
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier: lnjAAZ2Q0VJQ7R3HnJh4VyQMsy9ahEcKX/Tnj8aN4hI=
Subject key identifier: AB:B9:84:3E:62:37:47:08:8A:46:51:1F:69:8D:78:4D:20:CB:A9:31
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 05D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number: 059B
Signing time: Thu 12 Mar 2026 22:56:53 +0000
Manifest this update: Thu 12 Mar 2026 22:56:53 +0000
Manifest next update: Thu 19 Mar 2026 22:56:53 +0000
Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: yzybutnqmH1dXmc6plO4qmCWXRyawFNuL5qZ20Bw2wA=)
2: F93DE378B66911F09D7E8031C4F9AE02.roa (hash: c07jP4kaBJLesC3fKCC1+hkjCe95/NhhL5juygnjjI4=)
3: 2A490316D97011F0A9AB95F59AD3641D.roa (hash: MTKYuHS54sbbIgz0FdQa7tPFCtPZViVZZlK3jzFk3Qo=)
4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=)
5: E2256F74D97011F0A26925FA9AD3641D.roa (hash: c0vbYLg0UntBGJI9A2FhToTcMXbZmIvcvE2u9KfX6Sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Validity
Not Before: Mar 12 22:56:53 2026 GMT
Not After : Mar 19 22:56:53 2026 GMT
Subject: CN=69b344b5-6172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:a7:54:fc:1a:30:55:68:56:1b:41:00:70:
f5:7c:15:12:bc:f4:d1:05:c8:4e:6d:f3:dc:0a:33:
41:69:d2:f5:01:a3:f7:dd:15:c7:fb:e4:50:4e:8a:
fe:d9:86:8e:20:83:89:29:68:32:f4:4b:80:c5:39:
4c:05:5e:89:f2:96:f7:cd:88:e5:b1:e9:4f:ef:91:
84:6c:22:f1:d3:f6:e7:8a:00:31:2b:85:92:2f:c8:
84:07:e5:72:3c:96:fb:2a:75:c6:a8:df:9c:06:cb:
6a:13:cc:00:60:98:60:e5:a9:aa:34:fc:39:f5:7d:
23:d2:a1:df:7e:3d:df:ea:c6:bc:aa:3c:ab:8f:99:
39:07:e2:87:45:3e:ec:49:54:d9:3a:9f:67:bc:ba:
f0:9e:5a:57:bb:fb:d8:84:12:ac:e4:ac:93:9f:65:
c6:47:41:1e:77:fe:59:b3:e1:51:1a:47:53:a2:37:
8c:ee:a1:11:35:bb:5d:c3:4d:4c:b1:4b:3b:3d:73:
12:c7:84:4e:26:e2:4f:6e:a6:e1:ea:f8:b7:d5:a2:
00:8f:b6:91:11:bb:59:e7:8e:34:3c:26:09:ab:bd:
ac:95:ab:62:6e:83:7f:d0:92:ae:3a:27:32:ee:1c:
80:d9:ef:f9:45:82:ad:be:ef:a4:00:bd:52:15:b9:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B9:84:3E:62:37:47:08:8A:46:51:1F:69:8D:78:4D:20:CB:A9:31
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:7c:99:0f:3f:6f:b6:e7:fb:19:70:62:18:e6:37:60:39:bc:
48:63:0f:2a:1d:74:3d:51:c3:00:02:50:01:f3:4e:4e:a5:1d:
4d:28:d5:1a:d8:96:b5:2a:24:89:26:67:f8:32:9a:0f:43:0c:
7b:89:53:e5:5a:c2:9e:2d:27:b5:dc:f0:64:33:ac:f1:7e:ba:
6e:08:10:18:33:6a:93:fb:b4:f4:50:11:87:13:5b:62:64:d9:
2f:f7:67:1f:4a:cc:a0:f7:bc:a9:93:0d:39:e4:80:04:49:87:
4f:e8:24:89:e3:14:b9:81:b7:58:82:30:d2:fb:54:fc:0a:0e:
8d:95:46:ef:1e:1e:92:87:d5:f7:a0:2a:be:a9:ae:1e:c8:6a:
33:ff:19:53:62:0d:c0:be:9e:c2:59:61:85:44:af:7d:d1:a2:
99:b6:9d:6b:d5:ad:e8:5f:d0:72:e5:0d:40:0d:ce:26:39:59:
b8:e7:b8:12:8b:c6:40:ea:d9:e6:1d:f9:7a:92:c3:03:bc:14:
4b:6c:df:29:59:d3:bd:49:95:d4:9d:b8:75:7a:4b:64:c6:17:
03:8c:79:24:35:25:70:7d:65:6f:48:ac:e3:a4:ca:d6:b2:a6:
0b:44:53:8f:72:42:94:19:04:39:51:de:3b:45:27:7e:cc:5a:
6a:91:a5:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5
RkEwNjA4QTcwHhcNMjYwMzEyMjI1NjUzWhcNMjYwMzE5MjI1NjUzWjAYMRYwFAYD
VQQDEw02OWIzNDRiNS02MTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkd2nVPwaMFVoVhtBAHD1fBUSvPTRBchObfPcCjNBadL1AaP33RXH++RQTor+
2YaOIIOJKWgy9EuAxTlMBV6J8pb3zYjlselP75GEbCLx0/bnigAxK4WSL8iEB+Vy
PJb7KnXGqN+cBstqE8wAYJhg5amqNPw59X0j0qHffj3f6sa8qjyrj5k5B+KHRT7s
SVTZOp9nvLrwnlpXu/vYhBKs5KyTn2XGR0Eed/5Zs+FRGkdTojeM7qERNbtdw01M
sUs7PXMSx4ROJuJPbqbh6vi31aIAj7aREbtZ5440PCYJq72slatiboN/0JKuOicy
7hyA2e/5RYKtvu+kAL1SFbn8xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKu5hD5i
N0cIikZRH2mNeE0gy6kxMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx
RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3
cVpNX0tVUGNKcE9mb0dDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAHyZDz9vtuf7GXBiGOY3YDm8SGMPKh10PVHDAAJQAfNOTqUdTSjVGtiWtSok
iSZn+DKaD0MMe4lT5VrCni0ntdzwZDOs8X66bggQGDNqk/u09FARhxNbYmTZL/dn
H0rMoPe8qZMNOeSABEmHT+gkieMUuYG3WIIw0vtU/AoOjZVG7x4ekofV96Aqvqmu
HshqM/8ZU2INwL6ewllhhUSvfdGimbada9Wt6F/QcuUNQA3OJjlZuOe4EovGQOrZ
5h35epLDA7wUS2zfKVnTvUmV1J24dXpLZMYXA4x5JDUlcH1lb0is46TK1rKmC0RT
j3JClBkEOVHeO0UnfsxaapGl3g==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:01 2026 by rpki-client