
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
File: f_ZWW3k9deFOctx32CgmvUO3_nU.mft (raw, json)
Hash identifier: 7aPRs7TH2ogL0DEJS3ETPuwkOzVF9Ddgk682aBcTZ0Q=
Subject key identifier: 00:12:0C:61:F7:62:40:80:BC:1F:3B:03:B7:A2:06:6F:5E:DC:A1:49
Authority key identifier: 7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
Certificate issuer: /CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
Manifest number: 023E
Signing time: Wed 25 Mar 2026 01:56:15 +0000
Manifest this update: Wed 25 Mar 2026 01:56:14 +0000
Manifest next update: Wed 01 Apr 2026 01:56:14 +0000
Files and hashes: 1: f_ZWW3k9deFOctx32CgmvUO3_nU.crl (hash: ZamjGsKCh1mVYXvh//cjcOQQaa3/J0vhUyugVzw5SQk=)
2: 7B45598CC3F111EDAB69B855C4F9AE02.roa (hash: KD2BlBHmdYrYN90XGC4f8F1qUJ8NW/API0cYFd241XM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13C3, serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Validity
Not Before: Mar 25 01:56:14 2026 GMT
Not After : Apr 1 01:56:14 2026 GMT
Subject: CN=69c340bf-7567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:24:60:8b:66:1c:98:fd:e7:fb:85:59:01:
5c:09:de:97:3a:5c:dc:22:bd:5c:88:c6:cd:ab:82:
e6:64:55:2a:2c:94:11:7c:3e:9b:2e:7c:81:f5:e3:
47:8d:c6:8f:7d:34:96:e9:4a:cb:7c:50:ba:02:48:
09:6d:7a:e2:fe:a0:0c:62:79:1e:26:70:39:83:c5:
91:8a:7d:68:2c:42:e3:92:69:bb:18:88:c5:d6:c0:
40:65:1f:da:06:58:ce:c2:86:07:c8:ea:e3:14:b2:
24:94:7f:8f:33:ae:2e:83:0c:e5:33:98:6f:88:33:
4a:82:7a:11:f3:3e:f5:6e:25:69:cf:97:b0:9d:fa:
bc:59:c2:2d:5e:b4:57:57:a1:e1:41:0d:55:2b:98:
bd:42:5b:c1:ff:d3:30:b5:e6:d9:01:c3:a4:5f:a2:
d7:df:a1:02:90:31:c6:3f:2a:d4:b9:d4:58:67:85:
a9:f3:3e:55:cf:e3:15:ed:66:38:58:f3:27:a1:bb:
33:b7:9f:6e:13:3d:b4:23:ce:a7:1b:b6:e9:f3:2b:
10:bf:45:27:8f:57:d3:a8:1d:f1:03:3d:9d:9c:35:
13:98:67:a5:4e:24:9c:75:cf:30:26:27:5f:59:91:
da:86:f0:36:b1:d9:13:b9:69:3a:ae:56:10:03:39:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:12:0C:61:F7:62:40:80:BC:1F:3B:03:B7:A2:06:6F:5E:DC:A1:49
X509v3 Authority Key Identifier:
keyid:7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8b:44:de:97:5a:0c:9f:ec:3c:2f:b1:61:b6:5a:6e:07:72:
5b:67:b8:bd:35:15:13:af:cb:12:9b:b4:28:8d:1c:cf:ef:c5:
6a:eb:4f:48:fd:ff:8d:75:41:b3:0c:5b:c9:56:42:98:31:c8:
fd:92:a5:f1:10:2d:bf:24:96:ca:6c:66:1f:a4:d6:5d:cc:da:
66:ed:8b:f8:85:d3:0b:94:41:45:85:7b:23:c7:82:11:9b:7b:
a2:78:a2:f2:68:53:9a:dd:68:6a:52:a9:5f:51:5d:03:8e:7f:
f2:51:a2:8e:e7:af:c1:c8:f9:f4:4d:51:c6:a2:5b:71:28:4d:
e7:86:2c:fc:d9:65:35:1b:28:ca:80:be:f6:41:e1:a2:3d:e2:
eb:bc:29:77:4d:23:b2:84:43:31:9e:bf:9c:f2:c9:df:10:99:
a2:69:11:9e:c6:65:e7:3e:02:c5:64:e0:94:9c:7b:b7:87:8e:
0b:8b:82:9b:4b:f7:eb:c5:3b:35:f1:7b:8e:73:6c:0b:b2:ff:
85:72:31:e9:34:ce:68:f9:64:34:51:20:f8:9e:e2:be:0d:62:
99:46:5f:ea:d3:2e:8a:d2:e5:c7:c6:a9:40:97:b4:56:de:fc:
be:fe:d6:b6:36:6c:a4:45:43:7b:79:38:b4:93:38:a4:db:f6:
6a:39:69:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:45 2026 by rpki-client