
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
File: zyFayRHKpSBlx-xKx5V4NTgr4-0.mft (raw, json)
Hash identifier: 1E9120tkMWRkHLQD4Bht+/SnVP+2dLvEnbw1yU3Umyk=
Subject key identifier: BB:ED:9B:F4:21:6F:54:6A:B6:E2:43:A1:EB:75:12:7D:C8:C2:50:A7
Authority key identifier: CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED
Certificate issuer: /CN=A91BF2DB/serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
Manifest number: 3B
Signing time: Sun 01 Mar 2026 09:56:35 +0000
Manifest this update: Sun 01 Mar 2026 09:56:34 +0000
Manifest next update: Sun 08 Mar 2026 09:56:34 +0000
Files and hashes: 1: zyFayRHKpSBlx-xKx5V4NTgr4-0.crl (hash: R6I/8qFjAZTH/AD6p1EGLuQLG0k7WrPG8VylTax5lqw=)
2: FD88540EF5E311F0AB8204204D6F56BC.roa (hash: 15B38ymuojJsU1lBlmAxw+iYaANkqD35wxiK+F+Bx6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl
rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:56:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2DB, serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED
Validity
Not Before: Mar 1 09:56:34 2026 GMT
Not After : Mar 8 09:56:34 2026 GMT
Subject: CN=69a40d52-dbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5b:d2:ce:b8:9b:ef:6a:ea:6b:e2:57:ba:e3:
c3:cf:6d:77:b7:94:d7:f5:c6:bb:4b:af:15:2d:47:
fc:6b:74:0e:18:02:0b:e1:00:96:0a:e0:2f:94:36:
02:59:4e:e2:ba:04:87:2a:8d:c9:66:37:29:45:ad:
e4:1e:1a:e4:a1:55:0b:e2:64:29:94:d4:bc:42:ee:
eb:89:93:dd:e7:65:6e:e4:67:94:00:e0:1d:50:e2:
63:b5:5b:35:a7:2d:ab:b8:d2:43:ef:2b:d2:02:f3:
6f:73:19:dd:10:6d:d2:2d:21:9a:e0:4d:f1:bc:a5:
0b:dd:6a:bb:65:c3:ed:e5:a9:ca:23:f2:24:a7:22:
ba:d0:dd:0f:63:de:e3:18:82:ec:24:50:46:fc:7b:
e5:99:9a:be:bc:93:4b:fc:ae:6b:4d:d6:b8:11:3e:
4e:07:60:43:d8:70:a5:6a:8d:d6:09:21:d4:eb:6c:
9b:6a:d6:1b:69:9f:13:3d:a5:32:99:93:e6:be:89:
70:f2:41:3f:54:69:c5:8e:99:91:26:0a:4c:eb:86:
b3:13:19:fd:c3:c7:2c:7b:55:83:d9:9d:1e:fc:46:
9a:c6:8e:43:a3:ce:0e:49:b2:60:88:39:9c:9b:9f:
61:af:0c:ec:6e:fc:e2:56:a5:7d:b9:fa:3a:54:78:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:ED:9B:F4:21:6F:54:6A:B6:E2:43:A1:EB:75:12:7D:C8:C2:50:A7
X509v3 Authority Key Identifier:
keyid:CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a2:91:c1:46:78:80:97:95:f9:bf:df:da:b7:54:2a:a0:04:
0b:ce:06:be:78:db:36:d5:e6:b6:58:18:0d:2d:e4:c6:38:61:
7b:b3:b7:f0:56:55:04:45:78:d4:b0:f2:63:6f:11:22:68:4f:
30:9f:0f:0a:5c:ef:1a:17:1c:97:4b:58:ee:63:32:59:84:40:
d5:54:44:1d:2a:67:87:3d:46:4f:ec:1d:53:6f:7c:75:c3:52:
31:6f:f8:57:3d:62:49:22:b3:ef:3d:e9:35:ff:c0:93:18:59:
07:6b:b9:72:e0:16:46:a5:c6:14:19:c5:66:5b:a8:86:10:8c:
f8:78:9b:7a:d4:4f:15:e2:9e:fa:ea:8f:ec:bf:90:64:60:93:
91:af:1d:9e:80:1e:f6:8e:e2:9b:44:8e:26:a9:6c:db:ab:44:
b8:ee:75:0a:8b:91:a8:66:53:b4:a8:e8:d4:ad:8f:56:dc:97:
ed:ee:3e:8c:c6:6d:63:ad:5a:b7:60:04:59:59:34:03:e8:02:
6d:3f:a2:78:c1:e9:e9:95:d8:9a:34:e3:e4:a2:1b:46:3c:f4:
71:e8:50:6c:83:4e:7e:ed:f8:37:2e:aa:ff:de:18:5a:7d:cf:
72:3a:95:73:58:ba:0f:19:c1:e4:4b:b0:8c:3c:63:9f:47:00:
8c:c9:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:42 2026 by rpki-client