
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json)
Hash identifier: SarkdIp2HGiZlJKaMgi9vOGq76GruXXhwDeU2jFY0Rg=
Subject key identifier: 55:C9:42:44:DA:AF:1A:C5:ED:DA:32:4E:2A:08:52:5A:31:82:2D:7A
Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49
Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
Manifest number: B3
Signing time: Wed 25 Mar 2026 06:19:36 +0000
Manifest this update: Wed 25 Mar 2026 06:19:36 +0000
Manifest next update: Wed 01 Apr 2026 06:19:36 +0000
Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: e+iZw+P9827jn708DletFiVDrizwtbuH8Wkl906HUM0=)
2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: NNWgzGNZzKFhyR9UQaPLuskwOBvWx8bjhp6pV23mdH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl
rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049
Validity
Not Before: Mar 25 06:19:36 2026 GMT
Not After : Apr 1 06:19:36 2026 GMT
Subject: CN=69c37e78-7c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:18:0f:cd:f9:66:9c:6b:32:20:78:d8:2c:
c5:0e:d4:67:6d:10:df:d7:b3:19:d1:31:cb:37:e8:
9a:c3:2a:6c:f0:d5:bf:5a:9a:99:5f:2f:e0:68:a2:
11:5b:80:98:7c:a1:af:52:9a:b7:ea:7c:83:98:c9:
21:b2:70:7c:19:2c:aa:38:18:02:9a:61:20:a6:29:
6b:00:fc:ed:63:91:ec:19:7a:ca:48:f6:e6:22:8a:
72:b1:64:58:d7:bc:df:80:58:e1:b8:6d:a6:67:b6:
44:4e:97:fe:ab:57:93:5e:65:ce:54:0f:09:aa:e5:
6e:e6:c5:cd:00:4e:e9:9d:24:4f:5f:d1:dd:59:ac:
4d:c5:27:98:80:94:26:5a:ca:4c:e6:ef:9f:63:3d:
d7:c1:ab:32:c5:62:54:5f:ca:78:5d:2f:c2:5d:58:
29:af:3a:1b:a6:a1:1a:76:27:c4:e4:3f:34:35:9d:
fe:66:56:1e:49:16:e3:23:25:ed:3b:71:e6:7e:ea:
6f:51:64:f0:6a:b2:43:91:17:a3:d7:fb:df:3b:db:
56:da:93:51:d9:2c:11:6f:d5:0a:97:99:a8:f0:d6:
a9:3d:a5:d9:0f:26:41:da:e7:cc:1e:1d:88:24:82:
0b:f2:98:02:0c:13:ab:7d:9c:e5:84:e6:94:c0:10:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C9:42:44:DA:AF:1A:C5:ED:DA:32:4E:2A:08:52:5A:31:82:2D:7A
X509v3 Authority Key Identifier:
keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ed:db:ff:d4:74:3e:b6:f2:35:ce:e7:9c:3b:b1:ba:56:31:
be:e8:29:07:7b:e4:21:cb:20:b0:ce:e9:f5:27:01:b5:88:79:
71:0c:6e:fe:6f:fd:59:23:6a:25:4d:d2:98:5c:5a:b0:1b:39:
51:d3:0a:9d:d3:83:b9:69:71:15:31:e1:03:7c:af:78:98:cf:
ce:14:93:c3:29:f5:0d:a4:d9:8e:34:4b:69:46:0d:b0:18:59:
73:76:28:b9:99:2b:28:80:ac:3e:b2:01:09:1d:5c:76:28:5b:
f6:bf:f4:55:f3:88:68:b2:23:7a:2f:e5:23:6d:37:a8:fd:b3:
e8:f9:54:1c:16:89:6e:6a:89:0c:49:cc:4c:9b:c9:b4:4f:75:
69:6e:7f:66:da:45:c7:7a:8d:4b:37:3a:f0:39:eb:30:be:40:
96:db:a0:72:d8:7e:2f:b7:3d:a5:cc:2d:57:55:75:74:05:08:
25:31:a5:32:a6:90:df:e1:bf:d6:2b:e4:0d:41:c1:14:4b:49:
8f:a2:1c:d4:a5:a7:7d:c8:46:f7:c6:45:61:4a:90:16:1c:86:
e8:fc:55:94:6b:8e:67:5e:04:8c:63:88:19:5e:a2:0b:61:bf:
38:92:a9:de:a1:eb:b3:9e:03:f5:11:e7:f6:04:7a:4a:65:9f:
55:8d:8e:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0RTYxMTAvBgNVBAUTKENFQkJGMkJDQUZCOTU3MjdFMTJDRDhCNkRGNTExNkI4
QTE2QzkwNDkwHhcNMjYwMzI1MDYxOTM2WhcNMjYwNDAxMDYxOTM2WjAYMRYwFAYD
VQQDEw02OWMzN2U3OC03YzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ooYD835ZpxrMiB42CzFDtRnbRDf17MZ0THLN+iawyps8NW/WpqZXy/gaKIR
W4CYfKGvUpq36nyDmMkhsnB8GSyqOBgCmmEgpilrAPztY5HsGXrKSPbmIopysWRY
17zfgFjhuG2mZ7ZETpf+q1eTXmXOVA8JquVu5sXNAE7pnSRPX9HdWaxNxSeYgJQm
WspM5u+fYz3XwasyxWJUX8p4XS/CXVgprzobpqEadifE5D80NZ3+ZlYeSRbjIyXt
O3HmfupvUWTwarJDkRej1/vfO9tW2pNR2SwRb9UKl5mo8NapPaXZDyZB2ufMHh2I
JIIL8pgCDBOrfZzlhOaUwBBcYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXJQkTa
rxrF7doyTioIUloxgi16MB8GA1UdIwQYMBaAFM678ryvuVcn4SzYtt9RFrihbJBJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjRFNi9GOUZCOTBCODE3
NTMxMUYwQUFGNjFENTdDNEY5QUUwMi96cnZ5dkstNVZ5ZmhMTmkyMzFFV3VLRnNr
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjRFNi9GOUZCOTBCODE3NTMxMUYwQUFGNjFENTdDNEY5QUUwMi96cnZ5dkstNVZ5
ZmhMTmkyMzFFV3VLRnNrRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS+3b/9R0PrbyNc7nnDuxulYxvugpB3vkIcsgsM7p9ScBtYh5cQxu/m/9WSNq
JU3SmFxasBs5UdMKndODuWlxFTHhA3yveJjPzhSTwyn1DaTZjjRLaUYNsBhZc3Yo
uZkrKICsPrIBCR1cdihb9r/0VfOIaLIjei/lI203qP2z6PlUHBaJbmqJDEnMTJvJ
tE91aW5/ZtpFx3qNSzc68DnrML5Altugcth+L7c9pcwtV1V1dAUIJTGlMqaQ3+G/
1ivkDUHBFEtJj6Ic1KWnfchG98ZFYUqQFhyG6PxVlGuOZ14EjGOIGV6iC2G/OJKp
3qHrs54D9RHn9gR6SmWfVY2Omw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:37 2026 by rpki-client