
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
File: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json)
Hash identifier: YmWxGpJEFcBNu7+dtrLZ6/cVo42S0Hd1gzMGR8EnebA=
Subject key identifier: 89:74:C5:23:F6:B5:80:90:13:91:BB:0A:89:2D:F3:84:88:AD:E4:5D
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Certificate issuer: /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
Manifest number: 19
Signing time: Sun 01 Mar 2026 10:28:56 +0000
Manifest this update: Sun 01 Mar 2026 10:28:55 +0000
Manifest next update: Sun 08 Mar 2026 10:28:55 +0000
Files and hashes: 1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: HHrHLUxRzOoMTn2Se7jyPKfYNt/ec2rXRwr9XWQ1EE0=)
2: 8B10B888061111F18D858310203D8C67.roa (hash: tOl6umKX3unrAEmRMF9DGSQuWUSsAqCraLPKeYMTquU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Validity
Not Before: Mar 1 10:28:55 2026 GMT
Not After : Mar 8 10:28:55 2026 GMT
Subject: CN=69a414e8-6f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0f:eb:ad:1c:48:1b:b4:a3:95:09:95:aa:f8:
15:d6:bb:71:76:3f:02:8e:67:61:f0:d3:cb:b1:d3:
96:70:76:3d:fc:17:58:5e:26:13:b3:ab:3a:b5:e8:
c4:bf:0d:94:d5:c5:63:18:8f:1d:cc:e4:a1:ef:df:
9e:c0:df:72:15:21:b8:9b:71:92:cb:69:12:ac:27:
97:9b:2b:05:81:30:4d:75:08:94:d9:31:31:a3:1b:
07:a5:29:a5:17:23:46:70:07:81:da:68:1b:41:bb:
73:21:b5:fa:50:72:76:e6:dc:9f:80:5e:68:48:c0:
cb:a6:3c:01:57:8a:de:df:86:3d:1d:82:2c:b4:64:
65:88:92:62:ac:e1:9d:68:ce:54:14:b9:17:c3:69:
33:1e:0e:a6:3d:54:f8:91:f7:24:6f:8f:1c:3e:3a:
2f:89:dc:6a:8d:63:94:c0:a2:7b:ba:ae:0e:e6:34:
39:f4:32:34:5c:c2:b9:2f:f3:68:93:cf:52:5c:6d:
89:69:22:20:7c:41:3f:0f:ba:3a:a4:07:e9:54:49:
87:d6:04:de:4c:14:6b:bc:c8:1a:37:6a:c0:c6:32:
f5:f0:80:2f:9b:92:96:4b:65:14:ac:87:87:04:ab:
44:c7:cd:1a:ea:5b:c0:e0:a5:fb:0a:52:45:8a:29:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:74:C5:23:F6:B5:80:90:13:91:BB:0A:89:2D:F3:84:88:AD:E4:5D
X509v3 Authority Key Identifier:
keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:53:08:2b:8c:83:21:07:c6:46:5a:02:1b:33:e1:2f:35:db:
0f:72:4b:8a:82:6f:01:11:12:f1:03:4f:99:89:b7:ba:29:3b:
8b:b3:ee:e6:d4:7b:74:f0:dc:05:30:a4:0e:3d:75:d5:6d:19:
35:b2:d4:c7:2c:51:5e:27:7c:d8:ec:e3:2b:b2:b8:71:20:66:
0b:75:ab:02:bb:cf:67:b6:96:c6:8d:37:e6:67:a8:8e:0c:f0:
20:27:84:ad:99:91:4f:9b:30:e5:48:72:c7:f6:ff:80:79:e0:
65:e4:a3:5e:3b:ac:74:f3:fa:44:ac:70:7a:c9:d5:e9:02:c2:
38:5d:9e:b4:8f:08:c3:88:fc:54:7e:f4:dc:d9:c1:12:8c:e2:
db:ce:53:22:ba:c5:60:c7:6f:a6:45:35:bd:a1:e5:24:dc:cb:
2b:72:31:d3:d9:56:a9:c1:a6:24:2c:b1:88:9f:af:57:87:f4:
d1:4d:24:12:d8:4c:52:8b:be:da:4b:5f:92:88:75:42:a5:9b:
7a:b9:3d:e9:a6:51:7a:89:c4:60:a0:c3:88:78:e9:76:35:03:
a6:c2:3e:27:06:78:3a:b5:72:a3:db:a5:7f:e5:13:80:c9:73:
59:75:bf:ab:1d:e0:c9:a8:22:8f:d5:dc:1e:c3:be:78:79:56:
b9:c3:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:30 2026 by rpki-client