
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json)
Hash identifier: OZh/oHlOlCHOcje42NdWNAFX4Zgamp8IQlchr1S5QYk=
Subject key identifier: 6A:44:E9:81:CB:6C:04:F5:A5:07:39:5F:9A:FB:2B:12:3A:36:BE:95
Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0
Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
Manifest number: 014F
Signing time: Mon 02 Mar 2026 00:53:02 +0000
Manifest this update: Mon 02 Mar 2026 00:53:01 +0000
Manifest next update: Mon 09 Mar 2026 00:53:01 +0000
Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: Za8kNL9Shf3JuYQZy4O0MMfPsz8/JZNC8flfF3HA+wM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl
rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
Validity
Not Before: Mar 2 00:53:01 2026 GMT
Not After : Mar 9 00:53:01 2026 GMT
Subject: CN=69a4df6d-04f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:ca:9c:58:f8:dd:1f:33:d4:17:2e:1b:41:
6d:fb:22:2f:62:7a:40:5c:b1:bf:25:83:4d:1e:e1:
63:8b:00:f2:37:ec:66:d7:24:09:4a:be:d3:0f:97:
2d:3f:81:ee:0b:12:45:8e:22:9a:7b:bc:29:8e:71:
6e:14:1f:59:ea:45:76:d0:7d:0b:c6:5e:45:65:15:
df:bb:d4:28:bf:d0:e8:c2:69:51:02:9b:29:85:b7:
fb:e6:6a:a1:bc:7d:c3:bc:a3:58:b6:a6:31:54:72:
e8:03:46:0b:25:ce:c6:e5:6a:ca:7d:55:8d:42:42:
38:86:d7:db:b8:98:5d:9b:7c:1f:4b:a3:4b:aa:55:
27:71:85:86:5c:63:d3:e4:ae:ad:51:62:45:ed:04:
dd:39:a5:7c:92:f8:2b:34:0f:9a:c4:36:8e:8c:22:
7b:ae:25:c9:4b:07:67:3c:f9:87:6c:4f:77:2e:9a:
a9:65:5f:17:78:2e:9d:d5:94:29:11:c7:f4:73:ab:
26:f7:b2:9c:27:d1:1f:dd:d3:61:10:ec:29:a5:3b:
88:ef:d5:ce:82:50:5f:76:3e:bf:4c:ed:36:69:eb:
95:45:36:a7:f8:db:46:3b:6b:32:f5:13:ef:5f:20:
25:db:57:3f:73:84:dc:6a:66:f2:8f:41:26:e5:5b:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:44:E9:81:CB:6C:04:F5:A5:07:39:5F:9A:FB:2B:12:3A:36:BE:95
X509v3 Authority Key Identifier:
keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:3d:0b:96:dd:12:4b:cb:93:50:7a:06:f7:ea:97:fc:0b:
20:e0:2f:85:d9:01:a0:ab:d7:50:3d:a4:20:98:98:76:3a:8d:
3d:8b:c2:0e:59:e8:7f:ce:58:ed:58:47:09:41:66:61:56:92:
4d:1e:9a:e2:d4:2a:6f:a4:e0:b2:32:e2:cc:f9:5d:cb:02:d3:
15:aa:ff:5c:d1:52:67:a4:a5:6a:31:5c:7a:c7:da:5b:33:dd:
e1:33:95:a3:9b:f4:ec:40:98:78:e9:d5:d6:8a:b6:53:33:f9:
25:e0:2c:2d:d8:6a:9d:d0:84:45:42:ab:a9:32:34:77:a2:4f:
4b:5d:df:62:c4:24:27:58:41:8f:d5:b6:cf:15:81:a5:ad:8a:
02:91:d0:fb:70:d9:35:44:0a:14:8f:d4:be:74:f8:f2:ba:b4:
20:36:cd:a1:c7:03:52:cd:77:ac:c5:f6:78:90:27:c2:67:b1:
37:71:f5:b0:a0:db:0b:b3:37:df:4e:e8:00:9c:48:11:a2:ef:
c9:21:f0:dd:cf:be:81:11:7c:21:37:74:65:8b:9b:f7:ca:ae:
b1:64:0b:86:6d:15:a1:3e:98:cb:8d:cb:4e:c9:6f:0b:76:89:
97:ef:70:bf:c5:20:64:ca:4c:5b:20:d3:cd:97:0d:e7:d2:18:
93:82:ea:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:09 2026 by rpki-client