
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
File: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft (raw, json)
Hash identifier: zsqMb9OJhG73zRvF6ITu0s0LxWyb43mqqX291Ilpm78=
Subject key identifier: E1:25:BD:BA:5F:67:88:2E:11:D7:F5:10:9C:A0:B2:CB:05:D9:20:DA
Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
Certificate issuer: /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
Manifest number: D4
Signing time: Wed 15 Apr 2026 06:22:43 +0000
Manifest this update: Wed 15 Apr 2026 06:22:42 +0000
Manifest next update: Wed 22 Apr 2026 06:22:42 +0000
Files and hashes: 1: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl (hash: v/Y/rwbRoE1AFK82ACRCr0rEoRDzgonYIBQbbEmMt8k=)
2: 992A7358004211F0AC90656CC4F9AE02.roa (hash: p1iNzs7m8iHrfQ8AnJhFGKvDY9F4t1QWaHIUzSsJTWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Validity
Not Before: Apr 15 06:22:42 2026 GMT
Not After : Apr 22 06:22:42 2026 GMT
Subject: CN=69df2eb3-deea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:0d:bf:f7:5b:33:7e:49:b4:39:67:4f:66:
10:06:d1:a5:b6:01:a7:20:01:28:5b:59:7c:0d:72:
1e:82:8d:02:a1:3f:db:73:b6:a1:f5:ce:a0:03:27:
bc:ce:71:c7:f0:eb:28:95:74:0f:27:f1:21:df:60:
35:c1:9e:4d:51:2f:42:c2:e9:97:48:d8:1b:c4:78:
83:95:52:68:ed:e3:9b:6b:5c:02:99:68:cb:93:47:
f6:a2:98:b2:4f:42:6e:36:0d:e8:d1:36:e7:d4:b1:
b8:03:df:e8:87:95:74:8e:74:6e:14:a0:b6:a9:a1:
00:d1:45:f1:82:4c:76:27:b5:53:c9:85:54:44:8a:
13:31:8a:42:35:81:48:47:ec:b8:de:4f:b7:24:0f:
b0:91:f5:a7:11:6a:19:5f:7c:0a:0c:50:e5:21:4e:
01:7e:43:0f:89:4e:51:3b:12:36:c0:d3:e8:2e:03:
b2:58:b9:d7:ad:9d:42:32:0a:c7:46:20:32:3d:29:
01:9b:0c:12:d2:97:78:8c:f7:f8:3d:b5:b0:84:bc:
f3:df:46:9d:6a:f5:67:d4:a4:c4:9c:14:08:fa:c6:
45:25:93:93:37:ed:7d:c4:59:2a:a9:16:92:71:cb:
af:97:43:a1:36:d1:5d:3e:40:20:07:af:3c:e4:e2:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:25:BD:BA:5F:67:88:2E:11:D7:F5:10:9C:A0:B2:CB:05:D9:20:DA
X509v3 Authority Key Identifier:
keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:0a:1f:4f:bc:83:4e:e5:fb:20:26:05:94:03:cd:06:c4:13:
3c:11:b4:e8:02:6a:08:6f:09:1d:5a:a7:12:c2:e9:db:18:63:
e7:b2:f4:d0:27:c0:8c:f3:5d:47:40:28:0e:8b:ef:fd:7e:c5:
63:9f:3e:fc:dc:c1:33:e2:d6:ce:b4:ad:e1:36:bf:47:be:2a:
1a:10:44:16:40:a8:dd:df:73:f5:9f:af:d3:24:17:f8:26:f1:
72:c5:83:07:30:52:1e:0a:d6:a5:b8:82:4e:61:93:3d:56:44:
05:66:82:db:d3:9a:61:7d:2a:50:ba:84:ba:43:21:93:c3:f5:
8e:11:c7:15:14:31:1e:ed:53:51:82:83:39:53:e4:0e:bc:a0:
ef:0a:b7:6a:5e:2b:48:c5:dd:62:ce:9f:1b:79:d7:43:d8:b3:
46:01:18:76:21:c7:ba:af:ed:b1:06:9d:ce:fd:a4:3a:eb:45:
0b:b6:a1:c8:df:00:76:e5:52:89:00:63:17:36:63:43:76:f5:
3c:3f:8e:cd:e6:40:93:a6:2e:52:23:ec:f6:2b:95:89:d4:1b:
fd:f5:61:f9:10:44:cd:0f:fb:25:c7:0c:64:58:b8:54:ea:32:
89:ab:14:42:32:9e:af:30:ed:ed:f6:f6:29:52:5e:9e:f6:7c:
73:1f:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:58 2026 by rpki-client