
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier: eifVz6fFwenQsqkXL1ct/my1NhbuNW+h+xM8oK5l2Q8=
Subject key identifier: 74:9B:A8:57:0A:92:F9:F0:2E:8A:66:B6:62:58:ED:5A:B9:BF:7B:66
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial: 08D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number: 08C4
Signing time: Thu 16 Apr 2026 20:19:36 +0000
Manifest this update: Thu 16 Apr 2026 20:19:35 +0000
Manifest next update: Thu 23 Apr 2026 20:19:35 +0000
Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: OmOfjrWMqwjWOjR6x1R0hdpoP10lfWCDpOScpVKWH6E=)
2: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: 5k8cO87Qj/gNgbt2kI9Eh+2F5/UczXoTj75VoZrq4q4=)
3: 3A4918D41DED11F18280100E163D8C67.roa (hash: Juhjiq7zpIGJ2ca6uyWvgKrk4pkgUf8b9Px9rrY5jmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Validity
Not Before: Apr 16 20:19:35 2026 GMT
Not After : Apr 23 20:19:35 2026 GMT
Subject: CN=69e14458-502f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:cd:95:3b:31:dc:3d:4c:6d:0b:ee:a4:03:
ff:8f:fc:b2:bb:fb:67:b1:df:5e:19:5d:5b:af:b7:
78:03:db:45:64:ea:b9:7a:69:9f:ed:2e:e8:31:bb:
9b:03:12:45:d0:21:23:95:74:0e:88:62:88:3c:13:
32:dc:1f:6c:a0:f3:b5:ac:8d:db:05:76:a3:46:8d:
f3:03:c8:c3:e9:10:b7:12:b0:a8:a9:c9:15:40:2d:
c0:13:09:1b:6f:32:9e:7a:45:a3:80:bc:f5:27:58:
8b:4a:0a:45:8e:b6:3b:fb:b7:6a:a1:3b:4d:ae:18:
a7:f4:62:d1:35:0b:7f:1a:a6:a3:ee:b4:fa:0e:c2:
fe:8d:d5:24:fc:b8:c3:53:38:bc:2e:c4:f5:3c:c7:
80:33:21:66:74:c2:d3:fc:c2:86:85:33:53:d9:01:
50:6c:15:05:21:e1:f8:c8:e0:20:6c:62:ac:d5:74:
b4:70:73:e3:d3:4e:08:d3:33:97:ff:58:4b:1a:f0:
fd:40:3d:39:bb:7d:36:ca:66:b0:a7:8d:78:22:59:
d0:c0:f7:8b:3d:8d:31:b2:d1:22:14:e7:c2:23:ed:
a1:9a:3f:d3:36:02:07:c4:7f:cf:68:a4:7c:ee:95:
3d:7e:85:2a:91:13:29:4e:9a:07:b7:5b:c0:b9:34:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9B:A8:57:0A:92:F9:F0:2E:8A:66:B6:62:58:ED:5A:B9:BF:7B:66
X509v3 Authority Key Identifier:
keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:8c:a3:e6:b5:58:8f:73:d7:bc:7c:c3:84:6b:b8:de:13:ba:
a2:82:b8:e3:10:65:74:76:1c:5d:a0:ea:b1:54:9f:43:a0:c1:
83:72:73:e6:08:a9:1c:0d:49:98:d3:ca:99:0b:c4:53:12:7d:
2e:bf:2c:ef:94:18:d9:fa:de:cb:3f:65:11:0f:f7:2b:a6:e5:
9c:ee:88:dc:bb:a7:62:98:11:3b:b7:a8:4f:ee:ee:0c:ae:fe:
aa:f4:54:f1:1d:70:eb:ce:64:7e:65:d1:b2:cc:55:7f:56:19:
f3:8a:4f:44:8b:13:5c:02:d1:48:05:f8:48:2b:ee:a5:63:c7:
8e:0e:c9:23:83:e1:64:5d:79:9c:e8:83:b0:08:a6:33:6c:14:
1e:4b:69:32:79:c7:99:56:1a:1e:13:cf:5c:aa:52:76:52:d0:
63:9f:8e:17:d8:34:77:06:8a:a5:fc:1f:f6:ed:ff:ab:4f:a6:
c5:c6:e6:87:a3:7f:85:b7:a1:51:63:9d:bb:a5:f2:7a:0b:d2:
4f:c5:3b:1b:84:91:5c:54:23:74:81:7d:43:55:4c:14:7f:aa:
1f:e8:2f:28:10:75:12:e4:da:d7:41:f6:32:fd:f0:ee:fa:47:
e1:9e:45:5d:84:d5:75:14:81:ba:0b:08:54:92:3d:8a:25:98:
41:84:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:18:26 2026 by rpki-client