
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json)
Hash identifier: n9j00i+PukiOm4Mi4jyREeokwU+GziSJQbvmIuoBSGA=
Subject key identifier: A8:10:E8:99:21:E2:BA:33:6C:24:F0:66:32:96:81:8B:2D:42:F3:E4
Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Certificate serial: 08F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
Manifest number: 08E5
Signing time: Sun 01 Mar 2026 23:37:14 +0000
Manifest this update: Sun 01 Mar 2026 23:37:12 +0000
Manifest next update: Sun 08 Mar 2026 23:37:12 +0000
Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: hA83tfPPzAW/Lpw33SqLdjUsLKF+xGiUPLxJ3VZwjCg=)
2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: 2P5OTTpkzgPQNPnWpqe7PnEj5CbcnDOLb7qDMaxfHTE=)
3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: 8aOJR7dq5H1FSBWehu29UN5DlJmLrfgs2ryVPbFuTNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2295 (0x8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Validity
Not Before: Mar 1 23:37:12 2026 GMT
Not After : Mar 8 23:37:12 2026 GMT
Subject: CN=69a4cdaa-20ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:87:6c:39:03:7a:a1:53:2d:3e:a9:73:65:
b7:94:df:c6:9d:61:1d:79:96:fb:20:61:56:b8:52:
4e:98:b9:31:a6:c9:72:a0:74:ba:4b:b2:71:77:f6:
ce:d7:32:b2:76:5d:b5:ca:01:44:b6:22:05:5e:5a:
92:ca:6a:68:fb:86:d0:aa:12:76:25:b9:74:96:97:
25:06:b0:10:ad:44:eb:10:68:7b:13:9f:1c:31:6b:
8d:36:49:37:fc:51:4b:a4:6f:05:21:cb:f8:aa:04:
85:3c:3a:9c:08:ff:38:21:9f:42:c6:88:68:25:08:
96:c2:dd:42:5f:f9:78:d7:f8:9b:ae:47:95:4d:41:
a6:f2:60:63:29:4a:5b:44:3e:2a:8b:f4:50:8d:2a:
db:3f:b6:96:1e:ce:bf:16:e3:7f:ce:6e:f1:78:e6:
50:6b:57:33:a3:be:ac:17:1f:95:f3:b2:ca:27:cd:
1c:47:86:09:8c:9a:f2:3f:68:07:eb:f6:10:34:55:
9f:ed:ae:d6:6f:4a:ae:9f:85:81:5b:7e:11:18:07:
2d:e1:57:c3:ef:f3:40:9f:ed:79:32:b6:72:82:d4:
bb:61:fb:d6:83:c6:73:2e:74:0c:e5:46:ee:b8:cb:
48:0f:18:b4:be:f0:c0:85:b9:9b:8b:f3:5d:48:90:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:10:E8:99:21:E2:BA:33:6C:24:F0:66:32:96:81:8B:2D:42:F3:E4
X509v3 Authority Key Identifier:
keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:3f:2a:c0:8d:90:83:a2:82:af:ac:41:20:44:ec:e9:f1:9f:
96:06:db:02:88:9a:e1:0d:80:07:e0:34:ec:5e:3f:63:1f:44:
fb:cc:99:31:78:4c:34:89:d6:7d:89:c7:38:ac:a7:96:e7:37:
d0:20:5e:c4:8d:be:07:ad:59:83:0b:fc:77:71:f3:f2:32:a4:
f0:b9:5d:6b:1c:2f:ac:75:05:4c:d2:1e:23:dc:5e:55:fe:21:
06:42:94:0c:e3:bf:c0:1b:ae:f3:2b:d8:17:93:cc:25:6d:05:
5a:8f:c1:d1:c9:76:dc:15:ae:fa:6e:52:88:e5:d8:93:4f:c5:
ad:1a:a2:a7:f7:e4:4f:21:27:d5:7c:a7:a6:54:b6:69:9b:d6:
95:5a:46:eb:12:07:90:bc:32:9a:59:84:b7:35:bf:19:1b:9f:
51:a2:9f:74:76:c2:23:90:3a:45:19:7f:ea:30:c2:66:4d:79:
51:9f:e9:03:a5:18:fc:be:3a:95:d9:60:8d:69:c8:17:de:2d:
7a:2d:e1:b8:d5:d0:49:3d:79:31:9a:c0:18:cd:fb:fc:04:d6:
ec:f9:55:dd:3e:06:8f:72:98:fa:d8:f4:ff:37:7e:63:c6:91:
fb:c2:02:09:ab:2b:50:1d:4b:9f:ff:ef:6c:f0:eb:86:29:ce:
3d:80:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:25 2026 by rpki-client