
$ rpki-client -vvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File: ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier: 7ySFy8l0Ws4LRn6FyX6gkTDDl+M0S1WEYEJoTc7VHkQ=
Subject key identifier: 9E:37:46:52:F3:21:1B:FC:26:2D:84:EB:AD:7D:51:30:94:D3:C4:DC
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer: /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial: 06E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number: 06DE
Signing time: Mon 02 Mar 2026 00:02:58 +0000
Manifest this update: Mon 02 Mar 2026 00:02:54 +0000
Manifest next update: Mon 09 Mar 2026 00:02:54 +0000
Files and hashes: 1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: +BGwH5aaxuScRaZrawUa68E65cJ5CgPmchWScpuw+E4=)
2: 54CB555C57A311F09664E82DC4F9AE02.roa (hash: 8zSq/rqaKjpysVvvXWgHeKeayL3TVMK2Emf1uVmygFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91899BB, serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Validity
Not Before: Mar 2 00:02:54 2026 GMT
Not After : Mar 9 00:02:54 2026 GMT
Subject: CN=69a4d3b1-f3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:7a:6c:b0:ec:11:53:9e:43:3e:30:55:bc:
6c:b9:47:82:01:06:69:90:88:30:a4:25:ea:03:63:
88:59:db:30:58:ac:b6:e2:63:76:44:84:e9:58:c5:
e7:7b:a8:7d:c7:80:6a:5c:ad:4a:24:7e:99:d1:9d:
c2:75:ed:b6:79:fd:7f:3d:f9:8e:fe:1e:5e:30:bd:
56:d1:2a:87:c2:e8:da:ca:bd:7e:b4:ee:18:bc:74:
dc:0e:8e:80:c5:0b:e9:7f:1b:e7:5c:f2:2b:44:aa:
cf:3d:2b:b9:be:57:6c:82:38:7d:54:0b:ff:c7:0f:
a6:58:64:7a:d1:c8:65:9c:72:d9:b0:22:25:f9:0f:
ed:ad:17:fb:57:99:3c:f8:2e:2d:ef:08:0f:b5:89:
8a:96:40:75:af:55:e4:55:d2:63:27:db:10:f0:8f:
e5:7a:fb:9c:66:08:67:98:8f:ab:26:a8:7c:41:4f:
41:6a:6e:22:04:41:dc:e4:1b:ea:6d:e6:34:96:6c:
3e:fc:1f:71:62:dd:ea:d6:58:19:5b:92:a3:e0:b3:
9d:16:b3:fd:99:09:ff:40:6a:31:3d:00:c1:d5:2a:
61:c3:41:60:a7:a9:b3:79:46:23:bd:29:e1:dc:31:
99:3d:04:45:0a:38:ff:f6:cc:74:97:15:cd:e2:b8:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:37:46:52:F3:21:1B:FC:26:2D:84:EB:AD:7D:51:30:94:D3:C4:DC
X509v3 Authority Key Identifier:
keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:bc:f6:79:3c:75:69:82:5d:11:e2:ea:0b:db:9e:d2:c0:5d:
97:6b:5b:1f:19:6c:25:46:85:40:6b:6b:b3:a7:89:d3:ac:9c:
b5:a6:a1:6d:e2:e5:8d:2d:2c:7f:b2:2a:e3:5c:ba:f0:ad:80:
2a:e8:8c:0c:56:a3:54:f6:09:ae:e5:0b:8c:d0:a8:b9:f0:da:
68:04:2a:82:26:0e:fa:51:e9:e8:d5:3c:99:8f:2f:88:2e:52:
d7:46:6e:29:19:5b:33:ea:b7:ed:6a:08:b8:b6:99:95:7c:6c:
3a:b7:31:c1:43:c9:78:39:d9:c0:c0:7e:0c:98:f3:02:2f:ea:
2f:68:1b:87:ce:ab:dd:36:7b:5a:da:70:48:a4:f7:87:66:e9:
20:9a:a8:c3:c7:70:f9:3c:6a:32:e3:b2:35:e6:dc:85:19:25:
4d:97:87:cd:f9:d4:c1:88:bc:a2:f6:e3:62:74:32:4e:4f:fe:
19:61:33:ce:c0:31:d0:0e:ba:60:aa:b1:c7:2a:83:37:6b:e9:
f9:8a:bd:f4:1b:e8:e3:e0:fe:1d:31:6c:da:cb:be:88:dc:8a:
cd:f9:f9:17:e0:2d:56:70:37:93:d7:ef:08:24:70:d8:07:af:
8d:ae:f3:ee:9b:4e:3d:f1:b8:4f:4b:f6:f8:1f:96:b7:75:b6:
1d:81:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:27 2026 by rpki-client