
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json)
Hash identifier: wTWRguSRdzeCKjJtw949PbsTAwp1sDEPoExBqPLlhvk=
Subject key identifier: 0B:6C:B7:85:93:83:1A:63:1B:8D:0D:F1:4B:B6:66:9F:A4:FD:02:68
Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
Manifest number: 0105
Signing time: Sun 01 Mar 2026 07:09:38 +0000
Manifest this update: Sun 01 Mar 2026 07:09:38 +0000
Manifest next update: Sun 08 Mar 2026 07:09:38 +0000
Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: /p3JXWpofe1wezIlMYKOIwtqEXsXTV2taP+5UcbeaSQ=)
2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: OPmEmqIaKed2x77tjIp4ZdpM1ffHxBwU3VDB8mthG20=)
3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: 7mz7uGJXQ4CqBMTrgZFYe2WUHKGmXyVago/PI7EUVO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Validity
Not Before: Mar 1 07:09:38 2026 GMT
Not After : Mar 8 07:09:38 2026 GMT
Subject: CN=69a3e632-285d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2f:8d:c5:44:e1:78:c1:72:93:e9:7b:d9:13:
6a:fc:a9:f1:65:8c:34:b8:d5:13:66:39:25:70:c7:
7b:28:a7:7b:6c:1a:4c:b9:7a:53:16:51:8f:b5:98:
a5:41:d8:7d:80:96:7c:c4:8f:85:50:ab:de:6e:05:
03:78:d7:5c:32:74:3c:f5:06:58:2c:ed:60:48:25:
3e:3b:25:a3:c9:d5:27:f0:29:4b:8f:f2:e0:f6:e2:
65:25:62:58:6b:80:b9:3d:b6:49:73:b9:62:5e:35:
5a:2e:bb:99:2e:73:b5:60:5a:79:a5:17:f1:a3:ba:
48:c5:13:b6:64:9e:e0:10:4d:b7:fc:8c:39:ec:7c:
eb:66:c6:c3:48:53:e9:8d:dd:b6:c9:4d:f5:4e:83:
92:a4:e0:67:1c:9a:12:72:11:99:59:ed:4f:64:04:
d6:db:8e:8e:0d:32:af:41:ab:3c:4a:55:1d:c5:57:
52:15:a8:61:a5:38:4d:72:ad:65:b4:ab:dd:fb:fa:
c6:c7:83:87:2b:6b:07:74:5d:30:63:80:31:ff:14:
b2:c9:bc:34:12:f7:f7:26:d2:29:20:14:d7:c7:4f:
15:0c:36:e5:3c:81:f0:f4:b2:fd:1a:24:15:47:fa:
cc:7a:7a:fc:ea:8e:05:17:52:5d:28:36:45:1e:4a:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6C:B7:85:93:83:1A:63:1B:8D:0D:F1:4B:B6:66:9F:A4:FD:02:68
X509v3 Authority Key Identifier:
keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:94:7d:fe:0a:0d:6c:c9:3f:9c:39:95:21:47:12:9d:4e:f3:
42:c9:fa:6f:c1:b7:6b:5a:47:f3:c9:3e:93:9b:d8:92:af:96:
8f:5c:e9:0b:4e:b7:1a:bb:37:47:9f:a9:6b:5d:d9:f7:77:0d:
04:6c:68:c0:73:ed:12:48:be:d3:84:5f:99:17:93:cf:96:31:
f7:7a:66:9c:d9:34:03:78:8c:fe:a6:83:4f:7b:ec:46:82:db:
78:63:8d:11:3c:8d:f2:28:c0:75:4c:5d:14:56:86:8c:38:86:
ab:a6:36:c6:97:4e:89:f5:4a:52:ed:37:72:fc:ef:a6:86:71:
21:15:8c:9d:34:6c:c9:7d:15:98:c6:19:3c:18:c0:e1:d8:b5:
79:4d:ec:d1:d4:3e:43:f4:65:9c:ad:d9:c5:b9:f3:09:43:ca:
6f:66:99:2f:de:8e:45:2d:65:26:db:fb:6b:c1:d2:29:33:53:
5f:d5:d5:1c:ed:14:70:0f:04:18:e8:e4:7e:8c:45:8f:7c:00:
d9:8b:0b:74:eb:96:35:a3:3e:73:4d:01:f4:d1:60:9f:44:be:
f5:fd:7d:2d:d9:11:47:02:da:60:d6:29:22:c8:e5:31:4a:a9:
2e:17:5b:7f:c9:60:a3:7e:27:8a:13:a4:2b:96:6d:e7:60:80:
25:4d:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:48 2026 by rpki-client