
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json)
Hash identifier: npoEru9SaVoi83zfAXcv0FTB11M8NFBDzn1wL0JfBMY=
Subject key identifier: 8B:B6:2D:F6:B2:6E:67:29:1B:10:AC:9F:35:9C:2B:20:82:19:63:3B
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
Manifest number: 012D
Signing time: Sun 01 Mar 2026 06:35:35 +0000
Manifest this update: Sun 01 Mar 2026 06:35:34 +0000
Manifest next update: Sun 08 Mar 2026 06:35:34 +0000
Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: teEOfFfE04iFj7ICYjL4oGk15BPhbzwVZ1vcOPQ1Jm8=)
2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: aOiSDYOcKoNPJK5dAvtJf70EvscXRCj0p7VI3j21/MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Validity
Not Before: Mar 1 06:35:34 2026 GMT
Not After : Mar 8 06:35:34 2026 GMT
Subject: CN=69a3de37-e7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:d0:16:d1:5d:f4:f6:a8:52:5d:c3:a2:d0:
2c:91:43:97:df:f3:91:a6:b5:72:66:7d:fd:56:81:
8a:59:31:6e:ff:ba:39:21:e4:c6:29:e4:d4:39:ea:
22:a5:8b:b8:a4:19:91:97:5b:b2:8e:24:b7:e3:44:
3b:42:35:08:bf:af:a8:49:52:e4:0e:23:90:fc:04:
a1:a8:06:90:93:f7:b5:26:f9:87:e9:1f:c1:a0:99:
7a:8b:bb:ef:f5:06:6c:73:28:5a:2e:91:9f:a3:eb:
7d:a8:6e:ad:17:f6:4d:d3:8c:f8:e9:f6:c8:57:4f:
a7:d6:da:ab:10:44:2d:81:7c:a6:44:dd:50:2c:cf:
40:5c:dd:84:72:ff:bb:af:e8:ec:34:20:00:8c:ef:
d1:9e:95:3b:c7:94:45:6c:59:fc:6a:11:56:03:2f:
b5:59:47:c2:64:21:69:4a:56:52:f7:d1:2b:c4:64:
5f:18:26:3f:76:eb:11:a7:03:24:56:6c:b3:8e:b4:
75:bf:21:08:52:b8:6f:89:72:61:8c:69:01:fe:19:
96:1b:3f:43:88:e4:a2:89:04:f2:cd:bc:9d:a8:98:
62:fe:98:83:e4:bc:31:f8:88:c2:31:95:dd:af:db:
66:2d:c2:34:03:3d:73:4f:55:b6:94:cc:e2:2c:d7:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B6:2D:F6:B2:6E:67:29:1B:10:AC:9F:35:9C:2B:20:82:19:63:3B
X509v3 Authority Key Identifier:
keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:fb:37:ee:f8:72:45:25:b0:15:06:b9:dc:66:6a:fa:44:c3:
1f:e0:b0:0b:0b:20:22:c6:8b:a5:f2:01:9e:e9:6b:4a:1d:08:
8f:40:e9:e2:8e:53:83:54:d6:a2:ed:bd:7b:b5:07:ad:82:b5:
9f:79:74:5f:2f:9e:b3:ee:a4:a3:5f:e6:0e:81:c3:49:57:db:
e1:ee:cc:04:cc:71:c3:74:ac:c8:3c:02:61:c2:d4:eb:4b:18:
46:2e:65:81:66:57:96:79:9a:70:39:7f:a0:04:0a:b0:27:fb:
0b:68:fd:79:26:8d:43:be:7d:d2:6a:aa:c7:f5:e9:a2:62:d4:
18:90:b4:3e:cc:9e:58:cc:a1:73:59:ca:ed:11:15:1d:23:21:
57:b5:c6:87:b3:ab:e5:42:77:1b:ed:5b:9e:7e:5b:04:1b:6b:
0c:69:f9:fd:47:36:cd:25:68:d9:77:8c:ed:ac:52:53:04:e3:
ff:f8:a6:74:57:39:e9:58:01:3e:b8:7a:83:e5:33:cd:d3:d4:
9e:80:08:4c:56:82:7c:19:38:27:1e:16:f9:b0:c5:9e:ec:26:
ef:d5:59:9a:8d:43:4b:a5:b0:2e:3b:61:ff:b0:66:45:01:6a:
91:ed:c4:1b:d1:9f:30:a8:b1:c5:dd:41:ec:a5:ef:bb:89:27:
fd:b3:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:51 2026 by rpki-client