
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json)
Hash identifier: Dqaha3OpaMq7L4hipbjSdtrNm+SZgkHVGjP9dSZWm8o=
Subject key identifier: 27:96:06:52:DE:A7:0B:95:FC:15:67:EA:0D:A6:89:1C:5D:68:F8:21
Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
Manifest number: 01A4
Signing time: Wed 25 Mar 2026 03:42:12 +0000
Manifest this update: Wed 25 Mar 2026 03:42:11 +0000
Manifest next update: Wed 01 Apr 2026 03:42:11 +0000
Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: 3YSmDWg45xfiXxjvZbBSsk96wl4lnXproiC74rduZlI=)
2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: UHApmas+hTdDUlF2H9mpnUy31ic+ROSnLqaHdClEfoo=)
3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: d522JtU7ofK+iHBHN7f6Uf/7SL+MFyqmrLpi0e3t3i4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Validity
Not Before: Mar 25 03:42:11 2026 GMT
Not After : Apr 1 03:42:11 2026 GMT
Subject: CN=69c35994-8642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:08:0a:c9:65:21:aa:ce:86:a0:55:1e:fd:
67:a5:f2:49:27:58:5e:a9:42:70:a1:38:9a:f6:4c:
d0:f8:53:ce:dd:aa:55:1b:38:6b:d8:e2:ab:b4:3e:
16:83:ae:06:89:fe:40:1a:11:46:7a:95:fb:5f:75:
ad:30:d3:23:66:48:51:4c:57:0e:06:f4:33:61:6b:
c5:28:a2:11:69:2b:50:d5:39:e5:b3:4e:9e:f8:10:
0f:64:9f:97:e6:b9:00:8b:53:16:70:29:f9:52:3a:
19:36:f1:4d:4a:b4:5a:72:6b:82:95:49:66:e5:8f:
fa:e6:e0:0d:1e:83:25:71:94:27:86:69:3c:9e:89:
a2:ee:9a:9a:5f:6a:6e:5e:99:25:4b:1c:dc:93:ed:
78:90:81:be:77:4b:ec:42:fc:e9:da:03:e5:30:80:
7b:4b:46:78:55:47:55:db:21:6d:d0:cd:1d:7d:8f:
4b:1b:cb:c7:cb:16:22:b8:1a:02:ba:4e:e2:66:5d:
94:96:53:7e:e1:da:c8:a3:f3:af:f5:8c:fa:a9:c4:
01:64:50:e8:bf:19:3d:b1:35:0d:9f:7e:44:21:58:
b6:85:df:68:e5:1d:f1:e1:9c:11:79:45:60:03:93:
95:40:be:07:af:2a:ff:9f:a3:04:39:d1:5b:d9:04:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:96:06:52:DE:A7:0B:95:FC:15:67:EA:0D:A6:89:1C:5D:68:F8:21
X509v3 Authority Key Identifier:
keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b8:4d:ea:c5:28:b3:bf:c6:54:de:66:ea:11:8e:c2:ef:e1:
83:8d:96:4d:18:1c:33:98:2c:3e:f7:b5:bc:8c:f9:24:14:91:
93:04:8d:66:47:b2:bc:6b:b7:d7:83:7d:93:1e:09:bd:0c:70:
63:b8:41:ff:23:12:a1:c7:6f:8c:3f:aa:6b:fd:77:13:22:64:
3e:df:b9:69:50:32:92:42:4e:d6:a5:24:61:78:9a:50:36:45:
bb:12:e5:e9:69:6e:91:cc:52:1c:f9:f4:42:fa:d3:64:0a:d4:
49:d6:7b:68:1c:2b:ea:c1:d7:56:c8:c5:d0:2a:71:1b:b1:4d:
8d:86:55:9b:c4:af:d3:6f:f5:98:43:ff:f9:ac:03:7f:ce:42:
40:6b:10:eb:5f:e0:8b:4d:d2:0d:0e:7e:b2:11:1c:25:3a:a5:
b2:04:31:e5:71:6e:ba:23:ea:c5:3b:eb:ac:27:e7:0e:ba:72:
89:d1:6e:66:41:85:a4:32:d2:8b:5a:d7:f1:5c:8b:8f:65:d0:
d2:0c:84:3a:e7:12:f5:2b:6b:71:2f:df:9a:30:a8:0e:d7:a3:
06:ea:a8:f4:07:43:57:c8:a0:4b:90:e0:c7:97:55:28:de:60:
08:a5:92:34:4f:4a:9d:e6:58:bc:f2:31:82:8b:1c:94:8a:c0:
07:ce:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:12 2026 by rpki-client