
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json)
Hash identifier: sZ2I00YxpHfBR5RrRyguT8gdye9Nmqywhzy2XVUoqIw=
Subject key identifier: A3:47:74:44:DC:C0:A7:FA:FA:AD:B5:11:95:FD:F8:A7:4D:CE:9F:ED
Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
Certificate serial: 0C64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
Manifest number: 0C57
Signing time: Sat 28 Feb 2026 18:54:01 +0000
Manifest this update: Sat 28 Feb 2026 18:54:00 +0000
Manifest next update: Sat 07 Mar 2026 18:54:00 +0000
Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: HwBSsk+RQPbqXL5COfhsFoisvBz10/ydkg/cG1I/IAY=)
2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: AhG5EQmnKsHYz3IRggOMcJqSh+00kQLALDjFL//vrE8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl
rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3172 (0xc64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
Validity
Not Before: Feb 28 18:54:00 2026 GMT
Not After : Mar 7 18:54:00 2026 GMT
Subject: CN=69a339c8-992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:f3:9e:02:47:44:64:d0:ce:4b:8a:de:51:
2b:cc:ee:6a:59:7a:1a:ae:57:11:f4:a7:b3:80:3b:
d7:1e:f7:ae:b3:bd:58:a8:a6:51:21:24:49:dd:77:
19:8c:46:64:10:ac:0b:73:af:a7:9e:82:2f:cb:e4:
7d:31:4a:72:3e:7d:24:48:aa:b2:bb:e8:7a:e3:78:
ba:93:44:ca:18:38:36:d8:b9:d8:e4:42:07:94:de:
ca:56:50:37:99:75:a0:d5:7d:e5:50:16:83:52:11:
33:75:8b:f0:0f:1e:7f:fc:48:d4:fb:cb:1f:ac:07:
32:a1:48:d4:db:05:e0:52:17:d1:97:95:30:4c:14:
48:6c:16:4b:64:84:bb:36:40:dc:26:9e:25:b5:b0:
b0:2e:c0:e6:0a:38:98:24:b6:9e:76:b2:04:91:e1:
27:bd:0e:8f:02:36:51:03:02:48:c6:9b:b7:89:7d:
b5:ca:94:b9:30:7a:5f:55:4a:5e:bd:7b:9b:c5:af:
db:6f:5d:e4:ab:8a:fc:92:eb:aa:0a:e4:c2:f2:46:
ca:52:bf:b4:9c:54:3b:47:18:cd:ba:33:66:9e:8f:
4e:60:5c:37:01:e8:39:e7:06:12:f6:d6:17:9a:60:
c3:ee:e2:14:ac:7b:4a:2b:18:5d:b5:0d:5a:40:ff:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:47:74:44:DC:C0:A7:FA:FA:AD:B5:11:95:FD:F8:A7:4D:CE:9F:ED
X509v3 Authority Key Identifier:
keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:ff:5e:4f:f6:ff:64:22:4f:4c:58:64:f8:c5:2a:d7:d9:24:
d7:c3:62:af:d8:91:b0:7b:89:59:d6:43:de:dc:f2:7c:33:ad:
76:4b:5d:1f:03:f1:c6:f9:53:7e:58:55:b8:79:52:99:34:7e:
cf:b6:a0:43:e9:7a:54:c3:56:6f:a5:b3:9c:49:a9:48:38:fe:
2b:fd:e3:b8:8b:66:8d:4a:2b:21:e2:6c:aa:55:09:33:e1:8e:
7d:26:b6:74:14:bd:e7:97:cc:1a:77:50:73:ab:ce:ee:37:b9:
5a:10:82:55:5b:8a:e9:b6:32:50:b7:b4:0f:fd:52:c8:70:c6:
ec:7b:35:b9:d7:50:ab:fa:74:40:c3:c4:30:98:ef:1e:b5:6b:
cf:25:b0:83:6b:85:ef:ae:ab:62:2c:83:27:65:a1:6b:56:4a:
cf:89:10:d7:97:fd:85:d9:0b:ca:ad:b0:b6:e3:08:a5:28:2c:
bd:46:6d:8f:57:47:b0:6b:71:5c:db:0e:85:83:8c:fb:1e:f9:
96:00:4e:6c:5a:36:37:b7:93:2d:02:d8:8a:c9:79:a1:40:aa:
70:03:78:8c:05:24:c6:32:e5:6d:11:7f:ad:46:b7:fe:a7:17:
0c:8e:26:35:50:ba:e6:b6:3f:57:c7:18:9b:82:2f:7b:3a:9d:
fa:87:de:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2
NzFCQkZEQjAwHhcNMjYwMjI4MTg1NDAwWhcNMjYwMzA3MTg1NDAwWjAYMRYwFAYD
VQQDDA02OWEzMzljOC05OTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl9XzngJHRGTQzkuK3lErzO5qWXoarlcR9KezgDvXHveus71YqKZRISRJ3XcZ
jEZkEKwLc6+nnoIvy+R9MUpyPn0kSKqyu+h643i6k0TKGDg22LnY5EIHlN7KVlA3
mXWg1X3lUBaDUhEzdYvwDx5//EjU+8sfrAcyoUjU2wXgUhfRl5UwTBRIbBZLZIS7
NkDcJp4ltbCwLsDmCjiYJLaedrIEkeEnvQ6PAjZRAwJIxpu3iX21ypS5MHpfVUpe
vXubxa/bb13kq4r8kuuqCuTC8kbKUr+0nFQ7RxjNujNmno9OYFw3Aeg55wYS9tYX
mmDD7uIUrHtKKxhdtQ1aQP8QPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNHdETc
wKf6+q21EZX9+KdNzp/tMB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG
NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Mzg2OS83NURBNDQ3QzFGNEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRV
ZHZTWlZFQ3pZRXBuRzdfYkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKP9eT/b/ZCJPTFhk+MUq19kk18Nir9iRsHuJWdZD3tzyfDOtdktdHwPxxvlT
flhVuHlSmTR+z7agQ+l6VMNWb6WznEmpSDj+K/3juItmjUorIeJsqlUJM+GOfSa2
dBS955fMGndQc6vO7je5WhCCVVuK6bYyULe0D/1SyHDG7Hs1uddQq/p0QMPEMJjv
HrVrzyWwg2uF766rYiyDJ2Wha1ZKz4kQ15f9hdkLyq2wtuMIpSgsvUZtj1dHsGtx
XNsOhYOM+x75lgBObFo2N7eTLQLYisl5oUCqcAN4jAUkxjLlbRF/rUa3/qcXDI4m
NVC65rY/V8cYm4Ivezqd+ofeGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:34 2026 by rpki-client