
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
File: z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json)
Hash identifier: xHyyYNg5abaOz85tqf95U97jT08tX6zInOrO86SD4rU=
Subject key identifier: D8:63:9C:46:35:99:E2:5C:86:A8:EB:83:F2:CC:91:95:F2:B3:91:18
Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
Certificate issuer: /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
Manifest number: 0134
Signing time: Sun 05 Apr 2026 04:53:25 +0000
Manifest this update: Sun 05 Apr 2026 04:53:24 +0000
Manifest next update: Sun 12 Apr 2026 04:53:24 +0000
Files and hashes: 1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: RhJ82sKTQnR1KMJvrz8dQu22PZJiXA8BROEayoHNUq4=)
2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: HnPe7oTE/NJwLfNgQpYdaZfEzbuO3TebzvAvQ+UM9po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Validity
Not Before: Apr 5 04:53:24 2026 GMT
Not After : Apr 12 04:53:24 2026 GMT
Subject: CN=69d1eac5-3843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:af:8f:0f:1b:54:be:49:35:65:f4:f4:8c:03:
a8:45:d8:56:fa:79:19:b3:4c:72:91:68:ac:ac:8e:
ba:28:c0:79:1e:e0:70:7f:40:5b:ef:e4:27:e5:96:
a8:0d:82:36:e2:08:a3:5d:86:65:87:4c:67:2a:c9:
02:ee:3f:f1:0a:f1:4f:6b:aa:22:c5:7f:ec:61:66:
c0:52:32:d9:c8:3d:44:20:36:90:ad:83:c6:02:9a:
96:e8:6c:f1:56:d4:0b:98:82:2d:9c:40:6d:21:0f:
75:db:cd:26:f1:34:2e:b3:80:27:6e:9a:2d:41:08:
10:e7:fc:d5:98:40:19:a9:79:74:d7:4c:05:93:21:
f5:13:1b:fc:62:ff:8d:15:bb:b8:3f:6a:46:d3:9b:
79:73:de:ff:c0:e4:b9:57:93:49:fe:92:b1:0c:d5:
e2:85:66:39:20:60:c9:d5:62:fd:b4:b3:78:db:e5:
dd:64:c2:f8:e9:40:06:cc:51:94:9e:c9:46:88:5e:
c1:da:ba:bb:61:cf:23:2a:bc:f4:db:3d:38:be:2e:
ae:cf:0d:4f:68:31:d7:bf:48:be:42:8b:33:eb:e1:
b5:93:ea:3b:2d:85:bd:7e:a2:bd:11:6f:88:2d:83:
63:de:6b:22:9a:92:87:89:32:66:7c:60:9a:b4:0b:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:63:9C:46:35:99:E2:5C:86:A8:EB:83:F2:CC:91:95:F2:B3:91:18
X509v3 Authority Key Identifier:
keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:72:37:e8:4a:1c:ca:a6:a7:40:b9:e1:b5:c3:ce:43:82:f4:
79:e4:16:cf:9a:c3:e4:bd:fc:5f:10:2c:d1:30:6d:4a:07:54:
4a:d1:8e:bf:43:1f:fc:75:f3:c6:a9:f9:cf:c0:f7:a7:ec:35:
57:0e:73:02:d8:72:59:a3:9c:95:83:55:1a:6c:b6:73:45:17:
bb:a0:73:6a:41:f0:0e:80:dc:36:46:51:c9:12:03:c4:16:c4:
03:21:84:82:58:6c:62:df:ea:1a:47:a4:fd:02:41:1b:61:3d:
c3:db:7a:fc:09:00:b0:30:e5:2e:9a:0c:c3:19:27:63:0a:82:
6e:51:4b:0d:97:05:85:ef:57:c9:2b:1a:0d:a5:e4:5a:5e:09:
97:6c:12:52:7a:bd:1a:c6:97:07:78:23:23:37:ac:c0:5b:a7:
68:a1:bd:8a:59:07:c1:43:d4:68:bb:b8:9b:6f:b0:cd:de:10:
b8:ec:4b:09:1e:78:cc:fd:86:09:ce:9f:7a:d5:06:25:ac:cd:
5a:e8:31:64:6a:2f:0a:fa:77:3c:84:1e:9a:f6:69:a5:72:a1:
b5:fa:62:68:70:ba:3d:e9:e3:ae:d9:2a:ac:94:83:7d:96:d2:
f2:f3:53:c7:a4:51:20:71:5e:b8:2b:58:74:e5:7b:7d:2f:cf:
e3:6c:09:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:18:54 2026 by rpki-client