
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json)
Hash identifier: nqP7Ug9We4cE3fgRTf4KHF5ZnaR3qtevJ8soG/GGmjA=
Subject key identifier: 02:1C:ED:B4:0A:A8:FC:BC:82:48:6C:3C:51:FA:21:E2:38:D9:6B:66
Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Certificate serial: 0990
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
Manifest number: 097E
Signing time: Sat 28 Feb 2026 20:22:20 +0000
Manifest this update: Sat 28 Feb 2026 20:22:20 +0000
Manifest next update: Sat 07 Mar 2026 20:22:20 +0000
Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: 0cb2ilbEzjlA1QKms/Mqs9VwCNuI9TH/zvEW0oBtHo8=)
2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: 92JEuDCm1e9WQ8I7GIzUujJiphmCChYv7JlAxtt8zqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl
rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2448 (0x990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Validity
Not Before: Feb 28 20:22:20 2026 GMT
Not After : Mar 7 20:22:20 2026 GMT
Subject: CN=69a34e7c-f7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:55:fe:b0:f1:8a:42:c5:06:ef:ef:f4:df:
a6:18:ef:1d:97:67:30:be:10:a3:41:f0:d2:19:b0:
e9:dc:64:60:21:f2:03:85:1a:9e:46:02:d5:44:4b:
3e:2e:ee:4f:77:bf:09:6b:0a:a2:06:2c:bf:f0:ef:
c4:19:97:47:8b:68:b7:4c:c1:43:61:fb:9d:ce:48:
2b:b5:47:99:ad:10:d9:1d:bd:3b:51:f3:ff:05:c9:
81:7c:c0:35:86:fa:71:f3:80:df:da:d0:16:b9:ab:
16:54:f1:4a:5c:dd:40:85:8e:42:6a:63:b4:54:af:
f0:25:d0:57:49:2a:e2:11:01:03:12:aa:ae:b6:c2:
03:63:d7:0f:5e:77:48:c2:d9:88:af:56:4c:ed:23:
5d:db:d6:eb:23:76:16:44:ef:80:a1:cf:85:49:46:
cf:7a:78:0a:a5:cf:03:29:b9:17:75:ee:cf:09:1b:
25:ff:5d:96:69:35:9f:63:d2:90:9c:10:49:d9:c0:
46:25:19:9e:70:4c:cf:75:87:07:43:06:d9:18:06:
c9:a6:82:1d:36:b8:8a:af:b6:85:22:c1:43:a0:4a:
19:24:11:cd:dc:12:a6:71:74:8b:fd:21:03:24:eb:
b3:02:2b:26:ea:05:18:05:0e:34:ef:89:ae:65:f3:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:ED:B4:0A:A8:FC:BC:82:48:6C:3C:51:FA:21:E2:38:D9:6B:66
X509v3 Authority Key Identifier:
keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9c:22:cd:86:4a:f5:a2:25:b1:5b:b8:60:c9:fe:69:80:c2:
b1:70:d4:b3:17:bd:51:7a:98:c8:98:c4:ee:31:f5:0c:73:33:
6a:9f:6f:85:8d:6a:3f:0d:dc:a6:08:aa:50:87:0f:e3:c9:9e:
0e:1e:3c:24:c9:48:9a:ef:42:ac:66:0a:83:13:8b:b7:51:7e:
a7:df:ba:ee:45:9f:ed:3e:24:ca:8d:5b:d9:79:70:07:71:b0:
f6:df:3e:2c:2f:d8:56:cd:e1:68:b0:80:11:26:bd:b8:d3:0b:
53:47:88:68:9f:c4:4c:a5:38:97:d1:48:d4:df:9f:5b:3c:be:
c4:d9:2e:a0:27:de:93:a5:eb:fb:83:37:28:ff:24:da:5c:6c:
b6:96:d7:01:84:3a:d3:72:49:6a:28:90:3c:1e:62:a8:39:91:
2d:21:f5:3a:ea:a2:99:21:b6:51:b8:e2:be:ab:77:3b:4d:c2:
ac:e3:e0:47:5f:14:c3:8b:aa:12:3f:cd:76:8f:63:dd:f1:65:
78:4f:80:90:9f:9c:e3:ad:0c:35:12:ca:91:bf:f6:b2:a4:7e:
b6:c0:23:25:84:38:f8:ff:00:df:ab:d6:48:e7:22:66:e2:af:
f1:24:f8:92:d6:58:3a:44:86:ba:f2:8e:9f:ec:c6:62:c1:28:
63:f9:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:40 2026 by rpki-client