
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
File: z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json)
Hash identifier: RY8eYKiBzLE/KbR0XXqdRnmhC845uCrMo/07BabSIws=
Subject key identifier: 03:99:0D:7C:75:30:9E:40:73:9D:80:B1:A9:2A:B8:03:C6:A3:EA:9B
Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
Certificate issuer: /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
Manifest number: 01C4
Signing time: Mon 02 Mar 2026 02:01:15 +0000
Manifest this update: Mon 02 Mar 2026 02:01:12 +0000
Manifest next update: Mon 09 Mar 2026 02:01:12 +0000
Files and hashes: 1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: 20xn85SHOmxoTnlUMmezemI0rgz3ipbc062hU0dOD8U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Validity
Not Before: Mar 2 02:01:12 2026 GMT
Not After : Mar 9 02:01:12 2026 GMT
Subject: CN=69a4ef6a-eaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2a:de:57:f7:c2:08:6f:5e:d4:f4:20:39:bb:
20:e6:b5:27:e6:fc:52:28:9c:3f:18:18:e9:a6:36:
77:0e:93:91:dc:7e:6f:9c:28:04:67:56:b4:75:2e:
97:c6:ee:18:fa:8d:5a:7e:3c:09:b6:38:9c:89:b8:
c1:c1:59:ba:07:f0:14:9c:4a:50:ce:b6:6b:bb:53:
42:6d:21:2b:8c:b1:4c:74:fa:87:a2:27:82:83:95:
f6:c9:35:c4:c6:dc:7f:06:ae:ed:38:62:f9:51:2a:
87:db:52:32:39:a3:44:cb:45:97:67:9b:ed:40:4b:
9f:8a:73:8d:ae:91:f3:b9:21:ec:15:74:3d:b3:42:
2c:89:6e:72:27:cc:60:01:d5:50:95:30:6c:d9:d8:
89:41:cd:01:c0:80:e5:c6:7c:1b:58:d5:fd:67:a5:
f5:49:36:f8:81:16:16:b0:e7:d9:2f:56:fe:75:d6:
2d:f4:6d:a4:2b:68:32:95:af:7c:f0:55:4d:9a:fc:
4b:65:62:51:21:68:20:00:78:e4:06:73:1a:d2:e8:
cf:56:25:b5:31:05:aa:e0:58:2e:d5:33:c3:e5:93:
fc:f7:da:3c:a0:37:3f:b5:64:66:8a:e1:03:d5:1c:
51:60:ba:47:de:b5:62:4b:22:5b:e7:c7:b6:54:a6:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:99:0D:7C:75:30:9E:40:73:9D:80:B1:A9:2A:B8:03:C6:A3:EA:9B
X509v3 Authority Key Identifier:
keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:76:51:e2:4a:74:07:c0:75:a4:dd:94:5c:56:75:f4:b8:91:
fc:fd:aa:f2:e2:a0:ca:b1:7e:2d:ef:88:b4:82:de:6d:a1:ed:
9b:a4:2d:7c:97:65:e3:e8:a7:33:53:94:a6:1e:34:e5:f5:31:
a3:30:1c:b1:9e:e9:d6:1f:81:69:10:03:85:55:6e:b4:db:4c:
31:7c:8c:e6:90:df:83:c2:5e:25:23:34:8e:77:4a:3b:eb:7e:
69:9a:19:a1:62:35:2d:33:97:fc:37:fa:7c:80:79:a1:9c:b9:
8c:7d:ab:86:cf:81:a1:cf:ab:d2:80:fb:a7:4c:73:93:24:33:
3d:5e:0c:eb:0e:9d:40:97:87:27:31:23:68:c4:39:2c:d6:64:
37:fd:79:9a:29:bf:14:7e:13:86:7b:2c:4e:83:0d:12:56:e0:
8b:f6:26:83:21:12:d8:46:1e:3f:0c:96:f5:de:0c:7b:23:33:
31:c1:2b:0e:e5:e1:4e:6e:10:98:56:84:2f:ce:bf:2b:35:94:
7c:3c:27:6c:52:03:20:48:f4:01:0d:84:5c:ee:68:4d:11:f0:
87:e5:6e:3a:e4:77:56:87:01:ae:35:cd:69:72:dc:f1:77:03:
04:75:db:75:f5:51:53:80:b2:10:03:e4:e2:66:c0:ca:b9:77:
c4:b9:fc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:01 2026 by rpki-client