
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier: OHFqE+AP2f/Aak+yt69z/haEgb2uNT69uNsHmW2isQc=
Subject key identifier: 35:79:95:D7:38:C2:70:F5:AC:6B:C2:B8:21:C2:06:88:C3:1B:98:8E
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 02A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number: 027F
Signing time: Sun 01 Mar 2026 23:33:18 +0000
Manifest this update: Sun 01 Mar 2026 23:33:17 +0000
Manifest next update: Sun 08 Mar 2026 23:33:17 +0000
Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: reRJs6Zfc88YgIf0dXQDw4I4ioE2tosgjHh2Eem8d40=)
2: 455D199EE38B11EE84566164C4F9AE02.roa (hash: gOV5rPqQrYO4YVfNAWomUe0MtcUzLHbDhM46sP91PRA=)
3: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: IUtOdJiE9Ch7kGLlPuHyU4+jmWHwHE+NOWpak4vAtYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Mar 1 23:33:17 2026 GMT
Not After : Mar 8 23:33:17 2026 GMT
Subject: CN=69a4ccbe-2120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:02:e4:11:1c:ba:20:2c:1e:f5:a1:ec:1a:
09:d8:31:32:07:19:46:21:59:40:1b:be:d2:dc:b9:
bb:1d:47:4a:91:b7:a0:d4:35:c8:41:b3:2b:45:0e:
fd:f4:4b:c0:9b:03:b3:77:11:8b:6b:30:95:ed:18:
05:a0:23:f7:ca:3a:03:20:cf:24:0b:66:a6:1b:f6:
7e:14:77:8f:77:05:c6:a0:5e:5c:39:c5:de:31:77:
dd:66:c1:c0:8d:b7:36:81:b3:33:5a:e1:4d:ab:62:
79:35:dd:08:f5:fe:07:33:f2:3b:ee:96:21:17:cc:
5c:84:6f:dc:3c:0e:99:66:ad:42:ab:8d:e6:9e:6c:
9f:58:1a:dd:9f:af:f3:c3:1c:3f:6e:c3:ad:e6:c8:
82:76:28:a7:6c:ee:08:94:5e:c9:0f:18:ee:8d:54:
b4:bd:e2:24:e6:28:13:7d:49:a4:d2:59:f3:be:b1:
5d:40:30:4d:ea:2a:6e:5d:c8:19:1c:56:0a:69:57:
0d:47:da:e8:c4:4d:d3:4e:87:a0:37:ab:cb:9a:9e:
0c:6e:42:38:71:97:46:2a:52:83:97:28:46:be:86:
b7:a0:88:72:25:fa:62:2b:61:f2:86:62:fc:3f:b3:
8f:22:36:e7:2b:20:a4:2b:f7:ec:c7:cf:62:83:a8:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:95:D7:38:C2:70:F5:AC:6B:C2:B8:21:C2:06:88:C3:1B:98:8E
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:49:16:90:0d:d1:bb:be:a8:0d:ee:69:02:0d:bf:0b:25:b1:
7d:f5:69:c9:8f:91:2a:5a:e8:9e:7f:e6:27:9a:fe:c0:8d:fa:
6f:84:3f:3f:42:e1:3f:5f:0d:a6:f5:5a:31:7f:d8:4d:64:ee:
e1:ee:79:5b:1d:e1:2b:d1:57:54:07:b2:ca:03:db:84:41:3c:
d8:0b:82:c5:ba:48:de:d8:d2:b4:2e:df:9c:d2:23:9d:2b:a8:
bf:95:38:72:43:bb:a8:98:2b:cd:1e:7b:16:87:20:71:16:0a:
d9:d4:b8:95:de:38:91:1b:8d:12:d3:24:fc:43:d6:a9:02:1e:
80:39:de:3a:64:0a:26:fe:8e:7c:bb:62:0a:63:16:63:20:80:
1d:fd:06:b1:36:5d:20:0c:c1:58:c1:b2:09:b7:66:33:ff:39:
a8:4c:b4:c5:5d:44:7a:7b:b6:60:03:4d:0c:76:7a:7f:1f:4b:
fa:f1:df:5a:1c:23:51:81:46:6b:d3:18:a1:eb:23:77:16:3f:
54:ef:cc:20:c4:d8:38:88:fe:5c:31:6a:03:e3:74:90:f7:e8:
7c:ce:df:6f:2d:e2:99:7b:99:af:77:37:ec:4a:e2:fb:5b:ec:
d2:0c:67:05:ea:e7:fc:8b:bd:d4:a4:62:40:ed:98:95:9e:15:
2f:6e:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:22 2026 by rpki-client