
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
File: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json)
Hash identifier: 7ADdIciLhL1bElJCtX/A/y1S6m4KnynGLU+bpmWYT+4=
Subject key identifier: FD:B1:B4:54:15:2C:07:2D:04:B2:4E:67:F4:38:EC:42:25:45:EA:DC
Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
Certificate issuer: /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
Certificate serial: 057A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
Manifest number: 0573
Signing time: Sat 28 Feb 2026 23:53:30 +0000
Manifest this update: Sat 28 Feb 2026 23:53:30 +0000
Manifest next update: Sat 07 Mar 2026 23:53:30 +0000
Files and hashes: 1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: gh5INVbc/s7ewuALZqGn6vOzQAvr0xMrxCfmeGM02q0=)
2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: KLbn4axyWFCDHHukPbRuTMga6xjQIaRTiqnBj5WTC3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl
rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
Validity
Not Before: Feb 28 23:53:30 2026 GMT
Not After : Mar 7 23:53:30 2026 GMT
Subject: CN=69a37ffa-cf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:86:45:a2:ae:19:14:0b:d4:6b:a9:ef:1a:
22:69:15:0b:35:03:77:63:bd:57:34:02:19:6c:de:
d5:67:5e:70:cd:04:fc:1a:cc:eb:71:70:9a:36:c6:
5f:24:32:41:7c:3d:b6:b3:b5:ca:9e:4b:1c:b9:d7:
8d:4f:d2:2b:e1:10:dd:1e:ee:b4:0c:42:ac:73:32:
4a:fc:e2:d9:42:ca:f4:33:d6:dc:7e:c6:72:8a:21:
af:f3:4b:be:10:80:c3:db:d7:cb:6d:6f:84:12:7c:
c7:f2:7f:10:fd:c9:99:2b:04:ea:1f:9e:0e:71:5f:
60:3d:82:2c:ca:b8:c4:c5:9d:b4:9f:e2:2e:1f:e8:
c0:8a:ef:01:4b:79:62:92:71:67:33:31:e1:41:97:
e1:4e:3d:56:d8:f7:8f:c0:70:e6:56:e5:28:78:6c:
70:f4:9f:a1:a1:4b:56:5d:b7:60:29:dd:fb:75:d0:
93:5b:43:f0:22:25:c3:c2:bc:1e:8a:91:26:a6:22:
e1:fb:e1:ef:35:f4:34:d1:1d:f7:08:b1:89:39:1a:
c6:99:88:d9:cc:66:0e:40:e0:92:62:73:d0:91:ec:
7f:79:a6:fc:ff:40:b6:fb:6d:ec:4e:59:71:95:41:
ba:45:a4:ab:54:18:04:d8:a7:af:68:37:d6:5c:7e:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B1:B4:54:15:2C:07:2D:04:B2:4E:67:F4:38:EC:42:25:45:EA:DC
X509v3 Authority Key Identifier:
keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b2:67:e8:78:99:3c:50:43:b9:1a:c3:ac:48:e3:72:17:03:
f9:16:c3:3c:6f:6c:73:59:9c:c2:5a:95:ee:d6:31:d8:8a:b0:
f1:88:21:57:37:b6:a0:d3:7b:41:e5:4a:f8:6d:d7:b4:b1:91:
9a:0d:f7:ad:a0:cf:f1:19:23:27:1a:1d:b6:e8:d0:5a:3d:06:
6e:1a:76:72:21:6a:a5:aa:6f:65:45:c4:59:84:af:09:a8:07:
5c:a9:24:93:3e:7d:4b:15:1f:f5:67:39:83:fc:ed:44:20:a6:
d2:57:dc:47:29:32:78:da:87:3d:f8:c3:55:df:28:7b:19:fb:
e6:a1:84:07:1f:2c:58:09:d6:7f:91:0e:99:78:58:09:52:af:
4d:38:ec:78:59:72:82:e3:2e:50:4f:a3:1a:11:25:2c:5f:37:
3f:3c:f2:d9:15:89:c7:30:46:ad:5e:c4:94:a5:ee:d2:f1:d9:
4b:c4:24:af:ae:94:0d:3e:f6:ec:86:44:91:68:10:b7:ac:51:
db:cb:e9:ce:02:b5:5f:49:d7:9f:fa:4e:22:5f:95:88:e3:b0:
99:de:e3:c5:53:51:7a:29:e8:ba:36:3e:24:3d:1a:4d:a2:cd:
7d:ed:b1:a0:73:da:cc:ea:6b:f0:ef:f4:40:95:cb:d3:b4:66:
d4:ed:23:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlEMEMxMTAvBgNVBAUTKDA5REUxOTY3RTk1MkVFOEUxQjJERDYwRjg4RjYzQkEy
NjA1NzUzRUYwHhcNMjYwMjI4MjM1MzMwWhcNMjYwMzA3MjM1MzMwWjAYMRYwFAYD
VQQDDA02OWEzN2ZmYS1jZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsqeGRaKuGRQL1Gup7xoiaRULNQN3Y71XNAIZbN7VZ15wzQT8GszrcXCaNsZf
JDJBfD22s7XKnkscudeNT9Ir4RDdHu60DEKsczJK/OLZQsr0M9bcfsZyiiGv80u+
EIDD29fLbW+EEnzH8n8Q/cmZKwTqH54OcV9gPYIsyrjExZ20n+IuH+jAiu8BS3li
knFnMzHhQZfhTj1W2PePwHDmVuUoeGxw9J+hoUtWXbdgKd37ddCTW0PwIiXDwrwe
ipEmpiLh++HvNfQ00R33CLGJORrGmYjZzGYOQOCSYnPQkex/eab8/0C2+23sTllx
lUG6RaSrVBgE2KevaDfWXH6uwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2xtFQV
LActBLJOZ/Q47EIlRercMB8GA1UdIwQYMBaAFAneGWfpUu6OGy3WD4j2O6JgV1Pv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQwQy84MTRGNkQwNDFB
MUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdvNGJMZFlQaVBZN29tQlhV
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NkNFpaLWxTN280YkxkWVBpUFk3b21CWFUtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUQwQy84MTRGNkQwNDFBMUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdv
NGJMZFlQaVBZN29tQlhVLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqbJn6HiZPFBDuRrDrEjjchcD+RbDPG9sc1mcwlqV7tYx2Iqw8YghVze2oNN7
QeVK+G3XtLGRmg33raDP8RkjJxodtujQWj0Gbhp2ciFqpapvZUXEWYSvCagHXKkk
kz59SxUf9Wc5g/ztRCCm0lfcRykyeNqHPfjDVd8oexn75qGEBx8sWAnWf5EOmXhY
CVKvTTjseFlyguMuUE+jGhElLF83Pzzy2RWJxzBGrV7ElKXu0vHZS8Qkr66UDT72
7IZEkWgQt6xR28vpzgK1X0nXn/pOIl+ViOOwmd7jxVNReinoujY+JD0aTaLNfe2x
oHPazOpr8O/0QJXL07Rm1O0jXA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:16 2026 by rpki-client