
$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier: t8sRrmv2XCL2dWMWdZMMbJ/tYNBzyXroY1fzKb9R3f0=
Subject key identifier: 3D:31:83:1D:73:2D:8D:6F:C7:BB:AC:DF:B2:01:09:33:1E:75:FE:CE
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial: 23F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number: 23E5
Signing time: Thu 26 Mar 2026 15:48:27 +0000
Manifest this update: Thu 26 Mar 2026 15:48:26 +0000
Manifest next update: Thu 02 Apr 2026 15:48:26 +0000
Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: DZcjAkOsl57d+R2WuMO3Py7r/1a3TGv3AtO6AeWkq0A=)
2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t4RiKC6653Plu7Nba6sPuJDiD6/DW8iHgAWcMFWwJEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9207 (0x23f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Validity
Not Before: Mar 26 15:48:26 2026 GMT
Not After : Apr 2 15:48:26 2026 GMT
Subject: CN=69c5554b-9980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:f5:37:78:6d:79:08:04:fa:56:15:ad:9a:
8a:12:07:2c:ee:cb:94:89:61:90:b4:d5:3a:0c:b3:
9d:d2:71:0c:07:32:cc:cd:6e:16:c1:67:74:ea:e7:
f2:3d:a4:18:f2:61:32:3e:b1:4f:f3:85:ad:3e:98:
48:55:4e:0e:cb:d7:df:7d:a5:11:e3:c9:74:3c:fb:
f2:13:e8:3c:fc:ef:72:10:c7:2c:ee:58:8e:8a:3b:
9f:b3:80:0b:57:f7:2f:58:76:8a:1b:23:49:e7:9b:
04:cb:eb:1c:fe:ec:42:62:31:a6:a8:16:8e:15:d1:
96:1e:db:92:fd:c3:55:92:e6:22:1a:39:ef:c4:e1:
1a:3e:b0:04:42:01:49:92:ba:66:36:4d:87:73:5e:
29:72:4e:56:a1:ad:46:e0:b6:6e:94:f6:d8:4b:19:
f3:5d:b6:9a:7b:03:74:b7:bd:ba:c7:59:e7:8b:45:
e9:4b:31:8a:48:df:c2:a9:b1:5a:cb:ba:b5:5f:14:
de:22:35:88:c3:a7:2a:81:e0:ed:86:72:68:a4:8b:
dd:52:ee:bb:b4:a7:19:80:2d:71:8f:cc:24:25:12:
4b:6e:f2:4f:c8:82:37:f8:2f:21:7d:58:44:fe:ac:
4a:75:42:f1:b0:74:cc:97:71:58:6e:4e:e2:19:ec:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:83:1D:73:2D:8D:6F:C7:BB:AC:DF:B2:01:09:33:1E:75:FE:CE
X509v3 Authority Key Identifier:
keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c1:26:9b:10:98:2b:7f:d9:69:45:a2:29:15:fc:d7:1c:8d:
4c:55:a9:57:ee:5f:a9:e2:26:3d:f8:56:02:a2:8a:42:a0:e8:
72:e7:71:cb:c5:9f:81:e9:32:ef:1e:21:d7:e7:f7:e9:69:69:
44:5d:81:a3:cd:93:9e:17:18:d6:77:1c:98:0d:91:18:10:1d:
9a:1a:08:37:c4:5d:a6:c6:b7:cc:42:b0:00:7e:56:f7:4d:d5:
00:f4:96:07:75:89:d3:2f:28:cb:25:bf:b8:47:36:42:de:ca:
04:8f:4b:d6:c2:1c:19:75:95:0d:d0:a5:2a:2e:ed:f7:ba:17:
ec:c6:d8:e1:ca:d8:43:72:ad:2f:f8:a6:cd:77:2b:b8:44:7d:
6b:7a:1a:19:1f:fd:87:64:f6:e1:2f:fc:cb:75:5a:0c:14:55:
bb:a1:0c:80:b9:cf:2b:5c:5b:66:c8:46:2a:b0:32:f5:76:19:
88:59:5d:ae:0d:f6:ab:39:fb:59:93:db:d1:57:48:09:22:58:
89:21:38:64:c7:0c:67:80:f8:21:8d:c0:2e:4e:99:53:a5:f1:
f8:dd:5d:7c:37:88:df:a1:ac:63:5f:1d:de:c2:f2:36:46:d9:
d8:51:3d:ee:67:e0:35:29:e6:b4:7c:98:08:7c:76:08:3c:ac:
ac:50:88:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICI/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB
MzFGRDlCOEEwHhcNMjYwMzI2MTU0ODI2WhcNMjYwNDAyMTU0ODI2WjAYMRYwFAYD
VQQDEw02OWM1NTU0Yi05OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjtP1N3hteQgE+lYVrZqKEgcs7suUiWGQtNU6DLOd0nEMBzLMzW4WwWd06ufy
PaQY8mEyPrFP84WtPphIVU4Oy9fffaUR48l0PPvyE+g8/O9yEMcs7liOijufs4AL
V/cvWHaKGyNJ55sEy+sc/uxCYjGmqBaOFdGWHtuS/cNVkuYiGjnvxOEaPrAEQgFJ
krpmNk2Hc14pck5Woa1G4LZulPbYSxnzXbaaewN0t726x1nni0XpSzGKSN/CqbFa
y7q1XxTeIjWIw6cqgeDthnJopIvdUu67tKcZgC1xj8wkJRJLbvJPyII3+C8hfVhE
/qxKdULxsHTMl3FYbk7iGey9xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0xgx1z
LY1vx7us37IBCTMedf7OMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz
OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW
aHVMTUViSjVWeldqSDltNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt8EmmxCYK3/ZaUWiKRX81xyNTFWpV+5fqeImPfhWAqKKQqDocudxy8Wfgeky
7x4h1+f36WlpRF2Bo82TnhcY1nccmA2RGBAdmhoIN8Rdpsa3zEKwAH5W903VAPSW
B3WJ0y8oyyW/uEc2Qt7KBI9L1sIcGXWVDdClKi7t97oX7MbY4crYQ3KtL/imzXcr
uER9a3oaGR/9h2T24S/8y3VaDBRVu6EMgLnPK1xbZshGKrAy9XYZiFldrg32qzn7
WZPb0VdICSJYiSE4ZMcMZ4D4IY3ALk6ZU6Xx+N1dfDeI36GsY18d3sLyNkbZ2FE9
7mfgNSnmtHyYCHx2CDysrFCIeA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:48 2026 by rpki-client