
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json)
Hash identifier: GYptdF+LMWkgt70HjWe6ZvDFelrsxrUoPUBmvJvkhv8=
Subject key identifier: 9B:AA:8F:A5:6F:49:9A:74:97:2A:F5:16:4F:F5:24:CC:E4:9A:10:CD
Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5
Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
Manifest number: 011A
Signing time: Wed 25 Mar 2026 04:59:44 +0000
Manifest this update: Wed 25 Mar 2026 04:59:44 +0000
Manifest next update: Wed 01 Apr 2026 04:59:44 +0000
Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: eicIIUsMXhjiQUagGz5KD8RbOu2dbLnAet9wf5LX2FQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl
rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5
Validity
Not Before: Mar 25 04:59:44 2026 GMT
Not After : Apr 1 04:59:44 2026 GMT
Subject: CN=69c36bc0-50a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:21:c5:79:24:fe:8f:7d:dd:40:25:f2:16:
04:07:a3:c7:e1:fa:e4:57:f9:96:4a:1d:2f:93:b5:
bf:56:4b:e1:a8:7a:db:31:b4:69:84:3a:a6:ed:7a:
cc:85:82:3a:fb:c1:a4:80:bb:47:87:bd:72:82:8b:
d0:d9:23:77:52:36:5c:31:b9:0d:fd:8c:a3:51:d0:
65:45:69:87:bf:c2:36:34:db:62:fd:90:9c:be:20:
d8:25:0c:4a:4a:08:b9:2a:f4:11:cd:69:25:0f:0c:
c2:46:3a:9f:87:dd:64:ed:ef:96:5a:8d:6d:46:b3:
a3:0e:de:9e:05:2f:42:f1:bd:ba:96:9b:e4:0c:39:
17:ab:16:a6:82:fd:87:89:2f:1c:91:7e:d6:1d:65:
df:ed:ef:6a:a3:b7:58:8b:83:2f:9b:d2:4e:3f:58:
da:7f:78:3f:a3:be:0c:09:ab:3e:82:02:05:62:b6:
f1:09:cf:55:9d:ff:d3:4a:64:5b:a6:a3:af:c7:10:
18:10:30:29:88:cb:ba:81:76:f1:1a:11:f4:cf:77:
c5:91:b1:08:e9:42:da:d5:4a:f2:7e:e2:29:94:af:
cb:3a:e1:06:88:6b:4d:ad:a9:ce:02:37:a1:a1:10:
84:45:e7:6c:d7:e5:02:a2:2c:ea:6d:77:2a:3a:86:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:8F:A5:6F:49:9A:74:97:2A:F5:16:4F:F5:24:CC:E4:9A:10:CD
X509v3 Authority Key Identifier:
keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:d1:58:ec:53:cc:f7:94:19:ce:8b:ef:af:73:c4:8a:1f:9e:
13:28:04:4a:12:80:42:fe:97:eb:e4:28:0b:d5:37:51:60:74:
78:7b:59:f6:96:b0:d5:4f:22:1b:8d:b7:b6:ce:04:0f:a8:c9:
b2:6e:e3:a0:e6:fd:c5:31:82:54:b2:95:23:ad:13:02:60:7e:
4c:c0:f9:06:d0:a3:e5:50:73:ac:e7:5c:0b:fc:2a:75:1e:d8:
ab:2d:23:ea:59:ad:2d:11:79:5a:8b:71:5f:71:fa:9f:76:44:
6c:53:93:d8:69:f6:11:24:ad:1d:df:38:16:cf:bd:09:8c:78:
38:dd:d1:0d:d0:27:14:07:e1:a2:08:d4:45:e4:d5:cb:b1:6d:
0f:f7:9d:d3:e6:c6:e8:d1:29:a1:18:ec:c3:3b:d9:f3:d1:98:
77:c7:fa:0b:0d:6f:4d:9f:75:e1:9d:d5:85:aa:5a:81:25:3e:
8d:59:f3:85:74:f2:b6:e5:2d:cb:d5:0b:a8:fe:fb:7d:09:24:
ca:5a:cf:c6:5c:91:78:1f:ec:48:16:d3:d0:11:46:33:8d:86:
0c:74:c3:53:07:08:00:cd:53:52:88:82:13:6a:42:b8:4e:64:
ff:81:25:64:45:2a:4c:fb:0a:fa:89:f2:0c:a5:28:2a:c7:4d:
e2:64:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:37 2026 by rpki-client