
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
File: z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json)
Hash identifier: h+NXoxA0H/yHta7suQwajku7IKdCS1vClSMd9Qweu8s=
Subject key identifier: D2:57:40:95:81:B8:BF:1B:A7:C7:B8:E3:81:BD:2F:56:87:40:46:3C
Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
Certificate issuer: /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
Manifest number: 01DC
Signing time: Fri 17 Apr 2026 03:14:16 +0000
Manifest this update: Fri 17 Apr 2026 03:14:16 +0000
Manifest next update: Fri 24 Apr 2026 03:14:16 +0000
Files and hashes: 1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: +6mT2aCRK71iPGKY3xQ9nuVxeZyl8F9TSdtdfNs5Wi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Validity
Not Before: Apr 17 03:14:16 2026 GMT
Not After : Apr 24 03:14:16 2026 GMT
Subject: CN=69e1a588-753c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:df:c1:be:d2:28:6b:29:0e:95:85:50:b4:
5e:93:b4:ac:ca:66:d7:8f:be:b9:23:a2:b2:c2:30:
f7:74:a7:37:25:f6:63:a9:6a:85:1e:e0:51:24:a1:
6d:84:bc:f9:a1:ae:6d:52:52:6a:f7:7d:2c:98:99:
b4:3d:dd:37:73:60:c0:20:4a:b3:60:95:51:aa:9e:
4f:dd:59:29:8c:e6:55:07:f5:aa:a2:cc:81:ee:a3:
02:53:9d:a8:c3:83:da:d8:71:25:d5:54:a9:b0:e8:
01:66:24:e5:92:e2:c7:2f:a1:94:9b:d1:ac:08:1b:
29:c4:6b:5f:f8:84:ea:47:47:ce:be:85:9e:9e:61:
0a:b9:bd:4e:4e:4b:05:52:03:36:d8:0f:d4:e5:ed:
3b:c8:29:5b:d4:41:f0:88:e9:9f:ad:93:95:80:9c:
72:48:b3:0e:19:d5:42:e6:29:ed:13:6c:4b:7e:c2:
af:fc:0f:01:34:8d:f7:51:7d:4c:ed:3a:a5:9c:9f:
ba:81:f0:f3:58:49:28:6f:83:4d:50:74:66:98:2e:
40:5b:18:0d:49:05:0e:a1:7b:ea:00:5a:68:e6:4e:
d4:f7:3a:ad:7f:30:58:07:68:66:2f:dc:11:d3:59:
4b:a9:d3:d6:4b:31:0f:ba:61:e5:4a:62:ed:05:f8:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:40:95:81:B8:BF:1B:A7:C7:B8:E3:81:BD:2F:56:87:40:46:3C
X509v3 Authority Key Identifier:
keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:4c:58:f0:88:a1:96:00:49:b4:01:da:9c:3d:99:c2:ef:6b:
5c:6c:a8:95:21:84:6a:62:3f:b6:6c:86:d3:c5:1b:c5:24:b4:
0a:8e:c3:86:11:7a:91:c9:d1:36:4a:32:85:dc:f8:7d:80:11:
84:c1:2c:08:0f:b7:5b:8f:bc:9e:8d:64:f3:e8:4f:b9:1b:33:
41:3e:15:4c:1a:2b:b2:52:72:f1:e4:c2:b9:76:34:d3:89:17:
f3:eb:8f:09:ec:30:c3:4c:a3:5a:08:8d:d5:8b:1d:5b:d6:e4:
42:d6:55:41:9e:59:be:e7:6f:1d:ef:68:b4:9f:ea:d1:98:80:
4b:d3:41:b8:44:45:da:60:f7:4d:40:c7:5b:55:3c:78:9d:7a:
e5:72:ba:5b:55:c4:47:0e:3c:a8:ff:d6:06:4e:cc:fd:86:fa:
c9:60:2e:a1:1d:f8:76:f2:fb:de:fd:40:37:3f:30:5a:82:c0:
4d:0e:c1:fd:c1:ac:e1:be:da:61:7f:bc:0d:8b:86:2b:27:d4:
76:4b:29:4b:c1:81:c2:8f:91:cb:a9:c4:9f:5b:35:fb:39:de:
c8:d9:16:5c:0f:ac:aa:41:d1:2b:85:8e:e8:be:73:5a:5f:3a:
e1:6a:f6:ea:82:82:54:c3:ba:49:39:29:c5:56:d5:1f:ab:51:
6b:eb:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:19:55 2026 by rpki-client