
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json)
Hash identifier: 7GZBTQl+5GnhvoUGruJ5mUDj6uZte3ip0mtM2XvUhy0=
Subject key identifier: A0:73:DA:ED:1B:31:0E:72:7B:B6:18:D0:8C:65:18:C1:86:EC:1E:BF
Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921
Certificate serial: 08BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
Manifest number: 08B4
Signing time: Thu 16 Apr 2026 20:21:22 +0000
Manifest this update: Thu 16 Apr 2026 20:21:22 +0000
Manifest next update: Thu 23 Apr 2026 20:21:22 +0000
Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: yJfN7qBmoIf+QwZPHN7oMLiR1uGvQ/wBBXCQR0aaE+M=)
2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: ye2w1MU0xLNOAhuqrYhDu4NrB2vk1m6TjmRZeLmnbh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl
rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921
Validity
Not Before: Apr 16 20:21:22 2026 GMT
Not After : Apr 23 20:21:22 2026 GMT
Subject: CN=69e144c2-8aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:84:8a:15:40:e0:a5:90:c8:b3:28:0c:b1:
07:db:eb:e8:08:4c:a7:d4:d8:87:8e:72:8a:83:10:
25:5e:a5:82:87:1c:90:bd:a0:1f:c5:04:fa:a8:d0:
0d:12:d5:99:81:22:ba:30:ea:a7:31:7a:0e:48:df:
51:1b:93:f4:f5:0c:0e:30:74:58:fa:56:6e:e6:a8:
c1:e1:41:7c:ed:23:ec:fb:ac:3e:b4:29:2f:d8:cc:
3b:62:ab:d4:ee:dd:02:0a:d9:0a:7e:6c:36:23:39:
c4:98:41:ad:3e:87:2c:af:62:85:f2:35:cc:e8:09:
12:93:5c:45:11:9c:0c:f9:54:79:6a:73:a5:49:71:
76:ac:07:fe:3b:af:09:cd:c9:3a:6c:48:da:2a:34:
b0:4e:49:58:e6:9b:e4:16:1a:d4:e6:5d:a8:96:8f:
05:30:46:7c:a0:78:62:6d:3a:5d:6a:6b:42:c4:bf:
24:15:24:6c:c7:71:f4:81:e8:d9:28:f6:4b:36:a2:
d1:12:e5:ac:6a:f4:0c:84:cc:56:52:a1:aa:75:c5:
98:a9:6c:ef:d9:93:b9:77:dd:dc:59:a4:1e:33:73:
9f:d6:57:07:5c:87:ea:45:98:4a:51:5d:9a:0f:c8:
39:c0:fb:0c:30:e5:2c:8c:dd:d2:ab:0f:67:64:a2:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:73:DA:ED:1B:31:0E:72:7B:B6:18:D0:8C:65:18:C1:86:EC:1E:BF
X509v3 Authority Key Identifier:
keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:07:aa:4a:6b:65:ff:a6:11:b6:f7:59:6c:bc:ea:f0:61:89:
ff:e8:8e:26:99:e8:f5:83:6b:91:f7:37:62:a0:bc:b5:f5:e5:
9a:fb:e4:7b:1a:f6:54:d9:95:92:b8:d9:49:92:bf:d6:02:03:
93:d4:33:8a:e3:80:41:f2:52:80:3d:d1:fa:f5:af:8b:d2:bf:
c6:e5:f7:bc:4a:f7:0f:66:0a:c8:d2:f2:69:04:41:5b:7f:f7:
43:33:66:6b:10:fd:09:28:46:a9:97:d4:64:44:f3:61:80:b6:
7e:3c:47:9f:4d:1b:d1:71:04:a4:44:05:aa:bc:30:2d:85:dc:
f4:05:e8:04:71:2b:5c:03:e0:0c:98:e8:79:70:7d:ff:b9:b1:
65:05:c3:b6:54:6b:f0:c8:d0:e8:20:fd:c2:bd:56:ed:3d:b3:
9c:53:ce:21:51:ed:89:5d:94:f4:88:82:4e:e7:d8:87:83:fb:
78:2c:eb:b2:aa:7c:9e:0d:cc:c5:c5:3c:c4:e8:47:5e:64:0f:
ab:5e:76:55:23:2f:e1:5d:5a:77:af:d0:40:1c:e5:c6:49:af:
d3:d5:f4:a9:fa:55:83:37:f3:fe:81:56:e6:4c:49:59:db:12:
d3:fa:b0:bf:d1:b4:83:78:77:23:0b:de:4f:b4:25:03:a2:6b:
20:38:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:13 2026 by rpki-client