
$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier: naTlibRC/BRiGVej/a074c7FUIUVciikyLt4hxr/2GQ=
Subject key identifier: 2A:22:79:4B:44:3F:32:65:D7:69:85:6E:4E:E6:98:67:67:08:52:C6
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial: 23EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number: 23D8
Signing time: Mon 02 Mar 2026 02:12:19 +0000
Manifest this update: Mon 02 Mar 2026 02:12:17 +0000
Manifest next update: Mon 09 Mar 2026 02:12:17 +0000
Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: kvPVD5ee0NjfsveRcTENDmFic5ucBQBUIyFCFxwaLT0=)
2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t4RiKC6653Plu7Nba6sPuJDiD6/DW8iHgAWcMFWwJEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9194 (0x23ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Validity
Not Before: Mar 2 02:12:17 2026 GMT
Not After : Mar 9 02:12:17 2026 GMT
Subject: CN=69a4f203-8886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:0d:a1:3d:8b:ba:70:be:ca:29:c6:45:40:
12:3d:b6:08:19:d4:3f:db:62:de:12:43:7d:70:c7:
32:5c:f4:56:ab:6c:8b:bd:42:0a:c8:04:5d:0d:af:
7e:37:2a:50:86:6f:18:cb:57:72:ff:f0:60:34:2b:
60:fb:2f:b5:73:d9:17:4b:2d:97:4b:cc:72:b0:c6:
03:64:2b:6a:7c:af:48:bf:d2:1c:6e:14:54:a2:8d:
18:a9:a7:90:6a:e4:cc:c8:19:2c:d0:32:a6:ab:70:
f7:9f:ca:f9:99:08:b7:5f:51:24:8c:6f:a0:b9:3f:
2f:08:68:25:57:cc:7a:4f:fa:0b:9c:69:1e:0d:7f:
42:b9:c1:d2:4c:1e:cc:97:59:7a:ba:6a:b3:c4:8e:
ec:10:05:1a:af:59:76:4a:f6:71:6e:16:37:55:00:
64:32:ee:99:69:58:09:37:32:6e:81:c9:cd:14:18:
30:fc:3d:14:e9:31:42:88:5e:8b:fe:af:f8:b5:61:
81:d1:25:93:45:82:05:7f:84:c9:ca:74:d3:49:03:
be:bd:c3:4b:2e:4a:8e:dc:5f:b5:fd:41:4b:dc:07:
a9:2c:c8:a9:69:9f:91:1a:e9:65:49:f2:a9:8f:88:
d2:b3:42:ed:90:70:fc:76:28:63:37:4a:d3:c1:67:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:22:79:4B:44:3F:32:65:D7:69:85:6E:4E:E6:98:67:67:08:52:C6
X509v3 Authority Key Identifier:
keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:38:59:c0:84:ac:ae:75:a0:14:49:9e:1a:4b:1b:6d:3b:24:
ed:eb:9c:7e:40:dc:a2:bd:d9:f5:fb:24:04:37:48:5a:46:aa:
39:84:0f:ea:8e:f0:17:87:df:18:d3:90:1d:ac:3d:4d:47:86:
44:6b:4f:97:b0:4d:ef:ea:7c:ce:38:44:56:5c:03:b4:b8:49:
b1:a5:07:c3:e1:d2:87:50:4e:32:a5:84:55:84:17:0a:60:30:
ab:7c:63:6c:75:98:f4:ca:98:84:dc:0e:98:b7:20:98:12:f2:
6b:3c:7c:50:47:0c:a9:63:02:28:54:a4:ab:ad:1d:18:b9:e8:
ca:76:16:53:5e:ef:36:b9:85:52:53:87:5a:e0:83:91:84:4d:
23:1b:b9:04:78:63:95:c0:da:ee:94:89:7a:0b:cb:1e:a1:15:
32:4b:5d:d1:00:f1:c2:67:41:54:a2:c9:47:bd:11:e4:0e:47:
f3:14:9d:f3:6d:86:9f:eb:bb:4a:e3:66:af:9e:8c:9f:0d:d1:
7d:9e:cc:f6:a7:05:4f:df:8d:e1:66:4a:30:71:39:99:71:f9:
d8:eb:d9:11:2e:63:3e:ca:bf:d9:2f:7a:fe:ac:8a:d0:14:21:
27:a8:f4:46:9e:40:8f:1a:4c:86:25:4c:ae:b3:ab:47:21:fe:
76:e8:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:16 2026 by rpki-client