
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
File: z6g6HLFaT2Y_z9bITI4K00wOBnM.mft (raw, json)
Hash identifier: 5gR34WV1OWrzV7qySMvzuXpCgO58C5XS/F57Qns9UMM=
Subject key identifier: BD:65:13:BF:6A:6A:6E:FC:D6:BD:76:CB:58:19:D3:C2:4D:9C:BC:A5
Authority key identifier: CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73
Certificate issuer: /CN=A91AA5F1/serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
Manifest number: 48
Signing time: Sun 01 Mar 2026 09:43:04 +0000
Manifest this update: Sun 01 Mar 2026 09:43:04 +0000
Manifest next update: Sun 08 Mar 2026 09:43:04 +0000
Files and hashes: 1: z6g6HLFaT2Y_z9bITI4K00wOBnM.crl (hash: xsRiE9jSYZzcbFQZaui4Jq10ju8mZFpBKQ3ZTdsV6bk=)
2: C56E767CA89811F08959A364C4F9AE02.roa (hash: 3h7NekD5uJiBtHmPr+ql3V5I4Pzxe7a+UwFYXogXAM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl
rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA5F1, serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
Validity
Not Before: Mar 1 09:43:04 2026 GMT
Not After : Mar 8 09:43:04 2026 GMT
Subject: CN=69a40a28-1850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3a:d7:e0:17:f5:93:19:1a:6c:1c:e2:ef:0c:
7a:52:4b:85:ef:dc:f7:12:47:bb:6f:2b:d8:84:56:
e6:53:99:ad:9e:d5:74:27:a9:f4:a4:54:05:0c:9f:
c6:f1:08:b8:90:07:4a:f0:b7:22:aa:97:54:97:87:
c2:2f:c7:eb:5e:37:e7:3e:46:a2:24:97:8e:23:9f:
3b:db:58:22:ef:91:f8:ac:be:16:50:6d:50:44:be:
45:51:92:f2:b5:4e:f5:aa:2d:dc:02:2a:56:ae:d5:
3f:fe:08:ac:38:ff:38:3e:ea:2b:b7:ea:5d:2a:4d:
54:a7:94:6e:83:fe:24:d6:51:ed:01:2f:d5:6a:67:
99:11:de:fc:d4:46:0e:73:b7:c9:7d:c0:eb:98:a8:
03:2b:9e:96:98:4a:e7:d1:94:83:7c:d1:78:1f:f8:
28:ba:a9:52:27:8e:bb:ce:4a:66:52:60:ef:16:d7:
73:7c:76:04:df:94:73:69:6e:28:00:3d:67:39:06:
48:16:f6:26:57:a4:21:88:fd:52:6f:a5:e9:83:51:
79:da:c6:4a:5c:26:57:a1:3c:b7:52:85:f4:74:16:
a5:aa:e6:01:e3:d1:d1:46:91:6c:f6:5a:48:e3:c7:
6b:ae:d0:7b:7c:0c:0e:b3:50:72:dd:94:94:45:32:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:13:BF:6A:6A:6E:FC:D6:BD:76:CB:58:19:D3:C2:4D:9C:BC:A5
X509v3 Authority Key Identifier:
keyid:CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:21:5d:be:40:75:24:31:26:61:c1:78:37:28:6f:7d:29:1c:
9e:ff:b2:bd:18:6f:79:34:4d:a1:80:58:c8:16:c6:dd:65:33:
69:e8:18:f5:db:45:5f:c0:9b:44:9d:c3:11:9c:41:5d:d5:eb:
1a:e5:c9:e7:59:a1:23:62:c3:59:32:4f:cf:42:0d:31:0d:27:
71:50:11:b9:50:b7:51:be:f8:72:15:76:ca:52:49:7b:ab:0f:
41:1a:ad:23:92:e5:19:fe:0d:c9:80:5a:22:36:31:f8:fe:39:
f5:75:6f:5a:d9:81:c3:bb:1d:fb:ef:87:ca:b8:b1:c0:47:06:
57:91:bc:ae:0f:c8:0e:e6:59:a2:ea:c6:9e:74:c4:7d:c7:73:
43:72:2d:49:5f:f9:d9:40:bc:99:e8:5f:bb:0d:a9:1e:62:b4:
ed:4f:7c:71:de:bf:f9:07:9f:69:4b:55:3c:5a:ec:05:88:94:
5f:96:c8:40:d3:c0:ff:d6:28:ca:6c:54:cc:04:ea:f7:89:a3:
a3:bd:4c:55:a4:90:1d:dc:77:2e:1f:e7:79:87:ce:4d:21:e8:
cc:06:c8:70:e0:7b:9d:0e:0b:59:65:79:ac:c5:e8:c2:2e:c4:
09:3d:e7:9a:66:4f:c2:b9:d2:80:46:35:54:a4:63:87:1b:c3:
6d:d7:98:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:07 2026 by rpki-client