
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json)
Hash identifier: 7iwRHvX1ZjItwe0wrc31ZNTJ1mi3jgpsTLD8KvPFCoQ=
Subject key identifier: 14:B8:CC:10:21:A1:50:E8:6A:67:CD:FC:80:72:76:BC:37:FB:24:39
Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA
Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
Manifest number: 0129
Signing time: Fri 17 Apr 2026 05:19:08 +0000
Manifest this update: Fri 17 Apr 2026 05:19:08 +0000
Manifest next update: Fri 24 Apr 2026 05:19:08 +0000
Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: 7h9/qTp3Pm03+pZYXH9jJMpIIhhnatly+/6fZjC9jNk=)
2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: ACwMHQJQ4E23jnEheit3IBhH0p1Mz9Y2fP++jvIfqGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl
rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA
Validity
Not Before: Apr 17 05:19:08 2026 GMT
Not After : Apr 24 05:19:08 2026 GMT
Subject: CN=69e1c2cc-6b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:65:a9:eb:ff:2e:a9:fb:ab:22:be:21:2e:
38:71:a6:f6:82:69:07:53:7d:fb:b0:89:b7:e0:b9:
c7:93:02:f0:b7:90:20:fc:ad:c7:04:02:f3:13:ab:
ba:d5:a0:c4:97:17:df:8e:4e:6a:dd:45:89:b1:4d:
0d:56:42:30:45:53:a7:94:1e:e3:eb:98:25:40:85:
bd:87:c3:43:71:28:36:ef:ee:ec:ab:9e:d5:f0:9a:
05:a5:bf:c3:c6:64:b1:44:de:02:38:42:93:40:6f:
9d:eb:dc:a7:9e:1a:ae:da:37:d3:fc:f9:f7:ad:ee:
69:11:03:dd:53:7c:b0:05:eb:ab:4d:b0:42:c2:d6:
96:92:fe:01:c2:07:1f:d0:44:f4:71:fd:bc:84:5a:
e9:47:d9:d4:65:4b:c4:6a:cb:8c:6b:91:16:46:2a:
97:da:0e:0c:05:b3:b2:f9:31:ae:ab:31:71:a7:8c:
9b:c3:81:cf:dc:66:47:c9:55:e1:a2:25:1a:71:26:
d3:49:b7:b9:0f:e3:f8:3e:a2:09:0d:60:8d:e4:20:
f3:38:61:c0:bc:ab:0d:85:44:a1:8d:6f:11:a0:7b:
f9:e9:8f:71:0e:1c:78:14:0d:63:f1:90:63:9c:bc:
8b:53:ec:26:f5:88:6e:fc:b5:d7:b2:d6:9a:47:c0:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:CC:10:21:A1:50:E8:6A:67:CD:FC:80:72:76:BC:37:FB:24:39
X509v3 Authority Key Identifier:
keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:15:6c:6f:ca:b7:73:72:6d:a5:0d:83:6c:db:95:05:f3:54:
bb:80:41:d4:9c:0d:cd:3b:c1:28:32:8e:d4:ea:d8:09:fd:44:
1a:2d:c9:4d:35:df:24:49:76:16:f5:2f:e9:eb:b2:6c:8d:c8:
9d:50:54:cd:9f:9c:24:5e:4b:1a:4b:b7:1f:04:61:55:cf:b9:
f9:49:73:7a:1e:68:de:67:3d:e4:09:5f:c5:b3:81:83:d9:17:
2a:60:83:6d:c9:ad:da:7e:7d:06:1a:08:35:c8:8b:b0:59:9e:
4c:3d:97:46:76:ce:20:41:48:2e:d8:8f:e3:c5:46:53:37:84:
c4:5f:90:92:fe:01:b3:f9:a6:66:81:cc:02:60:39:8a:2f:72:
5b:fc:32:53:2c:21:aa:bc:fb:9d:b9:c3:e1:25:da:36:f2:16:
3a:76:d6:56:2a:fa:5b:ed:64:9c:8c:cc:9e:23:2d:93:ec:56:
1d:c2:b4:c2:be:fc:1b:40:7b:55:cb:04:92:ca:6c:f3:c1:67:
90:9f:fe:57:be:1f:7c:a0:af:57:3b:ed:82:45:8e:38:71:0c:
ab:4f:18:c4:75:f7:64:1d:3a:7a:29:f4:cb:ce:7d:c8:bd:31:
71:12:3d:3d:e7:34:c3:80:e4:79:10:b0:32:cf:11:08:22:1b:
6e:99:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:12 2026 by rpki-client