
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json)
Hash identifier: eY9d+AbGjz6qnGQAlhrBa3osJA0hI33lNU+MxOt8C5s=
Subject key identifier: BB:C9:0E:B2:15:33:2D:50:96:18:4A:25:BE:31:25:78:81:B9:D5:D5
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
Manifest number: 0101
Signing time: Wed 15 Apr 2026 05:45:07 +0000
Manifest this update: Wed 15 Apr 2026 05:45:06 +0000
Manifest next update: Wed 22 Apr 2026 05:45:06 +0000
Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: EZFZcew6QyuaeDY7TNvpk7cA2DnNvEWvtxv1A6XA9p0=)
2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: S9t/+J52VQt2ne9SbBBHigAP25wl7hoUywJOVYVw1Ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Validity
Not Before: Apr 15 05:45:06 2026 GMT
Not After : Apr 22 05:45:06 2026 GMT
Subject: CN=69df25e3-f0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:96:52:26:99:90:4f:79:e3:a4:36:5a:c9:
71:48:5e:aa:7b:cd:3b:43:fb:86:c7:8a:64:58:03:
b0:64:77:68:5e:b4:eb:ec:7c:53:fa:5e:35:9b:13:
3d:4a:bf:07:3d:80:59:96:b7:6a:72:3d:00:00:fd:
02:a0:c1:f2:a0:6f:47:77:10:18:53:b2:43:bc:2e:
ad:b4:7c:02:c1:28:e8:38:68:58:35:41:e6:5a:5a:
86:cf:d4:69:6f:3b:86:4a:84:88:8d:51:06:e1:60:
a1:cf:0d:7f:9c:0c:67:43:64:32:ac:fd:f6:1c:e9:
10:08:5f:1c:d1:6a:69:a9:e3:92:a6:77:41:e1:b6:
2d:1b:40:e0:47:2c:f1:55:e1:e9:44:5c:e8:5a:7f:
19:3f:9f:ce:06:5a:be:48:fe:48:92:4e:e2:2b:03:
1e:14:4b:17:7c:84:3f:93:ca:9d:ea:30:70:52:d9:
99:8d:5c:44:11:48:7c:4e:c7:5a:2b:20:18:89:05:
e7:e1:e1:98:6f:9c:77:e3:0c:de:3d:eb:54:61:cf:
78:e8:4a:b1:ed:de:2a:f1:a6:84:70:55:8c:2c:19:
9d:db:90:91:81:a8:98:5f:a4:f0:79:e8:dd:7e:24:
70:69:3a:9a:13:cf:71:54:c9:30:75:9c:5d:28:c8:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C9:0E:B2:15:33:2D:50:96:18:4A:25:BE:31:25:78:81:B9:D5:D5
X509v3 Authority Key Identifier:
keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:f6:34:c9:8b:c0:30:55:ae:8e:1a:8e:bc:76:c9:b9:cd:46:
25:b4:ec:86:66:8c:2b:09:a3:7a:b7:1a:d4:8d:26:de:25:56:
50:20:1b:a5:32:2b:a6:d1:03:ef:03:fe:2d:6b:37:20:ef:e7:
92:ff:4c:1c:2d:38:a2:84:ad:93:ba:b2:75:bc:15:55:2f:88:
28:67:b9:7b:9c:a2:f2:d8:25:3a:c2:f1:2b:12:79:3c:59:6d:
6f:47:7a:fe:3a:73:08:6c:39:99:5d:50:36:8c:da:a7:97:f4:
75:e7:ce:7a:e8:cb:20:8a:91:54:6f:8c:49:6b:6e:e1:dd:33:
55:1b:c2:42:d9:26:69:9f:c0:69:d8:ed:43:dc:8e:0c:6a:6a:
d3:1c:18:2e:bd:2a:d9:5e:f0:ac:6e:1c:28:37:b3:2b:c8:67:
c2:7c:bb:56:23:b0:97:66:c8:df:f3:c5:a9:b6:f6:15:0c:6e:
f1:24:c8:2c:12:f1:0d:03:f6:fd:07:3f:72:47:9f:27:15:27:
f1:45:56:db:33:31:b0:f0:c6:f3:f8:e1:5b:61:04:0a:9e:eb:
61:a2:be:d5:8f:76:d6:1c:76:3f:78:1e:5f:22:16:97:00:27:
f0:19:5c:12:f2:b7:0b:61:12:e3:5c:f1:4a:5f:21:8c:9f:89:
63:28:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:25 2026 by rpki-client