
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier: 4SphiUJePE9KOB2ml1i/Da/kLq5O0tT7np2U2Wo4eKM=
Subject key identifier: 84:E2:A0:6D:23:00:8F:33:68:21:F8:BC:4A:5F:7C:A8:0A:1D:C2:2A
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 05C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number: 0593
Signing time: Sat 28 Feb 2026 23:57:38 +0000
Manifest this update: Sat 28 Feb 2026 23:57:38 +0000
Manifest next update: Sat 07 Mar 2026 23:57:38 +0000
Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: 4woCFt7YZSDLzgHWumWX0Ar6HHTlGVQKn6WE2aWoXsM=)
2: 2A490316D97011F0A9AB95F59AD3641D.roa (hash: DMj/7tmpQ/nmbhEkwyw/tp+gJpMzZLhg72S9/+TVe10=)
3: F93DE378B66911F09D7E8031C4F9AE02.roa (hash: /hP6RI7E6dXuopaTBp1V0bPHajqNWLoEHVZxzKBu1UQ=)
4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: 7pgWej23b80g6BAye7XK6ZW+PkmS+EkTXRGsbDwGPHI=)
5: E2256F74D97011F0A26925FA9AD3641D.roa (hash: diBgUHCuWxCsrUKo2z8nkKuYx+/V0PX1Z2jBaelCkhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1473 (0x5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Validity
Not Before: Feb 28 23:57:38 2026 GMT
Not After : Mar 7 23:57:38 2026 GMT
Subject: CN=69a380f2-381e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:b0:c3:c4:36:6b:0d:63:a8:a1:63:3b:bc:
2d:65:e4:9b:4d:11:42:99:b2:af:0a:25:5d:f2:13:
22:9b:c4:82:07:d7:00:42:f0:86:bb:ed:61:a2:4d:
c9:0a:91:f7:d6:ce:00:2c:fb:12:d9:32:c0:99:05:
3c:62:4d:59:f8:89:9f:27:0b:48:2a:be:52:98:7f:
f1:7b:98:13:aa:9b:1d:de:aa:3b:1a:23:f1:7b:aa:
5c:b8:1f:e7:e0:7d:9b:4d:e5:20:c0:b5:2b:5f:69:
ab:41:f4:35:19:42:d0:1a:8d:ce:64:9a:37:e0:15:
d6:14:eb:16:53:21:51:29:76:22:94:3c:6e:73:c5:
4b:0d:88:f8:0a:d9:a6:19:55:04:f2:23:8b:7e:b4:
32:9d:4a:68:76:1c:c2:c6:f7:2a:ee:53:c0:cf:ec:
0a:52:d5:3c:c2:59:ed:75:5d:24:2c:96:93:0d:40:
78:08:97:69:0e:8f:da:5b:9a:43:c9:19:08:ba:e1:
dd:49:a1:13:14:f7:16:06:8e:cb:91:cc:ff:fd:9b:
ce:d0:ce:fa:a3:d6:21:5b:93:6e:e2:87:47:d6:2f:
1f:21:87:d0:04:aa:50:a3:79:2e:d2:19:2a:e0:ca:
40:17:98:07:b7:13:97:6b:47:3e:93:d1:17:ca:43:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E2:A0:6D:23:00:8F:33:68:21:F8:BC:4A:5F:7C:A8:0A:1D:C2:2A
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:d3:fd:7e:a5:2d:b7:bc:df:96:e6:f6:9e:ed:1c:c1:62:
91:e2:bf:18:03:7a:d0:52:3e:12:d5:53:37:c9:d4:44:79:c6:
2c:e7:33:3f:4c:5c:00:2d:08:d5:b5:3f:74:64:4c:f6:24:60:
d9:94:ff:87:a9:cd:bf:7c:56:e6:d3:31:35:59:0f:6f:f0:32:
81:2c:d7:40:d2:fe:6e:49:26:6e:be:f6:20:70:c1:58:64:94:
8e:f3:ac:47:51:3d:8c:28:8d:52:62:b7:37:38:fa:b4:2c:8e:
5d:a4:ed:76:ec:3f:bf:7a:2b:4c:cc:7e:06:52:e4:e0:51:1b:
b5:fe:f7:79:e7:0b:68:e4:8e:73:77:14:83:3d:8c:6f:04:11:
26:73:3c:23:71:5e:89:36:19:c5:1c:12:38:6b:f4:ae:f3:60:
d5:c8:14:a3:26:7b:aa:6d:97:14:23:80:78:04:47:0e:0c:6b:
f4:9d:1e:c5:aa:8c:b4:91:f3:6a:ac:a8:e2:23:aa:33:3e:78:
ce:b0:7e:1a:f5:07:a5:67:74:0b:fb:d2:0c:0b:28:3e:54:9c:
27:2e:17:13:92:38:da:c8:fe:93:61:68:73:58:07:6a:47:af:
7a:5b:60:c3:81:82:de:49:ca:b7:86:0d:5c:79:cb:e7:06:73:
f7:9e:ab:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:15 2026 by rpki-client