
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json)
Hash identifier: 8fAUopl/TQojrUxBBUAmiJQj3eh/QkPQtaYBJuhn5Rc=
Subject key identifier: DB:E6:B5:18:1C:DC:20:DF:FC:93:F8:C0:3B:6C:AD:62:52:66:99:BD
Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
Manifest number: 0278
Signing time: Sun 01 Mar 2026 02:30:31 +0000
Manifest this update: Sun 01 Mar 2026 02:30:31 +0000
Manifest next update: Sun 08 Mar 2026 02:30:31 +0000
Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: o+Itr7HRp+omH1TBDFWKQnxfoyppBesRWUmnl/amES8=)
2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: MDsONJ4hpkxo4XypcmXy3n39INmGozN6I7wK4cJeqNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Validity
Not Before: Mar 1 02:30:31 2026 GMT
Not After : Mar 8 02:30:31 2026 GMT
Subject: CN=69a3a4c7-e31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:75:09:49:82:a9:80:ba:8a:34:ea:4a:84:
ae:12:10:07:18:7d:21:d3:52:7d:25:d4:9c:17:96:
2d:54:45:8e:50:91:b6:52:cd:50:e2:30:95:16:f5:
5e:fb:8f:f2:d1:43:73:0f:5d:90:79:de:f3:92:05:
47:86:39:2d:e8:9c:86:60:c0:89:7b:f6:4c:92:1a:
9d:ae:32:f9:ed:29:51:e9:d7:a0:65:31:21:1f:20:
bf:e1:58:74:05:11:91:52:1c:f9:24:98:13:16:c6:
16:75:f6:d8:c3:99:a8:69:ce:91:07:1f:09:15:41:
59:e0:cc:05:d6:9d:b8:65:77:b8:7d:39:70:93:2a:
f9:0f:75:b3:53:1b:90:51:51:50:48:78:cb:b3:00:
49:08:d4:df:0d:a6:74:b4:79:4d:4f:3c:e2:3e:d9:
7d:94:37:91:72:27:7f:28:38:fc:40:10:29:77:d5:
57:91:20:ae:be:f2:6c:1a:87:8e:54:97:41:ca:9e:
f6:58:d5:a9:c4:42:d2:56:65:a9:4b:19:75:9a:20:
94:fd:d2:7e:c3:05:de:17:39:fe:d9:36:68:f0:7c:
98:6c:08:7c:0b:94:fe:e6:78:ec:37:b2:c7:9e:a9:
c7:f5:cf:ba:69:28:03:0d:3c:12:0e:a7:19:24:9e:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E6:B5:18:1C:DC:20:DF:FC:93:F8:C0:3B:6C:AD:62:52:66:99:BD
X509v3 Authority Key Identifier:
keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d8:a9:5a:88:23:78:e1:68:5b:57:35:51:20:d8:7d:85:a0:
a6:26:cb:94:2f:34:68:44:3a:4c:dd:4d:31:51:17:57:f8:bf:
89:15:10:0e:1f:7e:31:40:cd:65:3c:45:5f:a3:f0:c4:2d:eb:
de:e3:c1:95:96:e7:5a:da:df:cc:d8:10:74:37:5d:35:bb:90:
85:c1:e3:15:74:7e:59:49:56:4a:8b:10:4a:e7:22:33:5b:4e:
b6:ef:8a:bb:56:36:69:2e:21:74:65:75:a9:1e:8d:47:af:57:
80:46:fc:b0:c5:c9:31:3a:21:72:22:c8:02:56:71:81:80:d6:
b8:26:2c:94:10:e7:b8:6f:16:3a:5c:52:0f:ee:45:22:fb:d1:
5c:22:d6:0c:8d:f3:2c:b8:9e:ce:94:38:ac:c4:cb:cc:8a:60:
5b:bb:c5:3c:84:97:18:c0:f6:4a:df:4e:0b:96:17:50:50:78:
db:26:fd:a8:f4:2e:de:b1:14:40:bd:09:57:77:70:e3:9e:ea:
11:9e:d2:d3:34:aa:78:04:80:d6:98:2a:ae:fb:62:1d:42:3d:
dc:09:a9:1e:84:58:69:19:a2:6b:12:28:48:36:c3:ee:0b:77:
0a:b5:a6:46:1d:2c:60:ee:a7:bb:fb:7a:cf:ec:64:9a:64:20:
78:90:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:27 2026 by rpki-client