
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
File: f_ZWW3k9deFOctx32CgmvUO3_nU.mft (raw, json)
Hash identifier: 2D+NGO3dl+ZbnwE2mAU1LgaQpble2ohBrbUqMwKq6xs=
Subject key identifier: 44:CC:97:6F:64:C8:B0:30:E2:96:9D:D9:7A:E0:E4:6E:B3:66:A3:06
Authority key identifier: 7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
Certificate issuer: /CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
Manifest number: 024B
Signing time: Sun 19 Apr 2026 02:10:20 +0000
Manifest this update: Sun 19 Apr 2026 02:10:19 +0000
Manifest next update: Sun 26 Apr 2026 02:10:19 +0000
Files and hashes: 1: f_ZWW3k9deFOctx32CgmvUO3_nU.crl (hash: OYDwVI4MVA/pDe8FbdgzkqV5ftD6/EZtuONpB2ipwUQ=)
2: 7B45598CC3F111EDAB69B855C4F9AE02.roa (hash: KD2BlBHmdYrYN90XGC4f8F1qUJ8NW/API0cYFd241XM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13C3, serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Validity
Not Before: Apr 19 02:10:19 2026 GMT
Not After : Apr 26 02:10:19 2026 GMT
Subject: CN=69e4398c-7cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:7f:d2:46:eb:4c:f5:c8:ec:85:97:d1:99:
c4:7d:00:a3:5e:57:e4:93:65:be:4d:e2:77:fc:31:
2d:c9:d8:e7:40:59:f6:53:a4:44:64:38:47:21:f0:
80:4a:87:4b:23:fd:e8:6a:4f:08:36:dc:a3:18:42:
f8:81:75:fc:4a:d4:53:52:e6:b0:41:14:13:68:12:
1d:a8:fb:f2:20:f7:64:80:cd:74:37:89:f7:b8:71:
91:41:66:f0:e2:e1:d4:38:22:b4:10:08:0b:39:3f:
a3:19:c4:71:21:a6:e9:33:64:c8:45:a7:19:68:26:
db:69:69:e8:7d:c0:ad:c4:62:11:f7:2e:d0:80:d5:
6d:f0:88:58:0d:14:38:07:a6:37:af:bc:5c:a6:d5:
96:8f:53:58:47:f2:cb:c5:4f:2e:c4:96:1b:f8:70:
f4:9d:52:eb:dc:23:1b:83:75:6c:f1:9c:1a:79:58:
07:56:a7:f8:9e:e6:60:c0:2e:f9:2d:e3:b5:b1:35:
57:d1:13:fd:33:b4:d1:4b:0f:e2:f0:c8:af:bb:93:
87:73:f0:1f:66:35:96:3a:9e:0f:06:05:1e:e9:90:
e7:9d:31:6c:f7:68:48:7f:f8:63:06:bc:29:e9:25:
44:28:f7:0d:1d:81:de:83:68:99:08:00:5d:6f:58:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CC:97:6F:64:C8:B0:30:E2:96:9D:D9:7A:E0:E4:6E:B3:66:A3:06
X509v3 Authority Key Identifier:
keyid:7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ac:b2:da:9b:48:53:5f:1e:3f:6c:a9:3c:bc:76:38:f5:3e:
40:89:9c:f1:58:73:f3:46:3c:3f:cf:57:52:0c:17:53:d1:97:
89:37:20:41:2d:4d:f7:60:75:51:20:b9:ff:d3:9b:72:5b:f5:
3a:f9:30:24:3d:99:d7:cd:d1:93:ab:43:2c:37:de:1d:71:64:
12:ec:4b:53:ec:fb:81:2d:51:d2:2b:1b:e0:d1:1d:4b:a3:2f:
aa:bd:8f:35:4a:68:43:60:f4:27:4f:57:71:0f:bc:aa:fc:07:
55:e8:de:96:c3:2e:c2:1c:27:08:1b:37:3f:2e:2b:24:ee:ed:
d1:34:08:83:f9:f7:3e:40:6a:6c:52:0e:47:b9:64:9a:c5:fd:
7a:ef:8d:3a:28:30:df:08:df:5f:84:38:cb:69:d5:76:79:fd:
71:fd:0e:f5:b9:06:cd:28:1e:f6:ec:2f:7e:09:e4:cb:5c:0a:
7f:d1:3c:f3:8f:a0:ef:41:d7:24:a8:d0:e8:52:4a:6b:c5:89:
79:12:df:eb:54:07:9d:3d:fa:1c:44:3d:84:ad:fb:c2:45:f0:
39:ec:13:d5:1b:51:e1:97:1e:31:2d:72:52:53:74:d9:4d:81:
2e:88:91:24:4a:2a:10:f3:49:32:6e:82:15:26:bd:fb:96:c4:
9b:0c:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:18 2026 by rpki-client