
$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
File: zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json)
Hash identifier: aENV3aHF/yAJhaWAmFXjImBQU0QITHwZwg60Nr2I0ag=
Subject key identifier: 32:0B:DB:D8:37:BA:E6:3F:5E:34:74:A5:96:21:3D:96:0C:73:2A:41
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Certificate issuer: /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
Manifest number: BE
Signing time: Sun 01 Mar 2026 08:10:59 +0000
Manifest this update: Sun 01 Mar 2026 08:10:59 +0000
Manifest next update: Sun 08 Mar 2026 08:10:59 +0000
Files and hashes: 1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: 17VBgcr1tDXpua5tNu2VZpkqRb3ZU5PTMxj3lCgHn+0=)
2: 296C92D0F5B611EFB7E6426EC4F9AE02.roa (hash: Pe4pc8GA1B8wkAg55zJbEc7GRq0oJ2fScreCfl3fORA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Validity
Not Before: Mar 1 08:10:59 2026 GMT
Not After : Mar 8 08:10:59 2026 GMT
Subject: CN=69a3f493-4320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:09:1b:8f:1e:91:91:31:7d:ca:ee:7a:ef:
9a:8c:af:b6:42:3b:60:0e:bf:20:59:79:21:33:cd:
22:a5:05:3c:64:2b:29:6f:89:80:32:f9:8e:d2:99:
f6:9d:9b:56:0f:ef:89:62:65:27:54:06:ed:59:26:
ea:4d:68:50:91:5d:75:81:0f:eb:16:85:52:b4:a8:
a8:93:a5:c8:38:f1:b3:57:88:6c:44:ab:50:49:fe:
d3:92:1b:fe:02:ed:ad:38:8e:8a:7b:92:06:0c:de:
2d:ce:54:e2:2d:c0:95:be:57:15:e0:f3:c8:ae:e2:
df:07:90:a2:36:5c:33:85:4f:f3:8f:e6:d7:6a:81:
30:fb:b8:24:64:14:f3:dd:78:95:79:1e:72:2e:ba:
22:a6:02:fb:b2:cb:e3:52:e5:9d:db:c9:78:da:22:
00:83:07:76:88:3e:46:b3:58:2f:81:41:f4:3e:03:
b2:1b:f7:fe:5e:4a:ab:0e:85:76:d4:19:a5:19:96:
7f:50:7f:e9:51:75:61:c4:d3:84:a1:7a:33:85:b3:
6d:d8:c0:f6:76:71:22:5d:cc:22:ae:32:ba:cc:cf:
68:81:c2:fc:c2:52:ec:df:71:10:6b:05:cb:1e:67:
43:ed:f5:47:45:89:80:48:ce:99:b9:91:59:51:b2:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:DB:D8:37:BA:E6:3F:5E:34:74:A5:96:21:3D:96:0C:73:2A:41
X509v3 Authority Key Identifier:
keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:fd:49:d9:34:06:6c:59:5d:11:81:e2:62:ce:ca:05:b4:14:
db:5b:56:55:fa:d3:43:69:fc:00:a4:23:a3:7f:94:80:22:bb:
8a:20:c4:16:36:2b:ba:b1:a3:37:25:55:54:8f:28:c0:45:57:
dd:86:bc:e0:3a:db:ba:d0:af:0e:03:6d:1d:80:3d:e5:4f:c6:
63:24:50:f6:52:7b:14:5c:46:fd:be:5c:26:ef:71:87:e2:1c:
74:62:83:41:d3:b2:36:6a:46:79:a9:b6:09:b1:ac:85:10:21:
3c:4c:ec:fb:97:a6:41:2f:29:21:10:39:ff:e7:f5:41:4d:79:
2e:7e:69:ce:a1:80:8f:c4:91:7b:03:b7:fe:12:8b:fc:67:b7:
99:3d:a2:5b:cc:05:dd:f8:e9:58:2a:96:5b:8d:ae:1d:54:0f:
ab:61:d5:bf:49:4d:03:8c:49:20:95:c0:3a:8a:1c:f1:5e:6a:
0e:09:de:43:84:af:f9:9b:f8:69:c6:28:3c:89:c1:a0:4b:74:
91:fe:bc:5c:79:bc:5a:ec:cc:46:6e:45:4c:28:88:57:db:11:
d7:10:05:2a:d6:3b:2a:d3:16:12:bc:c5:db:e1:7b:03:db:db:
52:0c:44:2a:bb:ae:b1:f0:b6:53:ca:27:e1:81:5f:7a:fd:fb:
a5:64:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:14 2026 by rpki-client