
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json)
Hash identifier: rOdF86OlTPhgpC45E0Vnzc1BERqPqgfSteox0VGsrF4=
Subject key identifier: E4:1B:67:6C:54:8C:A7:47:17:B3:15:EF:BD:B1:26:5E:7B:A8:F5:03
Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
Manifest number: 01EE
Signing time: Mon 02 Mar 2026 01:40:23 +0000
Manifest this update: Mon 02 Mar 2026 01:40:21 +0000
Manifest next update: Mon 09 Mar 2026 01:40:21 +0000
Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: qDnqZmEEZiae/qhVok+d1LEjqqkse05PLH2fQiOTrZ0=)
2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 8y7hfK3jGDMBr1f4yhw0XCvK5AAMWqEEBB2+0ezh2M4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Validity
Not Before: Mar 2 01:40:21 2026 GMT
Not After : Mar 9 01:40:21 2026 GMT
Subject: CN=69a4ea86-772a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:09:fc:83:d0:83:b0:23:48:c8:53:73:7d:
23:e7:c7:ae:bd:52:f3:44:a1:f2:f7:b8:14:80:29:
78:1c:8c:cd:de:6e:04:7c:be:39:76:fd:23:66:28:
2a:61:06:27:c2:eb:ff:bd:5a:db:dd:eb:01:22:a5:
ae:d3:90:d0:7b:0f:a0:89:4c:a2:0e:fc:01:b2:21:
e1:d1:53:59:d4:23:9c:24:6c:07:cb:8e:7b:b7:f3:
ae:bc:d9:5d:02:6e:35:a9:25:47:90:b4:b3:ca:21:
92:72:55:3d:92:e7:37:f7:77:94:fd:ff:11:42:ce:
9d:bd:26:78:f9:14:1a:78:aa:45:7b:18:9e:a9:27:
bb:79:0e:33:2e:e8:2b:1a:db:81:08:97:c1:e6:59:
79:22:94:a7:8a:b8:0a:0e:ed:26:0f:b0:9f:9f:1a:
63:44:8f:df:c5:12:79:55:40:bd:6c:4c:85:d7:df:
d1:c0:a1:f9:9e:c6:3d:59:d4:af:24:27:bc:d8:c1:
8e:df:8d:a4:0e:ac:51:0e:02:67:91:29:ab:1e:02:
01:c3:8e:fc:ff:be:8e:58:51:62:a1:3c:a1:5b:5d:
28:af:fb:43:0f:e7:31:e3:42:e2:00:28:0a:46:0f:
7c:af:55:b0:b3:c4:40:70:37:46:9a:8a:2f:f8:44:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:67:6C:54:8C:A7:47:17:B3:15:EF:BD:B1:26:5E:7B:A8:F5:03
X509v3 Authority Key Identifier:
keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:70:a9:32:d0:30:58:b2:48:06:4d:4e:ec:de:e6:c9:05:2c:
2a:4a:da:5d:06:fa:7b:0f:34:7f:81:d7:55:f1:b9:26:92:c1:
59:78:8e:e7:c6:d7:19:d9:79:fd:ec:3b:a4:d3:0e:15:b6:a4:
3a:77:fc:76:b6:24:df:f8:31:c8:47:8a:58:15:19:10:1b:5b:
f3:63:78:9d:a7:d7:fb:79:39:a1:a0:0d:aa:59:b5:4f:89:29:
ec:ba:d8:51:52:e4:9e:38:f4:0f:61:d3:47:86:a6:d2:e9:fe:
d0:de:81:e8:a6:63:42:6e:4d:6d:d8:f7:78:d6:00:c9:75:a2:
e3:4e:b2:3d:73:33:70:ff:1f:e5:67:42:9e:b4:58:7f:ef:b7:
2d:98:e1:b3:6a:14:78:f0:e2:f5:70:a1:85:29:47:07:31:5c:
eb:a8:92:ab:e5:9d:78:b1:33:e8:66:2f:06:7d:d5:97:ff:bb:
50:54:a7:43:58:51:c5:32:54:9a:ba:af:f5:0c:d5:99:34:64:
8f:a4:e3:30:76:a8:0f:82:b6:35:f4:c2:30:cb:96:27:ef:ca:
97:98:23:4a:11:2c:f4:e8:b8:2b:1c:2f:15:fc:72:4d:ed:7e:
36:77:4d:cb:09:30:59:1f:10:5d:b4:4c:8e:42:a6:a2:22:f1:
be:1a:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:26 2026 by rpki-client