
$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json)
Hash identifier: d71gSkEePLLTwLNQZ9x3IRAqc3NenuRlm8kEPPt4QXk=
Subject key identifier: 89:03:F0:FB:04:F4:A9:BF:4C:E9:C2:7F:07:DB:2B:F5:11:60:91:89
Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA
Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
Certificate serial: 30D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
Manifest number: 30C2
Signing time: Mon 02 Mar 2026 00:09:16 +0000
Manifest this update: Mon 02 Mar 2026 00:09:12 +0000
Manifest next update: Mon 09 Mar 2026 00:09:12 +0000
Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: dS6EkmzQFgL7IIZHA0o+VXHkC2xv4KEV416K8GMNIJ0=)
2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: EZBXtatzDllfCW2rTDFXkEXED9M+uf0VNnXIRtQVlAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl
rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12498 (0x30d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
Validity
Not Before: Mar 2 00:09:12 2026 GMT
Not After : Mar 9 00:09:12 2026 GMT
Subject: CN=69a4d52b-fd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:ae:7c:64:f5:d9:11:f2:54:57:9d:7a:02:
2d:12:0d:8c:f3:1c:57:c3:b4:8d:9b:fb:0c:1c:43:
d9:7f:45:42:65:65:56:42:83:6e:e1:86:5b:91:86:
9f:c0:1e:a6:cf:b4:0f:8f:e0:5b:69:63:a2:39:d1:
53:47:46:5d:31:97:62:3b:42:93:6c:23:50:f1:a9:
26:5e:81:71:ab:80:4d:8d:16:d9:7b:c4:5e:d2:94:
52:b8:54:3f:de:dc:62:65:a2:95:fb:1f:bb:57:de:
d0:0a:e8:46:19:c1:83:fb:cc:a5:39:b5:50:dd:13:
db:8a:9c:f9:53:2f:f9:68:bd:52:ff:b9:74:1b:c4:
d4:06:3d:e2:9e:37:94:3f:45:a2:0e:76:34:f9:22:
fb:7f:c1:57:2b:57:10:9d:05:4e:96:1a:f4:a2:09:
f7:1c:1f:3e:f2:6f:e2:a8:ce:80:e8:14:ca:5f:e1:
c6:ba:3e:a7:70:8e:0a:1a:26:34:20:35:c3:d5:0f:
3d:e6:4c:bb:3a:4a:53:94:b9:b9:1f:9a:5f:4c:53:
9d:20:fb:cb:45:99:0b:32:cc:5e:5f:d7:7a:3b:44:
8f:bc:a4:a2:6f:f6:10:7f:6a:40:ca:dd:9b:5c:6c:
be:51:e2:eb:e1:39:f0:b2:0f:5b:d8:1d:dc:ff:1f:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:03:F0:FB:04:F4:A9:BF:4C:E9:C2:7F:07:DB:2B:F5:11:60:91:89
X509v3 Authority Key Identifier:
keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:88:21:df:ba:2b:4b:14:fd:b6:4a:27:ff:56:d6:e5:ff:97:
88:73:a8:18:c0:12:a9:d3:be:27:a1:21:0b:e5:5e:64:38:f7:
9a:2b:3f:de:8d:dd:a5:3a:17:ab:0e:6f:4f:9b:04:51:b4:43:
69:d2:ff:e7:34:2a:d9:9a:03:06:9b:dd:14:6d:1d:b9:42:ff:
a8:b6:d6:26:59:13:d2:3a:47:8a:49:d8:25:2b:e9:11:81:98:
6d:bb:ac:c6:7b:04:b2:bc:92:d8:87:0d:fa:de:41:c2:2e:33:
a1:b4:88:e9:01:29:96:e0:53:9f:af:d2:77:e5:24:72:06:e2:
12:13:83:b8:eb:11:ea:43:64:95:43:8c:c0:08:ad:3d:de:87:
30:c0:f8:90:34:a4:37:a3:6a:02:fd:3a:59:00:66:69:4e:2c:
12:5f:b6:c0:0b:0f:1c:30:91:25:34:c8:9d:51:36:82:5e:97:
cf:cd:53:d4:1c:55:7b:58:b0:5b:96:a9:e4:f5:65:ea:ba:ba:
84:8f:96:4e:54:b3:2e:74:35:b1:86:f6:78:23:7e:4a:28:d2:
97:2f:e5:a5:7f:00:63:34:97:3b:76:fe:18:05:06:45:92:f4:
20:d8:86:b5:ff:c6:81:75:b0:25:ba:7e:91:0c:45:68:ee:58:
ee:18:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:07 2026 by rpki-client