
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json)
Hash identifier: oNZdVD/KQ0KxEzSx9XTGHKIRn+5mSWLrjRQAWTb2ieU=
Subject key identifier: 9B:B8:D4:FE:DD:E6:43:4B:AC:08:BA:B1:CD:9B:74:47:B5:28:44:DF
Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Certificate serial: 0515
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
Manifest number: 050A
Signing time: Tue 24 Mar 2026 23:20:14 +0000
Manifest this update: Tue 24 Mar 2026 23:20:14 +0000
Manifest next update: Tue 31 Mar 2026 23:20:14 +0000
Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: a1sD8RZ5q2w6K2YmXiwvMF/aJnsL1S5W9uZHOr/UfHk=)
2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: k7pNWs8rxOIJwQwNSf++pyf5UhHis3rC6IchuHrW/pQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1301 (0x515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Validity
Not Before: Mar 24 23:20:14 2026 GMT
Not After : Mar 31 23:20:14 2026 GMT
Subject: CN=69c31c2e-1305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:e3:20:9b:89:d9:69:f8:9f:37:cf:4d:f3:
63:e5:40:31:00:0a:d4:f7:b6:f9:6d:b2:64:7e:86:
24:9b:a7:3c:d4:04:c6:08:ff:ed:61:ab:a2:17:14:
0e:31:8f:5c:1c:dc:36:be:16:2f:37:4f:b6:82:0e:
78:ae:28:d5:60:eb:69:0f:0c:d4:b0:c6:a1:16:4f:
37:08:4b:b5:46:a4:f3:f1:2d:e7:40:cb:66:65:ae:
b1:0a:64:d1:bf:35:52:27:62:e1:11:27:5c:1b:ab:
ca:fe:be:e4:32:0a:56:7d:ae:bc:ff:da:79:47:69:
16:dc:f8:0e:f5:f2:88:70:e4:d5:30:31:cd:26:87:
7f:ea:0f:5a:25:18:18:26:3c:31:6c:66:c8:30:8f:
b2:03:18:ba:6e:19:4e:98:b3:aa:e1:0c:0e:31:e4:
f4:78:c3:e1:b7:02:a4:4e:05:1e:4f:aa:cb:36:27:
63:d6:4d:90:49:90:cf:65:42:c7:02:db:33:d0:dd:
25:32:42:e6:77:a9:09:44:10:cf:5d:4d:6b:fb:46:
4b:66:d1:93:07:05:71:5a:03:35:ee:b3:6d:13:c5:
35:3b:11:b8:ee:f5:c6:4e:4e:db:5a:e1:73:8e:96:
ab:ec:30:41:92:6e:6f:65:77:93:9f:fa:96:b0:1f:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B8:D4:FE:DD:E6:43:4B:AC:08:BA:B1:CD:9B:74:47:B5:28:44:DF
X509v3 Authority Key Identifier:
keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:a6:0e:2b:90:22:99:4d:00:1e:72:74:a7:94:5f:6e:b0:74:
6e:69:2d:c8:fd:06:00:fc:5d:19:1d:ca:f9:43:59:00:52:0a:
2f:bf:4f:fb:81:6b:d1:6d:46:76:42:99:12:3b:68:9b:b5:f1:
4c:cc:36:e6:57:3f:84:86:8e:3d:95:4d:f9:da:cd:5d:09:8d:
e7:1d:79:db:86:67:4f:d6:2b:2c:45:2e:30:e5:1d:f3:75:a0:
0e:1e:6a:85:7b:b5:09:8f:af:04:d4:1a:6b:8b:36:f5:8e:ea:
22:39:40:bf:ca:71:2f:2a:71:3f:43:db:63:8a:e6:68:02:12:
f4:0f:1f:2c:6d:c9:d1:e5:43:f8:3a:0f:23:2f:47:79:cd:a9:
95:fc:ff:9c:5e:3c:2d:f9:47:a6:e7:d2:3b:5e:e0:fc:4d:ae:
6e:b8:8b:b8:97:32:8d:b4:b8:b8:9e:57:fa:35:c4:25:31:df:
5f:80:df:9e:a6:22:ed:07:7a:b2:90:6b:48:92:f0:b6:a8:7f:
8f:69:fe:3f:72:8d:91:8e:e6:3a:a4:65:9e:40:fb:4e:57:de:
5d:a6:62:0d:d5:b0:f5:17:90:e6:f6:ee:9d:e7:ec:df:55:30:
6f:4f:f9:10:7c:a2:b9:52:09:ff:63:8e:5f:2e:7f:e1:7e:b4:
6d:ec:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:10 2026 by rpki-client