
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json)
Hash identifier: UV0HJFxygecy05oONkZ2EerOr4hx+tfTNf7jg1NRhvA=
Subject key identifier: 7E:75:AE:F1:81:7A:0D:75:D4:12:61:E5:35:76:48:5A:F9:DF:9E:7B
Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
Manifest number: 6F
Signing time: Tue 03 Mar 2026 07:34:26 +0000
Manifest this update: Tue 03 Mar 2026 07:34:26 +0000
Manifest next update: Tue 10 Mar 2026 07:34:26 +0000
Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: OW2uUOWJoTdSTja9+ODrFd0iw2tPDjqwNAjQe6cPS6c=)
2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: BQkbdtjI99mxWqdYu14uU0wWLwTO/VUnPRItrckeDrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl
rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Validity
Not Before: Mar 3 07:34:26 2026 GMT
Not After : Mar 10 07:34:26 2026 GMT
Subject: CN=69a68f02-03ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:be:78:e0:90:f0:77:a7:0b:17:4d:67:00:
d3:6a:45:97:ba:32:a6:88:61:e1:f1:23:bc:8c:bf:
83:9c:bc:2f:2a:66:d1:d2:76:ea:62:1c:c4:97:ac:
2c:90:3b:4d:da:9f:8b:94:58:2b:47:0d:76:81:21:
e9:52:b6:f1:8a:17:4b:f8:29:f4:c1:cb:e7:c1:8e:
f1:ca:44:d1:8f:28:52:b0:b7:aa:be:e6:38:f9:27:
33:8c:28:a0:84:cd:8f:c5:27:28:64:ae:1c:0a:e5:
76:fa:b2:47:34:77:c9:8e:d6:db:41:ef:37:33:bd:
85:6b:69:3b:d8:79:cf:a7:2c:c8:f6:b6:17:d9:fa:
57:a5:51:6b:9f:61:8c:96:7e:1f:2c:7e:3f:19:fe:
cd:9c:1e:25:c8:6e:47:33:a1:c4:89:63:b0:51:14:
60:05:32:9e:43:8d:1f:7f:34:d6:e4:89:be:78:f8:
84:b8:a3:8a:3a:95:96:a5:bc:72:66:0d:f8:6e:2c:
c8:15:83:30:86:e0:bc:1b:61:7c:e1:6b:3f:13:fc:
bf:fe:e6:07:6a:4e:f8:5b:85:2e:6f:2e:26:88:c7:
05:9e:3e:2b:0c:04:07:45:a0:a8:ad:1e:cf:89:76:
6e:6b:a4:03:6f:a1:29:64:1f:67:3b:1d:c5:30:47:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:75:AE:F1:81:7A:0D:75:D4:12:61:E5:35:76:48:5A:F9:DF:9E:7B
X509v3 Authority Key Identifier:
keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:05:ea:85:0f:5b:cf:c7:81:1f:37:9a:7d:31:3b:f0:53:31:
d6:36:f1:45:40:ce:60:a1:b0:35:2d:05:5d:4d:f8:d7:0c:90:
c0:69:6c:33:86:f6:db:20:98:4c:e1:68:b7:93:41:28:e9:f3:
05:23:06:6e:2f:78:15:88:7a:56:9e:42:10:1e:63:5e:bf:55:
3c:12:cc:8a:1a:00:97:91:d5:22:a6:5d:ea:6a:3a:3d:db:fb:
01:db:66:6b:c3:08:9c:8c:ee:24:24:b7:7c:2d:20:36:d1:41:
05:f7:79:82:5e:2e:ea:93:76:d6:83:91:ed:a4:15:e5:a4:1d:
24:45:6d:89:27:96:58:dd:ba:f4:a1:5c:ed:87:36:be:ba:1b:
ef:b3:9b:ea:c0:b7:c1:41:7f:6f:3c:44:d5:19:88:bd:d8:e4:
6a:6e:48:fa:c5:3c:5e:00:51:cc:ea:dd:85:12:84:56:f1:c0:
1e:88:1e:3b:d5:64:99:a1:88:f3:08:20:36:16:81:7c:13:04:
66:18:d6:a3:80:d3:36:cb:c8:71:7b:ef:5f:dd:03:ab:8d:e7:
5e:e0:ab:d2:62:87:73:df:31:c2:43:a6:a8:ce:a4:5e:96:52:
52:cc:e5:48:40:ec:e7:85:6b:32:69:e4:49:bd:3f:b9:18:f6:
6a:00:2a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:44 2026 by rpki-client