
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
File: r_zmN5iBZebFG_v-vRKD1REkAZA.mft (raw, json)
Hash identifier: 5PXdc4u/xxqPhFYHTKRc+naUg2S368CvuEA39NDjqok=
Subject key identifier: FB:1F:F1:22:C0:BE:EB:FE:D9:C0:34:2E:7C:8A:35:30:8A:53:08:E5
Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
Manifest number: 01AF
Signing time: Sun 01 Mar 2026 04:53:11 +0000
Manifest this update: Sun 01 Mar 2026 04:53:11 +0000
Manifest next update: Sun 08 Mar 2026 04:53:11 +0000
Files and hashes: 1: r_zmN5iBZebFG_v-vRKD1REkAZA.crl (hash: M3El14wshM87NMupq2qWa6cNbRLcximp1TVbhcagesY=)
2: C531DD12226F11EF8D24AD63C4F9AE02.roa (hash: 1HZmx0WF0AhcnLZdNKIlIlIR3dNxmj8USUsN6VO4eKc=)
3: C608133C226F11EF8D24AD63C4F9AE02.roa (hash: 5OHmsgpNaZCWhI9Ovt9ZtSQjbw9IURcbBlU1wm6uqes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Validity
Not Before: Mar 1 04:53:11 2026 GMT
Not After : Mar 8 04:53:11 2026 GMT
Subject: CN=69a3c637-6a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:a0:a3:86:f1:1e:35:fa:84:c3:8e:96:83:
0e:5f:7f:5e:1e:68:03:55:fa:44:e3:18:10:3e:f8:
48:1a:96:a4:1a:83:67:f7:ac:2f:6c:37:1f:7b:7e:
78:b9:e4:14:ba:5f:ff:08:ef:29:a1:89:e2:b6:e0:
4e:75:4c:10:52:7b:b0:12:18:94:55:fb:b6:02:1c:
ae:6f:bb:90:d1:fc:81:0b:ad:8d:ec:e8:d4:e9:0f:
a9:be:9e:9a:3f:ab:c7:3e:0e:23:fd:f2:10:a5:c7:
9b:fd:7d:46:a4:d1:9f:0c:4c:d3:12:f9:95:89:13:
20:1a:89:48:41:fa:88:18:95:f1:2e:99:31:ce:c0:
af:d7:83:bf:84:a4:cd:de:94:65:e5:e9:17:1b:2c:
fc:83:2f:bf:56:b2:f9:f6:e0:23:bb:91:0e:4c:1c:
e2:39:da:c6:09:66:f9:7d:45:09:fc:a6:7d:30:58:
60:9f:49:07:0d:22:56:3c:46:6f:d3:33:80:65:33:
a5:90:b0:61:9c:5c:3f:90:40:3e:fa:1e:2a:66:bc:
a8:41:b2:86:55:b1:b4:a7:e1:2f:4a:4a:0f:64:e9:
57:78:e7:65:aa:cd:67:17:11:06:5b:1d:06:8f:a0:
ca:fb:a2:96:91:5e:82:0b:a1:d9:83:93:44:30:62:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:F1:22:C0:BE:EB:FE:D9:C0:34:2E:7C:8A:35:30:8A:53:08:E5
X509v3 Authority Key Identifier:
keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:c3:06:49:6f:a0:44:2c:7e:49:0a:78:ea:03:3a:81:71:2a:
2a:bf:12:dd:94:48:28:8a:dd:f5:d2:1b:76:cb:a5:d2:77:d9:
14:27:2e:3b:77:12:32:fb:ec:4a:e3:13:15:be:b1:05:a6:69:
26:b1:4a:48:9a:d8:36:68:73:07:31:ad:28:7f:54:bb:83:8e:
f3:2a:62:22:b9:91:73:b1:21:54:8b:51:76:89:99:c7:a3:ae:
96:65:fe:88:4e:b1:7c:ab:6d:2a:8a:8e:f7:a4:c7:25:2b:41:
5a:ed:6d:3f:82:20:1c:d4:c7:35:a7:d8:1f:59:58:69:0e:bd:
59:ab:2a:d6:6f:a0:fa:31:2b:51:f1:ef:cf:96:38:d5:68:7f:
64:18:80:59:c7:2f:28:cb:af:8b:0e:79:4f:fd:0f:f3:1d:f4:
a1:f3:4a:f7:c7:d7:a9:8e:75:10:53:d7:ad:3e:ac:16:cb:21:
a0:2d:7d:d6:04:4c:83:b8:65:85:70:f3:2c:9f:e2:70:ec:5b:
67:70:09:7d:9e:56:94:96:ca:99:2d:d1:e4:99:d7:ba:ea:12:
8f:7b:38:a9:75:5a:af:3f:54:4b:c6:02:0e:62:c4:c4:9a:71:
53:22:09:fe:f4:7e:9d:4a:f2:95:d8:0e:a6:a0:7a:06:7f:fc:
46:f5:f9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:01 2026 by rpki-client