
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json)
Hash identifier: wWzEcwr42RkCQomnPbfBX3MoCE2dVDmBu4R6484Ed0U=
Subject key identifier: AD:81:46:D5:47:7D:5E:A7:6E:78:F4:DB:7D:31:72:51:2C:69:5F:8F
Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D
Certificate serial: 08B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
Manifest number: 0C3B
Signing time: Sat 04 Apr 2026 20:14:00 +0000
Manifest this update: Sat 04 Apr 2026 20:14:00 +0000
Manifest next update: Sat 11 Apr 2026 20:14:00 +0000
Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: e87EGeEuv+72eBinbqmHn0YZViNCYjM2wrKVXckf1hY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl
rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228 (0x8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D
Validity
Not Before: Apr 4 20:14:00 2026 GMT
Not After : Apr 11 20:14:00 2026 GMT
Subject: CN=69d17108-c585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:aa:d3:b7:a8:b2:e1:27:c4:0c:ff:fb:e9:
ee:e5:ac:d6:66:57:b2:5b:ee:9e:fc:01:1a:35:bb:
f2:bb:a9:c0:89:ec:56:f0:b0:f6:8b:49:68:79:05:
46:5b:c2:34:d4:33:6b:6a:4a:f5:15:7c:e7:44:07:
cb:b5:bc:4b:e9:0c:0e:9e:b1:85:f3:1c:92:72:00:
c9:ed:5f:a5:f0:f6:52:c3:5b:13:3e:b9:fe:d2:1b:
23:cb:56:fb:97:61:da:3e:9f:19:ca:ff:41:d6:20:
bf:c2:77:51:4a:2d:10:57:1e:cd:61:75:50:94:cd:
1a:8f:43:4c:7e:a6:ea:5f:41:de:73:fa:4a:d2:2a:
55:7d:d0:70:26:ce:80:35:fe:46:55:2e:71:5a:16:
09:cd:c3:a7:f1:90:bf:47:c0:9b:79:08:0a:5f:30:
68:35:7f:31:b8:32:81:3f:02:8f:51:c8:fc:85:33:
cb:f3:d1:a2:f0:a3:b7:ba:64:59:d2:59:25:b7:fc:
8c:a8:1b:af:31:fe:c0:17:b3:61:bd:ba:e4:53:1f:
02:69:f0:56:70:b3:bb:d6:cd:47:4a:a4:a3:70:cc:
ac:ec:1f:db:5a:2e:99:db:d9:fe:ba:ec:c9:6d:49:
03:9e:40:d0:71:76:19:7b:15:9d:02:f2:81:2c:c6:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:81:46:D5:47:7D:5E:A7:6E:78:F4:DB:7D:31:72:51:2C:69:5F:8F
X509v3 Authority Key Identifier:
keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a6:85:7d:90:53:fc:ca:55:bd:dc:90:f6:8a:08:60:b4:6a:
13:e7:b5:f3:29:cf:d6:c9:b6:81:aa:86:75:30:31:7d:91:64:
72:93:b1:c1:db:55:d3:d1:1f:b7:bf:94:fe:41:d8:8e:27:3b:
7c:7e:f9:1a:ef:d8:81:1a:f7:86:da:72:24:ce:88:62:7e:e5:
cc:bc:65:eb:72:69:c1:bd:c8:01:10:d3:2b:83:41:02:ad:ee:
45:0b:6a:6a:39:94:8d:ed:19:8e:9d:e2:45:ca:e0:82:b5:c9:
9e:a1:c5:cb:83:24:9a:31:f8:43:86:f5:05:94:39:59:3b:33:
9f:6f:47:a2:d9:48:98:bc:a7:c9:64:d0:23:60:81:3a:1e:73:
be:d2:ae:f3:e9:fb:63:e0:9a:3f:76:e9:55:a7:e7:e1:d8:1b:
cc:8c:ae:b0:0d:79:97:8c:54:da:07:48:8a:70:91:be:55:af:
82:51:c9:b5:29:c3:7e:6e:99:a7:cf:be:74:ef:97:83:e0:8b:
00:db:86:1f:3a:a4:8f:11:05:b9:2b:35:51:85:37:4b:e9:67:
0d:c8:b5:b1:e2:77:f4:12:6c:56:67:f4:c3:91:4e:15:3c:c0:
b3:c9:95:a4:ec:51:75:79:aa:87:1f:4e:e1:d6:f4:9c:9c:58:
8c:36:3a:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2
ODUzQjg0MUQwHhcNMjYwNDA0MjAxNDAwWhcNMjYwNDExMjAxNDAwWjAYMRYwFAYD
VQQDEw02OWQxNzEwOC1jNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3pKq07eosuEnxAz/++nu5azWZleyW+6e/AEaNbvyu6nAiexW8LD2i0loeQVG
W8I01DNrakr1FXznRAfLtbxL6QwOnrGF8xyScgDJ7V+l8PZSw1sTPrn+0hsjy1b7
l2HaPp8Zyv9B1iC/wndRSi0QVx7NYXVQlM0aj0NMfqbqX0Hec/pK0ipVfdBwJs6A
Nf5GVS5xWhYJzcOn8ZC/R8CbeQgKXzBoNX8xuDKBPwKPUcj8hTPL89Gi8KO3umRZ
0lklt/yMqBuvMf7AF7NhvbrkUx8CafBWcLO71s1HSqSjcMys7B/bWi6Z29n+uuzJ
bUkDnkDQcXYZexWdAvKBLMYFtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2BRtVH
fV6nbnj0230xclEsaV+PMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5
NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo
QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq
ekZoa1NLcDFLM1JvVTdoQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbaaFfZBT/MpVvdyQ9ooIYLRqE+e18ynP1sm2gaqGdTAxfZFkcpOxwdtV09Ef
t7+U/kHYjic7fH75Gu/YgRr3htpyJM6IYn7lzLxl63Jpwb3IARDTK4NBAq3uRQtq
ajmUje0Zjp3iRcrggrXJnqHFy4MkmjH4Q4b1BZQ5WTszn29HotlImLynyWTQI2CB
Oh5zvtKu8+n7Y+CaP3bpVafn4dgbzIyusA15l4xU2gdIinCRvlWvglHJtSnDfm6Z
p8++dO+Xg+CLANuGHzqkjxEFuSs1UYU3S+lnDci1seJ39BJsVmf0w5FOFTzAs8mV
pOxRdXmqhx9O4db0nJxYjDY6dw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:03 2026 by rpki-client