
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json)
Hash identifier: qmDsAy5wexJavX0sAIuvcput7w5RyrLJxvsR7RU99oM=
Subject key identifier: AA:09:92:43:76:B7:A8:09:EA:98:B9:FE:AC:30:75:EC:3E:F1:C8:D6
Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0
Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
Manifest number: 0167
Signing time: Fri 17 Apr 2026 04:31:54 +0000
Manifest this update: Fri 17 Apr 2026 04:31:54 +0000
Manifest next update: Fri 24 Apr 2026 04:31:54 +0000
Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: 3wLhyZrhNg8P0h5NmCMvQq9EIR9Is3WRRLadesN6cQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl
rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
Validity
Not Before: Apr 17 04:31:54 2026 GMT
Not After : Apr 24 04:31:54 2026 GMT
Subject: CN=69e1b7ba-b97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:78:89:a0:30:07:30:d2:fa:10:02:80:ee:
13:ca:2f:f2:c6:05:be:24:47:ed:7d:fc:4c:0e:e0:
41:96:28:0d:f2:4d:41:89:5c:b3:7d:96:cb:69:58:
9a:46:67:f2:74:f8:ef:b7:51:5c:62:b4:c0:be:ef:
96:94:46:d9:99:df:6d:a2:31:b2:27:11:9d:09:91:
4b:dc:f7:1e:1e:6e:db:34:3e:51:f2:04:e3:1d:59:
71:3b:aa:00:ec:0f:5a:79:a7:d0:1c:31:2d:a1:02:
5a:1a:74:6f:cf:46:c1:96:4f:69:3f:cd:c6:78:0b:
27:80:fd:17:86:e3:21:1d:40:7c:12:4a:18:e7:6c:
65:d7:53:63:b5:e7:fd:08:57:52:fa:73:f5:a6:11:
21:ba:f1:54:24:0a:f0:c6:ef:67:b0:9f:f5:90:50:
d9:6f:57:d8:44:cb:60:52:9d:39:7b:e5:61:68:78:
82:7d:a6:6e:50:a2:80:dc:43:ea:9f:0a:4c:00:87:
ed:54:7d:20:fe:d9:95:f5:5b:56:27:9a:32:5a:ce:
e7:be:d5:6f:fe:a6:2c:6c:5f:bd:6e:b2:c3:3c:e1:
11:69:94:33:36:5d:96:78:a2:5b:7c:6a:54:4d:0f:
95:69:23:0b:bb:95:00:fc:8e:3f:ff:e3:f5:e1:0b:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:09:92:43:76:B7:A8:09:EA:98:B9:FE:AC:30:75:EC:3E:F1:C8:D6
X509v3 Authority Key Identifier:
keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ef:18:90:88:c6:1e:b8:79:2c:12:9d:60:96:99:75:9b:07:
b9:6e:42:e6:f2:21:34:5c:90:49:f6:d2:f3:f1:46:de:f2:9e:
30:f4:05:9f:ce:bb:99:ec:5d:44:5f:bd:c5:a3:76:47:68:b0:
4d:2a:90:7c:b2:29:70:cc:32:9e:50:14:f2:05:78:f9:d4:05:
1c:19:03:0d:a0:2a:46:5a:21:a5:46:22:e1:ef:94:e5:30:f3:
7f:24:d2:46:a6:e3:05:e7:00:f4:4a:74:c6:fe:72:e8:83:f3:
e4:e6:bf:65:0f:e4:b8:5e:17:6a:2d:e8:96:bc:f8:e8:b8:2d:
f8:bc:18:c8:93:79:05:74:b4:03:f6:4a:89:b3:1e:12:89:ea:
92:dc:29:76:20:e4:81:25:87:7d:ad:a7:92:4e:71:7c:9c:df:
80:69:e7:78:a1:c9:74:2c:31:ea:6b:ae:68:a2:4f:2b:a2:21:
2d:02:b1:cc:69:3a:90:c3:e7:c2:7e:50:3e:e3:d4:cf:c6:74:
3d:12:f9:c2:a4:c0:dc:9c:5a:da:ec:6e:a4:09:47:a5:16:d1:
32:2c:eb:52:01:f7:b2:12:89:d8:1a:24:44:ff:c2:f2:23:d5:
4e:6c:2d:84:5c:eb:d8:b0:ce:a5:36:5b:cb:af:1c:44:c6:f2:
6a:f0:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:14 2026 by rpki-client