
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
File: zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json)
Hash identifier: eJbdNODfYG9BqFzVWE857+YtakijQZqP9GcCrfbQ4Cg=
Subject key identifier: A6:0D:C8:51:22:56:A0:AF:75:0B:D8:40:53:4A:B3:1B:1A:E4:F6:5A
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Certificate issuer: /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial: 0EEB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
Manifest number: 0EDA
Signing time: Tue 24 Mar 2026 17:31:08 +0000
Manifest this update: Tue 24 Mar 2026 17:31:08 +0000
Manifest next update: Tue 31 Mar 2026 17:31:08 +0000
Files and hashes: 1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: e4IuZ8c6P8Nzm/bswz28uGQgGxoQyM5RcdJ2qCrPycA=)
2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: TM/D4LHWNIZ9N9gTEfSEIkEH4FxQBGl0/P//YBmNd8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3819 (0xeeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Validity
Not Before: Mar 24 17:31:08 2026 GMT
Not After : Mar 31 17:31:08 2026 GMT
Subject: CN=69c2ca5c-1539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:c4:23:a2:fc:df:db:a6:ba:60:fc:0f:7f:
ac:ba:d2:12:f3:c6:15:0c:5e:8d:6b:98:e3:18:39:
ef:56:a7:d9:cb:a3:8a:2a:34:fc:b1:70:8a:f6:62:
58:50:8e:b0:8a:78:aa:91:83:c4:b6:0e:64:88:91:
60:c2:59:6e:32:c1:d8:d1:26:c4:67:d9:ab:15:14:
e8:e8:5e:ab:57:91:df:b5:12:fa:d6:aa:d4:75:ee:
e1:81:ce:c0:33:1a:4f:69:af:16:91:8d:d7:a2:5b:
81:dd:0c:5d:5e:98:9f:eb:62:47:96:78:91:56:da:
2d:a9:af:f0:04:d9:34:83:61:1d:fe:b5:32:f8:ed:
93:11:e3:60:ce:79:1a:7a:5a:f2:25:fc:a5:83:4c:
80:d9:9c:6c:d0:2c:f4:25:7f:dc:69:c0:16:f7:82:
31:26:1a:d0:a7:23:bb:e5:ed:dd:60:dc:b6:70:83:
cb:73:cd:6f:bf:4d:92:e1:52:57:3e:ff:49:89:d0:
83:cb:7b:20:9b:83:54:ed:ea:a5:95:f3:d8:29:7b:
ad:ee:e3:f6:f4:0c:be:b1:4b:0b:a0:6b:10:2f:7a:
e4:c8:70:45:25:8f:e6:50:8a:bc:9c:9f:8d:00:41:
0e:00:68:b7:d7:2a:0f:bf:5b:14:62:cb:83:75:51:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0D:C8:51:22:56:A0:AF:75:0B:D8:40:53:4A:B3:1B:1A:E4:F6:5A
X509v3 Authority Key Identifier:
keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:02:4a:e4:86:dd:26:76:a7:2f:55:3f:71:f0:a0:1b:14:74:
be:f0:c5:72:ff:8f:a6:e3:5f:8a:e0:2f:00:f7:28:aa:a7:5d:
f9:b8:e6:b9:a6:42:fd:a6:3e:91:d7:a7:9e:39:8a:62:03:0c:
5b:9c:d0:6e:e9:81:b3:f7:0c:41:73:3d:24:ad:75:d7:76:60:
f4:4e:68:2b:a1:9b:13:34:27:66:d7:0a:7e:72:62:60:60:a2:
fb:94:2f:8c:be:15:b5:3e:68:e8:ab:17:44:ff:ec:d2:50:49:
b7:46:e9:2b:59:08:f0:16:e7:f7:9b:73:58:bb:54:90:1c:03:
df:ed:8f:46:2f:fc:b3:7e:25:06:65:01:6f:21:9d:a3:6c:d9:
4e:8c:de:30:2b:75:f1:ef:4e:a4:45:39:a3:59:40:d3:93:97:
25:39:75:94:a3:59:d3:e1:c8:a2:22:9b:16:77:5f:05:95:dd:
0f:5d:1d:14:0c:2b:6b:dd:d7:2a:14:bf:64:a5:bc:dc:f3:06:
33:5e:09:81:47:3e:94:26:3f:61:48:57:db:11:f2:c3:3c:e3:
52:41:c0:41:3e:e0:65:9f:e4:67:bb:97:40:26:8d:2a:cb:c0:
67:7a:a5:9e:f7:02:cd:85:f9:65:61:88:ee:75:5c:16:98:4c:
61:f6:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:26 2026 by rpki-client