
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json)
Hash identifier: bkHnJkExDbSE/97SZRzqMDk5XnqN5B+d3Krrpwm8AxY=
Subject key identifier: B8:31:A0:65:2B:9D:C9:CB:A5:A5:2D:65:E5:8A:76:B4:8F:23:D0:B9
Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
Manifest number: 01BC
Signing time: Mon 02 Mar 2026 00:24:46 +0000
Manifest this update: Mon 02 Mar 2026 00:24:45 +0000
Manifest next update: Mon 09 Mar 2026 00:24:45 +0000
Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: wEtSSJIqBhpaMmk+nwAxR+S0FpYTtgXwb0s6crAvzgE=)
2: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (hash: HGdDjcoTsUm7kJL5rC6tXKA4D2ZhJnskWqB8F3KifFs=)
3: 2B9ED7AE8C8611F093C24B78C4F9AE02.roa (hash: bi2iG9oBsC/hNTwCVoxLS7RAbzRZyqyTqSKMjtrttUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Validity
Not Before: Mar 2 00:24:45 2026 GMT
Not After : Mar 9 00:24:45 2026 GMT
Subject: CN=69a4d8ce-d299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:0a:b2:d9:ec:f6:65:93:14:13:ba:b9:0b:
dc:58:2e:e8:e9:6a:45:e2:66:b8:15:49:63:bf:f0:
03:d3:fd:d7:ea:c2:9a:02:29:1a:52:09:ef:18:04:
ff:6c:f1:02:81:af:13:69:ff:11:d2:f9:a3:b0:c6:
0b:3a:55:e5:ad:9c:d0:84:2c:03:3f:e4:d5:fe:db:
6b:aa:c9:18:32:c9:32:56:4a:b6:6e:77:f6:89:29:
3e:22:05:6e:8a:8f:3d:1c:20:ee:56:42:b9:53:40:
0e:fb:9b:83:b1:bf:09:f2:d6:16:31:20:99:d7:5c:
f5:a8:70:0c:78:0f:01:62:bd:15:1e:0d:33:26:99:
b9:a6:43:70:16:64:3a:96:19:b0:c0:d5:23:de:0b:
02:df:d1:f0:45:90:ee:05:3f:22:a3:38:fa:d7:c2:
d0:56:9c:9b:98:ff:07:2f:bf:35:3d:99:36:6a:6b:
79:8c:48:1d:c2:93:73:3a:8f:20:ce:a1:d2:f5:4a:
72:f0:e4:24:7c:de:ce:71:38:2b:82:b3:f0:b4:b5:
da:2a:49:14:35:cd:52:d9:38:86:d9:36:be:3a:74:
89:46:68:dd:3d:ec:e4:99:68:b5:26:1e:47:1e:ed:
bf:fd:65:d1:64:8f:75:87:b9:2e:0b:a6:ac:3c:fb:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:31:A0:65:2B:9D:C9:CB:A5:A5:2D:65:E5:8A:76:B4:8F:23:D0:B9
X509v3 Authority Key Identifier:
keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e7:ba:c4:1c:4a:57:67:ee:e3:86:cc:9f:cb:d7:df:81:e4:ca:
b5:dc:5a:26:11:56:7e:46:b9:b8:26:b1:60:a6:42:23:c4:2b:
a7:26:d7:d6:f8:8a:f5:98:f8:70:76:10:0c:fc:93:2b:23:8b:
7f:0b:dd:3c:f6:16:39:5d:5d:c6:7f:8f:15:82:13:bd:54:60:
23:0e:01:7c:3a:c0:79:65:3a:f2:57:59:01:9c:ae:68:43:20:
50:ac:1a:66:ff:3b:cd:1f:35:39:df:29:e5:0d:56:14:41:04:
3f:7e:15:22:6a:7a:94:3a:05:3f:ab:ae:fb:8a:6f:32:61:f5:
12:7d:b7:51:4c:71:71:93:6e:ce:85:f9:75:4f:b0:8d:bc:93:
aa:1b:f1:5a:bf:e1:5e:f6:7e:74:68:fc:62:35:53:bd:bf:80:
0d:cf:7f:41:c3:7d:26:ed:85:ae:1b:d6:9c:ba:b2:30:20:4a:
fa:bc:be:7d:62:b3:94:28:09:98:7b:08:f1:81:e5:1f:c2:bb:
81:73:dc:eb:ef:ce:42:9c:95:e6:21:bf:a1:1b:8d:bf:0c:c2:
68:0a:39:74:a2:04:8d:3b:d9:41:8b:c3:64:e9:3f:82:23:41:
f4:7e:de:5f:cd:a9:63:55:87:d6:e7:26:ad:0b:68:14:b4:65:
d4:b9:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:22 2026 by rpki-client