:7c:14:53:18:fb:12:cd:e3:c7:69:8a:79:ea:61:
8a:40:f5:3b:39:16:15:90:87:9e:4a:6c:bd:b5:70:40:ed:ca:
91:50:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:40:26 2026 by rpki-client