
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
File: Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json)
Hash identifier: MBP2pC1BUYvRiC7lMgJPQ0gHg0guN47pmm+V8BMs1Ck=
Subject key identifier: 20:B7:8D:0B:C9:CC:AB:7A:EF:DF:34:FA:EA:97:32:13:19:DE:49:35
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial: 05F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
Manifest number: 05E9
Signing time: Sun 01 Mar 2026 23:57:29 +0000
Manifest this update: Sun 01 Mar 2026 23:57:28 +0000
Manifest next update: Sun 08 Mar 2026 23:57:28 +0000
Files and hashes: 1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: LxCjaeEEBIAN00SHcoTedUeQ4JlQNV2zfEdOX8v4a1U=)
2: 0FAA7244A7D211F0BEE84D58C4F9AE02.roa (hash: AlymbExV8oEUR9AGjMS6/XmXiFrOWjjjg6e09oggXfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1527 (0x5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Validity
Not Before: Mar 1 23:57:28 2026 GMT
Not After : Mar 8 23:57:28 2026 GMT
Subject: CN=69a4d269-9bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:6f:26:13:41:2e:f4:fa:89:06:59:c4:cd:
97:df:49:c2:c8:0c:5b:ec:a2:78:85:7c:e1:96:2a:
b6:84:ec:40:1b:bf:a5:d7:2b:d7:c7:c8:0a:44:18:
ac:7a:bf:e0:87:06:90:46:be:32:26:27:6b:6c:dc:
4e:40:a0:e5:d2:2f:3e:f7:82:ab:b2:d8:37:84:da:
9d:a2:16:ac:c5:df:ce:67:7e:28:14:c8:2f:0d:f5:
c1:45:83:7e:27:b4:0c:1e:59:84:f5:63:5d:ec:d7:
4e:29:8b:06:e5:c5:98:1d:ff:3e:32:73:3f:d8:b0:
a5:a6:96:42:aa:61:cf:d7:88:4e:36:cf:c4:f8:23:
b8:7c:c7:99:43:f9:e2:c7:e7:d6:23:03:ce:d2:a4:
50:81:f6:da:ac:e3:9d:5c:36:02:b3:19:2e:f7:79:
a8:4b:4d:bf:14:63:b6:a2:8b:87:79:e8:4b:7d:8e:
33:52:37:d7:e3:02:a6:39:b3:55:05:9f:54:2a:0b:
64:08:39:1b:21:8a:84:77:3d:db:06:b5:bb:cc:9d:
ab:da:30:cc:39:10:15:60:4d:d5:a8:42:bf:96:36:
a2:54:0c:d9:95:d2:e3:c5:fa:38:6b:80:eb:25:d3:
ab:d6:0a:5a:4a:81:0c:7d:7e:07:5f:27:d3:75:86:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B7:8D:0B:C9:CC:AB:7A:EF:DF:34:FA:EA:97:32:13:19:DE:49:35
X509v3 Authority Key Identifier:
keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:de:5c:82:14:cc:fe:26:c7:6f:7f:66:c4:d9:fb:f1:6b:78:
8a:7b:41:78:94:85:3b:47:82:f9:4c:0a:c1:1d:82:b9:77:77:
a6:69:73:2a:d7:d3:08:b5:ba:ff:c7:b0:50:4a:bd:95:5d:66:
5f:94:10:da:04:b6:4e:35:e2:71:a6:a8:e9:d5:e0:dd:59:e5:
1a:73:a1:8e:a8:3f:67:a3:57:23:09:ad:4a:2d:27:2d:27:ca:
a5:33:b6:65:d3:e2:e0:be:04:03:ed:05:c5:a4:70:45:b0:9f:
a1:55:79:55:d8:90:26:8c:9d:04:39:b0:a7:8d:f1:aa:cf:81:
f0:3b:a7:c9:70:0a:08:4a:c0:66:14:df:0c:8c:40:68:9c:63:
69:af:f9:53:7f:33:88:2f:d9:4f:44:72:69:50:e0:aa:dd:2f:
ab:c5:ca:ad:24:51:b1:b7:ad:fc:90:f9:d6:fc:1e:76:35:d2:
39:0c:6f:51:a0:5c:1b:fb:dc:95:58:ea:38:13:91:60:5d:b8:
b8:00:16:eb:e7:e6:d5:22:61:f1:8e:05:68:04:af:23:4c:cb:
61:ef:d5:77:95:43:59:34:4d:b3:dc:0d:bf:c4:48:bd:bd:94:
c8:b1:ea:f0:03:56:d5:ef:81:59:2a:86:8f:f7:58:ee:45:e0:
62:ab:90:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxOTQxMTAvBgNVBAUTKDY3REQ3NzQ3QTlEQjhCMDFBNUU3Q0NBMTQ2QzQ4OTY1
QTIzMDgwOTEwHhcNMjYwMzAxMjM1NzI4WhcNMjYwMzA4MjM1NzI4WjAYMRYwFAYD
VQQDEw02OWE0ZDI2OS05YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmONvJhNBLvT6iQZZxM2X30nCyAxb7KJ4hXzhliq2hOxAG7+l1yvXx8gKRBis
er/ghwaQRr4yJidrbNxOQKDl0i8+94Krstg3hNqdohasxd/OZ34oFMgvDfXBRYN+
J7QMHlmE9WNd7NdOKYsG5cWYHf8+MnM/2LClppZCqmHP14hONs/E+CO4fMeZQ/ni
x+fWIwPO0qRQgfbarOOdXDYCsxku93moS02/FGO2oouHeehLfY4zUjfX4wKmObNV
BZ9UKgtkCDkbIYqEdz3bBrW7zJ2r2jDMORAVYE3VqEK/ljaiVAzZldLjxfo4a4Dr
JdOr1gpaSoEMfX4HXyfTdYbG5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCC3jQvJ
zKt67980+uqXMhMZ3kk1MB8GA1UdIwQYMBaAFGfdd0ep24sBpefMoUbEiWWiMICR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjE5NC81RjM3QjlFRUVG
NkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3R2w1OHloUnNTSlphSXdn
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o5MTNSNm5iaXdHbDU4eWhSc1NKWmFJd2dKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjE5NC81RjM3QjlFRUVGNkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3
R2w1OHloUnNTSlphSXdnSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQt5cghTM/ibHb39mxNn78Wt4intBeJSFO0eC+UwKwR2CuXd3pmlzKtfTCLW6
/8ewUEq9lV1mX5QQ2gS2TjXicaao6dXg3VnlGnOhjqg/Z6NXIwmtSi0nLSfKpTO2
ZdPi4L4EA+0FxaRwRbCfoVV5VdiQJoydBDmwp43xqs+B8DunyXAKCErAZhTfDIxA
aJxjaa/5U38ziC/ZT0RyaVDgqt0vq8XKrSRRsbet/JD51vwedjXSOQxvUaBcG/vc
lVjqOBORYF24uAAW6+fm1SJh8Y4FaASvI0zLYe/Vd5VDWTRNs9wNv8RIvb2UyLHq
8ANW1e+BWSqGj/dY7kXgYquQAg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:49 2026 by rpki-client