
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json)
Hash identifier: 3D9bvAAuad2FRY+7cK97WtH4gXZa5dl33WLFKthGRtE=
Subject key identifier: 2B:B4:B6:18:91:53:79:1A:CF:63:76:0B:B4:DB:51:B0:5F:83:A0:B5
Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
Certificate serial: 0C73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
Manifest number: 0C65
Signing time: Tue 24 Mar 2026 18:30:54 +0000
Manifest this update: Tue 24 Mar 2026 18:30:53 +0000
Manifest next update: Tue 31 Mar 2026 18:30:53 +0000
Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: HEbSvc2mDE+9NJO/4eIWynUjYYw82JuZjVNyK27tHzo=)
2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: v3KWCKQioly5U45019IwNwKf+DqRI3FGebku0Ww86z0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl
rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3187 (0xc73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
Validity
Not Before: Mar 24 18:30:53 2026 GMT
Not After : Mar 31 18:30:53 2026 GMT
Subject: CN=69c2d85e-1ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:35:4d:dd:20:6a:9d:82:69:9d:aa:ae:13:4c:
41:b8:67:63:93:2c:f6:a0:9c:c4:1a:15:ad:f7:08:
98:1d:26:b4:a0:c5:aa:f3:43:c3:22:00:df:49:f9:
c0:10:11:a7:c8:b2:43:94:1d:27:49:09:14:71:d7:
43:80:00:5e:f4:ae:f6:39:c3:9a:7e:75:9e:3c:63:
27:94:c8:a6:f9:f9:10:ba:63:1c:b0:94:08:ef:c1:
f6:a6:b1:d1:dc:26:63:5f:09:d9:45:a7:05:1a:e6:
12:1c:c9:6b:b8:01:4f:c9:73:53:aa:a1:d7:08:38:
de:ce:da:02:68:9b:26:61:dd:a1:d4:f6:6a:8c:91:
41:58:1b:b0:fd:55:3b:1a:89:85:3d:9b:1d:ff:ce:
aa:a2:d2:82:93:98:c5:c0:7a:29:13:67:c0:d8:2e:
c0:a2:b9:5a:09:6c:25:4b:a3:7b:9c:cb:70:46:8b:
ce:3c:f6:35:ef:e4:e0:f4:7a:58:44:f3:88:83:1e:
09:bb:b0:fc:9b:56:22:cf:e0:a4:6c:56:f4:fe:7c:
c5:2b:55:43:23:67:f1:0d:85:09:52:98:ba:2b:23:
6b:58:af:9f:08:16:e5:8d:26:7a:6b:bd:c7:ae:a5:
a5:7d:fe:c3:43:b7:0f:54:2a:35:97:a0:76:86:25:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:B6:18:91:53:79:1A:CF:63:76:0B:B4:DB:51:B0:5F:83:A0:B5
X509v3 Authority Key Identifier:
keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:cc:44:38:62:87:8d:b0:d4:cd:8f:d8:b5:5f:b2:9a:0d:d0:
61:a8:26:19:69:c4:50:42:02:ba:63:e7:dc:5a:8e:59:93:6e:
7f:e1:73:9c:2c:e5:51:86:e8:89:4d:36:9d:21:6d:29:b3:07:
fd:41:8e:26:34:b8:8b:c3:7a:40:18:aa:67:29:cf:6a:e0:71:
9a:76:ae:d6:8a:64:1f:d3:a9:4b:2b:14:bc:a3:e9:51:58:d4:
7b:df:c7:17:75:eb:3c:2b:74:a6:73:3e:cd:e4:fb:6f:1a:93:
cb:41:87:d6:06:0d:32:36:a8:f2:69:8c:e0:9d:1c:66:2b:dc:
71:b9:a5:51:cd:25:47:8e:9b:71:15:66:3d:8a:dd:33:e9:17:
a2:e0:2b:0a:56:d3:ed:81:88:86:28:dd:60:bc:c9:88:9b:3c:
9a:25:56:de:13:65:a9:36:d4:9c:da:92:48:fb:e9:df:24:28:
6d:76:8b:de:51:50:0c:8e:e4:35:45:ae:5a:48:98:cb:f8:2c:
2e:5c:1c:df:6c:28:8f:fb:d9:bd:61:d1:6a:81:5d:0d:f1:7c:
69:b0:e8:4b:f2:3a:02:42:66:1e:85:e2:ba:18:ab:9c:c9:45:
a9:58:36:e7:97:3b:47:67:0a:78:8a:df:74:23:ee:ba:20:01:
a7:c8:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:50 2026 by rpki-client