
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json)
Hash identifier: pljMGVdEIm1JpdmxHmBpKjJ5i5wpQPtvpEbIVpzfCAI=
Subject key identifier: C0:40:D7:D7:D9:B4:35:90:F9:1D:39:9F:EC:E3:18:7E:C0:19:54:B4
Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2
Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2
Certificate serial: 0CCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
Manifest number: 0CC1
Signing time: Sat 28 Feb 2026 18:32:06 +0000
Manifest this update: Sat 28 Feb 2026 18:32:06 +0000
Manifest next update: Sat 07 Mar 2026 18:32:06 +0000
Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: QPWX+a0t7dvH6PkTqdJssnAGIhdQ6KOca5IV/SSmm+k=)
2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: tGg2gZvvqmK1MXVY5rUGUJI2gxizSYf5OdYwsS9Mmfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl
rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3275 (0xccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2
Validity
Not Before: Feb 28 18:32:06 2026 GMT
Not After : Mar 7 18:32:06 2026 GMT
Subject: CN=69a334a6-31bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:a1:94:47:61:71:b1:b0:c2:f2:e2:58:ad:
f7:3e:9d:27:37:d5:dc:bd:be:e6:1c:88:0e:65:12:
4c:15:07:af:61:87:ed:65:31:08:a3:e2:f5:15:fa:
53:f1:9a:16:d0:8d:eb:d8:6b:62:a6:09:91:9f:e6:
8d:f1:eb:4f:10:bc:27:e0:5e:49:cc:3a:de:80:18:
3a:12:5e:be:bf:65:99:e8:97:ba:bf:d5:8e:ad:d2:
8d:0d:bc:8a:22:da:0c:0f:fe:ff:e5:85:46:bb:4e:
13:b7:cf:79:a0:25:e7:66:49:03:49:0d:87:71:11:
25:9b:dc:20:9f:d4:ed:2b:50:61:06:6a:0d:9d:92:
f5:3c:ba:ad:a0:87:ba:66:76:a8:46:6a:20:25:7d:
5a:9b:c0:61:09:a1:65:bf:a4:37:95:91:47:d7:d9:
a0:a5:17:5e:c5:b5:cb:88:7c:4e:f1:ef:24:38:3b:
e7:e3:43:7e:0f:a4:e0:67:2a:b4:9c:fe:f7:d9:30:
ae:b6:3d:c9:27:4a:e2:58:cc:ad:01:98:a8:58:b6:
0c:02:04:64:17:8e:33:f2:2e:97:97:dd:16:a5:f7:
ee:fd:9d:d1:b0:11:8d:ff:2b:38:c4:bb:1f:29:15:
f5:fc:fd:17:11:75:d9:3c:ec:13:10:f0:01:fc:04:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:40:D7:D7:D9:B4:35:90:F9:1D:39:9F:EC:E3:18:7E:C0:19:54:B4
X509v3 Authority Key Identifier:
keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:96:a1:1d:0d:c9:7a:c0:dd:c5:cc:af:49:c0:79:81:8e:37:
fc:1d:89:30:aa:57:05:67:9e:c0:7d:d9:c1:aa:20:d3:f3:fe:
85:8a:25:5b:80:66:d5:65:ea:a9:1d:cb:7b:eb:ff:e6:7d:2d:
95:39:f5:db:39:50:21:83:12:72:49:87:84:4f:c9:e7:83:60:
97:5c:b0:34:d0:ed:10:d2:98:d4:04:a7:d4:5b:2d:94:2f:b3:
2b:45:7a:7a:8c:82:a9:2a:5c:a8:cc:8d:d9:1c:1d:42:e9:6f:
51:2b:44:93:90:0c:f7:0b:d1:2e:55:5b:27:27:1f:1b:95:6c:
b3:08:dd:06:53:b0:b1:c7:34:53:48:28:80:45:fe:e3:19:7e:
09:57:18:4f:7d:ad:f5:6d:83:be:c5:c1:8f:a9:66:9d:98:12:
a6:b6:dd:52:67:82:a4:a8:1c:30:c2:5d:58:c5:57:4a:fa:b0:
3d:34:a2:77:68:b9:19:b2:ac:74:a9:d6:5f:13:c7:1b:b1:ad:
5a:0d:be:8e:29:4d:43:32:ac:85:b1:00:e1:c0:87:30:e8:b0:
5b:e8:5d:36:a4:bb:19:3b:57:db:3c:b0:ee:c2:5d:89:54:eb:
32:a4:a6:8b:cd:37:f0:1f:3b:0d:fd:59:b0:73:74:6f:b1:89:
ad:fa:f8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:42 2026 by rpki-client