
$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier: 8/A1qhul5ncVd+nmEKSSpgn+SiHrgqVaM3hXpXF0fg4=
Subject key identifier: 0B:7B:76:A6:F0:D1:5D:41:55:87:77:39:3F:85:63:B2:63:84:6A:11
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number: 018E
Signing time: Wed 25 Mar 2026 03:49:24 +0000
Manifest this update: Wed 25 Mar 2026 03:49:24 +0000
Manifest next update: Wed 01 Apr 2026 03:49:24 +0000
Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: 6roTkspDL5OLO3yjDJFn6x0ZGKrMMbPsvttTsEaFI68=)
2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: bycVgkYzPPbBgP8wgig/oYIPYmXdNAtWqQrWGOOUFe0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Validity
Not Before: Mar 25 03:49:24 2026 GMT
Not After : Apr 1 03:49:24 2026 GMT
Subject: CN=69c35b44-c289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:2f:a7:ee:a3:47:76:ca:dc:46:f0:84:6b:
e7:56:53:b6:7b:3e:b2:69:98:e2:4d:fa:04:22:68:
1d:4b:de:27:1c:d7:a6:24:50:2b:14:70:f2:a8:95:
1d:ef:fc:0b:b4:6f:98:f0:bb:57:c5:4f:e9:99:58:
03:b3:ed:ac:d8:dc:5d:a2:c1:6c:ba:30:05:70:b3:
09:5a:d6:eb:99:c3:6f:0e:fe:7a:f3:51:ac:17:d3:
c6:80:1f:b7:b7:5c:51:9b:f2:dc:4b:41:a0:f7:c9:
42:2a:8b:fc:81:74:4c:94:3d:ca:5a:b1:77:f7:13:
e3:03:c6:01:e4:83:70:48:ad:ee:dd:9d:88:6b:3a:
b4:54:37:b6:9d:86:77:ef:55:a3:32:67:0c:85:95:
e5:79:47:eb:39:6c:29:a5:8f:fc:82:16:8b:7c:6d:
19:63:da:83:e1:ba:2c:29:5e:42:e7:f4:93:84:14:
c1:e5:45:21:d3:eb:4e:91:ee:3c:96:4c:06:2f:80:
e8:55:6e:60:81:9c:1d:db:48:2d:69:64:a7:ee:36:
09:8f:f3:65:22:7d:53:f3:fb:1f:3b:d2:e1:21:cc:
7a:b6:6d:82:0d:60:33:45:92:2d:61:b3:a7:3a:d7:
79:55:de:01:20:ca:f4:e2:5c:6b:83:f0:35:ba:d3:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7B:76:A6:F0:D1:5D:41:55:87:77:39:3F:85:63:B2:63:84:6A:11
X509v3 Authority Key Identifier:
keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4d:72:44:11:01:22:4c:e4:4c:d0:e1:1d:78:78:8f:25:f0:
89:27:21:4f:63:37:16:fc:4e:9a:e1:eb:d5:2c:7a:01:e3:f6:
46:2b:a1:b1:21:05:8a:33:3b:1a:0d:a9:46:e1:43:53:5d:87:
cb:73:9f:fb:94:b3:60:c2:a9:d5:a8:f6:53:77:30:f3:7e:d7:
75:4a:8a:5e:74:81:f8:50:cf:21:22:1a:b8:33:f0:35:4c:9b:
e2:a0:2d:cc:db:e0:6c:ce:20:da:f7:af:b5:ec:9a:e1:42:a6:
e9:ad:e8:e4:da:74:da:b6:03:f7:66:6c:a4:27:78:55:ad:57:
08:cc:68:64:2e:c4:c5:dc:e6:b6:28:9e:04:f1:25:7f:dd:bc:
e1:72:d5:11:73:81:95:86:bb:22:09:cf:f7:87:43:b8:3f:0d:
76:6e:dd:cf:e0:24:f6:a0:2d:f2:cd:df:6f:83:26:5e:e0:93:
f9:30:91:fd:2b:df:33:2f:ea:17:2a:02:01:8a:3c:4a:d0:a4:
b2:67:fe:84:5d:cf:7e:3c:7f:86:0d:5e:35:1e:38:73:bf:d5:
eb:9b:93:fd:0a:0c:01:58:94:a8:20:e7:8c:d0:47:52:db:15:
56:9e:6e:c7:06:f8:1a:9b:f7:25:fc:54:27:ac:03:6a:87:2d:
0c:4f:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:03 2026 by rpki-client