
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier: daawlIx2JseW9fk6NHAJGWfeA/fwfpgWT3RVmyfNBCI=
Subject key identifier: 2B:55:87:68:5F:7B:1D:7E:13:C9:C2:2F:3C:2F:DC:CD:E3:3C:40:20
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial: 3579
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number: 3549
Signing time: Sat 28 Feb 2026 14:29:05 +0000
Manifest this update: Sat 28 Feb 2026 14:29:05 +0000
Manifest next update: Sat 07 Mar 2026 14:29:05 +0000
Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: o/GQunT9hrqv90f5a4iOZWVYKQOgDVe/BgWl4fjIC2w=)
2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: CZL34a4C5G0DmjPgUV/R8LPE+CW74MjYbH1UBH/HsLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13689 (0x3579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Validity
Not Before: Feb 28 14:29:05 2026 GMT
Not After : Mar 7 14:29:05 2026 GMT
Subject: CN=69a2fbb1-e4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:8a:91:c0:15:3e:01:9b:e1:a1:cc:da:0d:
c8:5d:1d:ea:91:f4:ad:e2:98:c4:3b:d6:0d:ec:5b:
9e:53:52:18:34:63:b4:5f:09:27:9f:89:1c:dd:58:
22:4e:22:4d:1b:19:8e:0b:d8:b6:2b:5d:b7:5a:06:
39:e2:cd:95:ab:53:dd:36:c8:f0:54:e3:63:d4:55:
1e:6f:2c:db:4b:40:66:39:0a:f8:4d:7f:11:49:03:
fa:3e:b4:20:d5:fc:c5:dc:f4:42:8a:9f:c2:18:28:
91:78:92:8e:a9:15:ba:32:e1:35:73:06:96:e5:75:
f4:71:19:86:18:19:22:04:1a:53:ba:46:22:8f:e3:
56:ac:fb:74:83:51:d8:54:4b:1a:97:29:06:8f:d6:
88:88:63:bb:11:3b:fa:cf:82:d9:2d:8d:28:94:6a:
86:e7:5e:b4:14:a4:33:90:1f:33:b8:86:01:1d:0f:
16:72:3f:1e:0e:df:df:c9:24:7e:e8:0e:70:e4:ff:
38:29:1b:9c:44:76:38:b1:61:68:1a:88:ff:a0:de:
11:b6:d3:2f:63:a2:5c:cd:1b:93:83:eb:6c:ab:84:
23:b0:45:94:2a:12:01:3c:92:53:d5:d6:df:62:ff:
28:b4:2e:3d:08:3d:5f:2e:c2:53:63:38:92:fd:32:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:87:68:5F:7B:1D:7E:13:C9:C2:2F:3C:2F:DC:CD:E3:3C:40:20
X509v3 Authority Key Identifier:
keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d8:d2:c1:a6:3a:fa:b4:d5:8f:ad:87:ee:d7:32:65:a0:1f:
4c:61:fc:74:32:0f:43:7e:3f:26:8a:6d:ec:12:f0:71:8e:08:
81:66:34:f5:39:8f:b8:16:e5:f2:60:3a:56:f7:00:ef:31:68:
91:7c:8f:1a:18:4c:f2:f3:f8:37:e5:0c:f1:80:ab:a2:a9:c3:
0b:87:2e:d3:33:24:76:27:13:04:83:d5:7d:74:05:36:d5:e5:
50:6a:69:76:89:2b:18:e8:e5:c8:1d:8f:74:ab:e1:8c:c6:06:
ec:b7:dc:0f:b6:80:c4:f4:22:46:77:3e:37:03:33:bd:44:7b:
38:71:bc:12:b2:67:5e:07:db:d3:69:12:47:17:af:7c:8e:b7:
36:43:3d:38:c3:84:1c:91:91:c1:0d:d6:cc:f6:e5:b4:a6:78:
a5:ec:dc:07:e5:e8:d4:e4:e6:f7:d7:a0:51:d8:3b:4c:52:cc:
55:81:d0:bb:47:f7:d4:8b:3c:da:2c:ff:59:86:0e:3e:01:ac:
ff:38:fb:94:8b:88:8c:db:7c:ce:ae:ef:f6:2a:35:a8:28:bd:
db:e9:7f:4f:e9:4d:3c:56:5b:04:e6:75:9b:91:e4:fd:88:c8:
fb:12:7c:d4:99:3e:9d:dd:d2:bf:2f:5e:20:da:d8:97:cf:2d:
64:fa:7a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:48 2026 by rpki-client