
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json)
Hash identifier: ERRz0nd2YakLsKp89prJ+iUkryyIwV3LVWYqOVdVNyM=
Subject key identifier: 94:D6:A4:91:51:42:6D:31:03:F8:D7:88:16:A0:61:BB:16:5B:4C:54
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
Manifest number: EA
Signing time: Mon 02 Mar 2026 03:05:19 +0000
Manifest this update: Mon 02 Mar 2026 03:05:18 +0000
Manifest next update: Mon 09 Mar 2026 03:05:18 +0000
Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: eFf29hfvzdrMmZkEzhESyU28ax/sTiWSQmtZWKj5w+A=)
2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: S9t/+J52VQt2ne9SbBBHigAP25wl7hoUywJOVYVw1Ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Validity
Not Before: Mar 2 03:05:18 2026 GMT
Not After : Mar 9 03:05:18 2026 GMT
Subject: CN=69a4fe6f-c23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:15:1f:63:ab:78:d4:c4:7a:53:8b:6c:64:
e4:88:b1:34:1e:2d:45:c6:24:ea:6a:b9:84:bd:da:
b9:04:78:be:5b:98:1b:ae:ca:f3:50:da:ad:29:3f:
59:fd:fd:b7:98:2d:3c:f5:0a:d9:67:33:18:2e:05:
5e:71:a1:dc:fa:ea:16:ed:b5:ed:a3:5a:34:3f:15:
76:5a:dd:29:74:a5:14:68:ed:20:47:aa:92:b9:10:
89:bd:67:c4:9d:e8:83:c0:1a:b3:c9:aa:e1:49:15:
80:b0:11:a9:ac:40:12:02:11:16:e5:e4:64:93:35:
d3:56:bc:5c:c9:9a:1e:ea:da:5c:a9:f3:55:ed:bd:
3a:ef:76:8b:16:3c:8a:b5:3c:5e:75:03:4b:3a:b4:
f0:53:ef:75:a3:63:97:28:7d:a7:4e:6a:2f:e2:31:
81:a1:c3:b4:de:0c:c7:67:cc:ec:d6:03:09:76:41:
a0:8c:63:fb:a0:5a:ba:be:26:d1:25:0d:5f:80:7f:
20:a5:90:cd:b9:d7:b3:c7:c2:97:71:3e:c7:16:8d:
4e:b8:06:a5:1f:02:8b:b7:1b:0b:09:8e:c9:44:df:
ba:18:b2:96:3c:59:65:0d:b9:c2:a5:83:ab:b3:03:
69:36:89:5d:6b:cb:9c:e7:69:ac:d1:7c:b6:7c:45:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D6:A4:91:51:42:6D:31:03:F8:D7:88:16:A0:61:BB:16:5B:4C:54
X509v3 Authority Key Identifier:
keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:14:b0:e0:ce:fd:42:69:0b:d1:68:a0:f1:27:86:29:77:92:
87:6a:41:7d:3c:b0:a8:a3:f4:f1:ec:9e:4f:a3:0f:73:1e:56:
65:b8:6c:73:95:b1:9d:62:05:a3:7b:2a:00:62:e6:5a:27:10:
65:b4:cc:47:09:ab:7c:48:2a:a4:4b:35:46:e9:b9:b2:47:83:
51:87:c9:fe:9f:20:8b:7c:c4:7c:e9:d3:e7:77:90:f1:cd:1c:
65:bb:76:bc:2e:c9:22:10:62:d7:b7:44:25:bf:1c:99:e2:94:
80:41:a2:d4:c7:ec:56:7f:6e:b6:32:6b:11:b5:58:44:d3:79:
b0:94:45:64:4d:5a:cb:03:1f:1c:35:43:d7:29:82:88:d6:b6:
6b:8b:89:89:c5:43:bc:70:12:03:90:f8:d4:1e:ca:fe:1e:5c:
e3:34:11:5d:a4:11:68:d6:e0:d8:d6:82:cc:72:b5:f3:84:26:
39:9a:75:0d:4d:72:16:95:0d:ea:4d:3d:05:8d:07:e5:a9:ef:
ce:37:91:65:c2:45:25:5c:5e:b7:92:6b:ef:25:2b:6a:93:bb:
66:5a:69:72:88:d2:03:c7:d2:ef:ac:e6:97:44:4e:27:61:28:
8c:a3:54:1f:8b:d4:79:3b:41:86:90:65:4d:d2:0a:f9:58:54:
d3:5f:ea:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQzOUUxMTAvBgNVBAUTKENEOTI3OERFRDkxOEIyMzc1MDg2QjJDRjhFNEUwNjkx
N0QwMjExQjUwHhcNMjYwMzAyMDMwNTE4WhcNMjYwMzA5MDMwNTE4WjAYMRYwFAYD
VQQDEw02OWE0ZmU2Zi1jMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApncVH2OreNTEelOLbGTkiLE0Hi1FxiTqarmEvdq5BHi+W5gbrsrzUNqtKT9Z
/f23mC089QrZZzMYLgVecaHc+uoW7bXto1o0PxV2Wt0pdKUUaO0gR6qSuRCJvWfE
neiDwBqzyarhSRWAsBGprEASAhEW5eRkkzXTVrxcyZoe6tpcqfNV7b0673aLFjyK
tTxedQNLOrTwU+91o2OXKH2nTmov4jGBocO03gzHZ8zs1gMJdkGgjGP7oFq6vibR
JQ1fgH8gpZDNudezx8KXcT7HFo1OuAalHwKLtxsLCY7JRN+6GLKWPFllDbnCpYOr
swNpNolda8uc52ms0Xy2fEUPTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTWpJFR
Qm0xA/jXiBagYbsWW0xUMB8GA1UdIwQYMBaAFM2SeN7ZGLI3UIayz45OBpF9AhG1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM5RS83OTg0NTcwQ0Iz
NTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNqZFFockxQams0R2tYMENF
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0ViVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDM5RS83OTg0NTcwQ0IzNTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNq
ZFFockxQams0R2tYMENFYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZBSw4M79QmkL0Wig8SeGKXeSh2pBfTywqKP08eyeT6MPcx5WZbhsc5WxnWIF
o3sqAGLmWicQZbTMRwmrfEgqpEs1Rum5skeDUYfJ/p8gi3zEfOnT53eQ8c0cZbt2
vC7JIhBi17dEJb8cmeKUgEGi1MfsVn9utjJrEbVYRNN5sJRFZE1aywMfHDVD1ymC
iNa2a4uJicVDvHASA5D41B7K/h5c4zQRXaQRaNbg2NaCzHK184QmOZp1DU1yFpUN
6k09BY0H5anvzjeRZcJFJVxet5Jr7yUrapO7ZlppcojSA8fS76zml0ROJ2EojKNU
H4vUeTtBhpBlTdIK+VhU01/qXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:08 2026 by rpki-client