
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
File: z8CATaxP_3oipAThDphkpxHeGck.mft (raw, json)
Hash identifier: mfSCx/N/YCzAWrg5xkw6D1SgaTl9T/xWpzYFHebbUoE=
Subject key identifier: 2B:BC:F4:76:3A:5E:96:C6:6F:1D:BB:CF:11:14:18:EA:BB:B8:38:A5
Authority key identifier: CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9
Certificate issuer: /CN=A91A12C4/serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
Manifest number: 0116
Signing time: Sun 01 Mar 2026 06:54:08 +0000
Manifest this update: Sun 01 Mar 2026 06:54:08 +0000
Manifest next update: Sun 08 Mar 2026 06:54:08 +0000
Files and hashes: 1: z8CATaxP_3oipAThDphkpxHeGck.crl (hash: AZtbcDcjR268S/4wmZ48hIM0FuaMEB1Ny1BbhWv+4E8=)
2: BCA395126C1811EFAFBE6B0FC4F9AE02.roa (hash: xTh/XECRIgCR6mcMb4Sy7r1o1s9piU8w2MVo6gmyMfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl
rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A12C4, serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9
Validity
Not Before: Mar 1 06:54:08 2026 GMT
Not After : Mar 8 06:54:08 2026 GMT
Subject: CN=69a3e290-aa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:04:da:50:2e:8e:e1:ad:46:e9:07:73:a7:
f4:4f:dd:22:fe:0c:1d:aa:ce:bf:6c:3d:1c:b5:4b:
9a:0f:c9:7d:3f:34:66:99:ab:c2:62:cb:64:fd:13:
fa:d9:55:a8:50:d3:b9:70:ad:f7:3a:4e:b3:b5:bf:
6a:dd:27:cc:11:2f:5a:cb:df:73:f8:de:2c:c4:d6:
f1:9d:45:16:a2:ef:d9:2e:29:3d:4b:38:ae:c5:82:
1c:8d:84:1c:25:3b:c5:3c:10:9a:ef:1f:46:e7:6a:
cc:3e:81:50:dc:68:41:a4:e9:a3:2b:0a:34:26:27:
f1:eb:44:e7:86:43:d7:6d:cd:72:e6:52:11:cb:19:
78:11:30:81:96:0d:82:70:45:90:08:c4:1d:b4:ff:
99:d9:b4:af:e2:58:31:5c:29:67:83:5c:d6:ca:2c:
47:9a:5b:9d:24:62:21:79:30:d8:29:4e:14:53:f1:
db:27:0d:5c:bf:86:37:06:3b:74:33:04:5a:00:b4:
89:ad:d6:f1:54:18:08:9c:44:21:e0:8e:12:1d:29:
0b:2a:03:fc:05:e9:27:09:6e:97:1e:69:cb:d9:b1:
cb:30:84:1c:99:6c:90:f0:d3:98:9e:07:1c:a4:30:
d1:05:b1:3d:36:9e:1a:a3:e9:78:c6:b8:c7:5e:4f:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BC:F4:76:3A:5E:96:C6:6F:1D:BB:CF:11:14:18:EA:BB:B8:38:A5
X509v3 Authority Key Identifier:
keyid:CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:48:bf:35:c5:c5:9d:e8:83:a9:71:38:b3:08:40:f4:33:51:
e7:b5:dc:58:80:ee:d1:c1:dc:5c:a3:de:7e:a9:f5:d6:40:b0:
c6:ad:bb:f3:54:85:d9:82:f2:22:39:cf:a7:74:74:4c:1e:e8:
ed:49:9e:7f:8d:e2:a4:04:c6:1d:8b:e8:03:f0:98:43:0a:41:
9c:66:9d:28:64:45:4a:5c:52:88:20:2d:31:58:4e:9f:d1:67:
0f:a1:84:34:0b:c7:3d:15:3e:ae:9b:0a:17:d0:1a:9d:72:a6:
cf:ff:f8:1c:eb:2b:af:4c:b1:71:1e:23:3f:30:1e:03:9c:93:
5d:29:f4:a3:a9:ab:70:21:27:e9:92:72:55:f1:98:81:a5:bc:
e8:25:da:10:9d:63:44:ff:5b:93:2d:52:07:fd:a1:33:d9:12:
e6:63:07:ed:26:91:45:c1:36:d2:69:78:80:d5:1a:ea:67:94:
70:57:91:6d:ce:ec:4e:28:dc:91:ae:41:df:0b:b7:a3:11:f7:
c9:bc:37:f4:ce:d8:e2:8f:56:89:04:c0:82:d3:c5:d9:2d:46:
6d:5a:70:31:f2:8e:52:75:14:a8:30:ca:85:33:20:dc:8f:e1:
2c:13:61:b3:b5:25:81:bd:a4:7d:cb:7a:8e:76:3e:99:7a:8d:
da:0e:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:38 2026 by rpki-client