
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier: XPTnN6q2VGHdROHrFjHUCms6kU1N/VVQTR455ps7D88=
Subject key identifier: 3B:99:79:10:F0:C7:8F:B1:16:F3:05:1E:E0:BF:9F:4E:9F:E1:15:7B
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 02B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number: 028B
Signing time: Wed 25 Mar 2026 01:20:54 +0000
Manifest this update: Wed 25 Mar 2026 01:20:54 +0000
Manifest next update: Wed 01 Apr 2026 01:20:54 +0000
Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: Vl/N+R958M8mc7kEfFGmLxwSuf0erCYsFBroc2dIItg=)
2: 455D199EE38B11EE84566164C4F9AE02.roa (hash: gOV5rPqQrYO4YVfNAWomUe0MtcUzLHbDhM46sP91PRA=)
3: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: IUtOdJiE9Ch7kGLlPuHyU4+jmWHwHE+NOWpak4vAtYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Mar 25 01:20:54 2026 GMT
Not After : Apr 1 01:20:54 2026 GMT
Subject: CN=69c33876-cd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:69:4a:f8:11:02:15:46:41:77:73:55:97:
f3:5a:5c:d8:58:74:cd:fd:4a:a7:f1:a4:53:8c:e7:
61:91:3c:d7:4e:96:ad:bf:73:65:16:e8:a9:f5:0c:
a8:94:b1:41:f9:df:be:27:8b:93:da:8b:e9:9c:74:
60:87:4c:ec:f6:ad:a9:86:16:46:f6:44:15:c9:61:
e1:ad:57:7d:68:46:0e:85:a9:92:b5:09:8f:03:ef:
d9:20:44:6d:0c:f3:c2:ff:69:90:72:74:a7:30:16:
ac:e9:41:90:df:da:1d:91:4b:45:ea:e9:7e:94:df:
69:c1:7b:d8:e0:c9:cc:07:2b:99:07:ed:d1:42:5b:
e2:74:0a:5f:21:1b:e5:2b:b1:24:f2:ad:de:b8:ea:
24:00:53:fe:50:c9:ff:df:7e:71:4f:84:13:71:a7:
70:1b:61:68:65:d5:29:28:f3:41:16:21:b6:5a:55:
31:5a:58:17:79:4b:ad:47:6b:b4:d1:7c:4f:07:a1:
cb:7f:7d:3d:79:14:75:50:3a:22:55:f2:13:5a:68:
ba:27:8a:ba:9e:ea:a6:7f:bd:28:24:e0:a8:dc:fd:
ba:43:7e:de:a6:3d:f4:84:90:82:9c:28:91:7c:5d:
14:95:e4:66:ff:3d:2d:9e:4a:bf:d2:33:14:11:40:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:99:79:10:F0:C7:8F:B1:16:F3:05:1E:E0:BF:9F:4E:9F:E1:15:7B
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:99:5d:53:e5:e4:e5:12:5b:4d:d5:95:e1:ac:bf:8a:00:4b:
8f:b8:bf:1b:3d:4b:0d:56:39:66:0c:6c:b4:51:1b:c6:07:4e:
f1:2f:38:9d:c1:33:70:6a:8c:4b:f2:84:29:f3:a0:d9:c8:56:
a3:ab:21:19:a2:18:68:63:44:f5:8f:f6:d9:29:89:88:0d:28:
4f:26:ae:1d:63:98:39:70:36:f3:22:4e:de:19:e8:de:d3:5c:
5f:c0:50:6b:3a:27:1f:e5:78:79:c3:b5:d2:36:46:74:67:09:
0f:1d:77:97:63:f5:77:a7:3b:e1:37:87:9b:59:74:67:c1:e1:
b0:cc:48:9e:db:ae:09:04:57:25:32:f1:03:48:31:63:62:59:
cb:ed:7a:c8:b9:04:15:53:31:16:92:1f:32:22:0b:53:be:be:
f8:08:4e:d7:72:fd:95:10:d9:47:d9:7d:59:07:54:e7:b5:fc:
de:ed:d8:a1:5a:3b:6d:e3:5f:d0:69:a8:d1:0e:36:9b:13:ee:
23:e2:28:6e:06:fa:c1:7f:aa:03:66:c8:d5:15:cf:6c:73:d0:
4b:5e:e1:38:c7:50:bf:cd:c1:9c:ed:6c:1a:c9:06:3d:bc:50:
b9:df:79:79:4d:d8:fc:72:ba:41:f7:53:10:40:bb:d4:5d:b3:
37:38:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:08 2026 by rpki-client