
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier: O9GasjrAjqh3f7XbjKHBoyj8I1KdvbVZXhkKUUSjKuU=
Subject key identifier: 28:74:9C:46:21:BA:3F:82:49:94:85:89:63:B5:F0:EF:0F:E4:3A:1E
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number: 0266
Signing time: Sun 05 Apr 2026 01:42:41 +0000
Manifest this update: Sun 05 Apr 2026 01:42:41 +0000
Manifest next update: Sun 12 Apr 2026 01:42:41 +0000
Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: WN76YhLZRe8Prdu/rtN4Ihg+jhEuZW68r1/gacV0fPI=)
2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Validity
Not Before: Apr 5 01:42:41 2026 GMT
Not After : Apr 12 01:42:41 2026 GMT
Subject: CN=69d1be11-4484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:85:e7:78:d7:8f:76:95:10:cb:be:3f:1e:
b3:6e:0c:95:cb:f8:23:10:df:a1:b5:bc:f8:2a:27:
e3:fc:c7:60:ab:a5:94:55:39:b1:fb:75:66:8a:f6:
15:df:fd:f4:20:55:9c:99:0d:b2:cf:3b:41:61:38:
0d:6d:2c:10:1d:7e:29:ac:bf:75:73:f9:17:5d:15:
d2:a4:fe:b6:0a:7d:23:97:d6:36:0a:9d:98:db:da:
47:fa:f5:7a:8e:93:04:c5:67:a7:94:db:b0:a8:70:
15:7b:b5:e7:24:6c:3e:d0:37:3c:5d:e7:84:98:f7:
86:d2:d0:29:50:02:07:3a:c2:e4:5a:01:c2:04:4e:
8b:89:ac:37:98:c6:8d:82:61:0b:99:f7:d0:9b:37:
19:a4:a8:9d:93:6b:b0:ee:0f:8b:5c:c0:6e:ba:91:
a5:41:a3:89:e3:46:29:b8:91:91:2e:06:5c:82:c5:
de:3a:24:96:76:91:a5:cd:ba:57:d9:74:55:3b:d7:
68:a9:18:17:51:1c:30:be:13:ce:bc:f9:dd:d7:a8:
0a:da:18:b3:66:21:75:e9:fe:3b:ee:e0:2d:b1:1c:
c9:b9:a8:61:1d:4d:3a:fb:af:9d:15:fe:c4:9f:8e:
47:66:54:79:8f:c2:55:cf:a2:5c:d1:07:81:2f:31:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:9C:46:21:BA:3F:82:49:94:85:89:63:B5:F0:EF:0F:E4:3A:1E
X509v3 Authority Key Identifier:
keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:81:6e:38:65:77:ea:63:54:94:0c:7e:38:fb:07:34:5b:2e:
4c:2e:a9:3c:4d:a1:0f:4e:cf:16:74:3d:4b:ea:18:56:7a:12:
fd:0b:4f:3e:f7:dc:af:73:85:e2:a9:65:ce:67:b0:90:bd:b0:
f2:18:a2:24:d6:09:bd:b3:0e:eb:82:46:4f:e5:5b:d8:c8:2b:
64:3c:31:90:ef:5b:38:9e:92:19:e6:e1:6c:cd:ee:05:58:80:
22:bf:4e:0b:34:57:ab:74:7f:54:23:b7:40:0d:9e:d9:88:91:
b7:6a:b4:a9:67:70:90:e9:54:20:55:4b:38:16:a7:ab:15:ef:
dc:38:bc:0a:e8:b6:e9:91:18:b2:b6:fd:58:94:15:54:c7:5a:
1d:e1:c9:b7:78:1b:b3:f4:e2:41:8d:f7:85:36:bc:c1:32:f6:
bf:ba:ef:1b:d3:6e:9b:9a:d1:bb:97:75:46:26:c1:0a:3f:6b:
32:83:41:48:e7:ab:56:ab:a6:83:08:ce:f8:22:82:81:a2:10:
83:a3:57:33:cf:5b:c7:1c:65:77:48:55:08:8d:4f:a0:da:e4:
1c:a6:f5:2a:fc:d2:a3:ad:5e:e1:c5:36:6c:79:1a:2a:a0:87:
27:87:78:9e:4a:af:7e:d7:84:3e:79:d9:66:46:66:fa:73:57:
59:35:01:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:27 2026 by rpki-client