
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json)
Hash identifier: 3FuvyPq9hoqHvVBH7xII5aL58KsQq06hotPrGLeBWso=
Subject key identifier: 63:8D:35:2B:04:F1:BD:CD:1F:65:51:8A:F4:04:5D:30:92:02:1D:67
Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Certificate serial: 1882
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
Manifest number: 1869
Signing time: Mon 02 Mar 2026 01:07:52 +0000
Manifest this update: Mon 02 Mar 2026 01:07:51 +0000
Manifest next update: Mon 09 Mar 2026 01:07:51 +0000
Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: GPcNNdCx6pXNimvwYeyFMNHdppgzYQX3TuH19ImXzPo=)
2: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ZFGFBfx4/7JIn5J81VyjxgzCJGuEFQLjcxwfK1UOBRQ=)
3: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: rdOZCJ3dicwt2ZQgE2QnLuQhDeAJoxWmp9bzW22pmwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6274 (0x1882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Validity
Not Before: Mar 2 01:07:51 2026 GMT
Not After : Mar 9 01:07:51 2026 GMT
Subject: CN=69a4e2e8-4a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:8d:4d:e3:26:75:d8:6d:2a:e4:19:9f:38:
c5:b5:5c:63:97:03:ba:21:11:61:a9:27:a1:f2:23:
7a:6a:a1:29:30:d7:72:ef:53:42:bd:3d:9b:66:1c:
c6:a5:7d:27:79:3d:3f:0a:35:66:1b:df:39:0d:4f:
04:f2:d7:9f:f0:08:bf:5f:60:3e:dd:87:ca:4d:d1:
91:f5:6a:a3:d3:2a:a3:cf:95:a2:27:b9:18:bf:3b:
6e:7e:e0:b7:74:2e:8f:db:3a:4a:ba:59:37:c8:ae:
97:6b:db:d8:58:45:a7:c4:44:bb:67:fe:63:fc:64:
53:46:d0:7b:fe:6a:4f:6d:d3:e0:ba:2f:28:cd:8a:
65:a2:03:47:88:93:77:36:34:d5:8a:28:ec:c0:c8:
1d:2e:59:fb:66:b1:4c:01:1c:b3:99:55:67:09:7b:
4b:12:9e:60:7e:5d:c0:99:9f:eb:06:2e:7d:74:fb:
d9:ec:f2:68:9e:79:4f:e2:93:cd:b6:09:5e:28:c0:
3a:4c:d5:5b:fa:1b:db:b2:0b:ef:69:5c:76:9e:82:
fe:03:02:41:ca:36:98:52:96:fa:87:9b:19:b4:5e:
65:83:68:c0:74:fc:3a:8e:0a:34:0a:66:ca:e2:50:
85:de:34:fb:70:25:39:ac:f2:0f:97:db:18:21:ad:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8D:35:2B:04:F1:BD:CD:1F:65:51:8A:F4:04:5D:30:92:02:1D:67
X509v3 Authority Key Identifier:
keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:2c:9d:11:f5:f7:01:04:6b:31:7a:26:76:4c:9a:7b:89:3f:
a2:ac:0e:a4:a4:16:ec:4f:9b:b3:ed:e3:47:02:37:9a:61:af:
e9:88:5b:06:81:e0:5c:3d:6a:56:52:3c:48:2c:48:79:ed:f5:
ac:26:39:d7:c8:f3:71:f5:11:06:37:8a:86:8f:a4:6c:b4:a9:
b8:ac:b0:d2:19:d6:97:1c:59:57:85:ec:b0:0d:99:3c:e7:de:
63:f4:63:c0:34:46:df:11:d6:be:8e:00:c2:1f:fb:ac:d1:7c:
42:d1:29:70:a9:ed:d3:27:da:c1:89:43:82:8f:21:1f:eb:c4:
4d:31:6d:1c:8d:f8:71:0e:ce:40:e6:af:88:43:3c:17:66:47:
35:a8:e2:59:da:c3:ef:e5:57:71:cd:47:a4:51:53:3e:30:6d:
b7:95:c7:1f:77:9c:fb:de:ce:2e:ab:12:fb:77:6e:04:95:29:
41:2c:c9:3b:c6:82:4d:2f:1e:3a:bf:af:fa:21:45:d3:45:fe:
80:f6:63:0c:b1:31:da:6b:fc:93:3f:88:e1:3d:fa:2c:00:3c:
fb:0a:a4:ae:71:ed:bc:1e:01:2a:14:33:46:55:ac:02:77:24:
d2:f6:88:ff:e0:37:e5:37:a3:c7:da:86:1e:c9:e4:a0:53:b2:
13:ee:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:25 2026 by rpki-client