
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json)
Hash identifier: +9jIIrLtIkmVMmyyEy3mYgNdb7HH/OMADK3HWz1iBB8=
Subject key identifier: 82:A9:C6:C4:B9:D5:04:FA:68:CE:65:6E:78:AF:43:0B:27:B0:21:BB
Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Certificate serial: 0ED8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
Manifest number: 2B85
Signing time: Tue 24 Mar 2026 16:48:22 +0000
Manifest this update: Tue 24 Mar 2026 16:48:21 +0000
Manifest next update: Tue 31 Mar 2026 16:48:21 +0000
Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: IIjOlrJZTnddSt2QK58nDjFlHJ47VC70FVBfSgLPhNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl
rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3800 (0xed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Validity
Not Before: Mar 24 16:48:21 2026 GMT
Not After : Mar 31 16:48:21 2026 GMT
Subject: CN=69c2c056-b850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:32:2c:9e:03:b8:ec:dd:8c:50:5a:15:8f:
38:ed:25:be:ed:5d:93:f1:f1:31:e8:8d:b3:dc:23:
23:a6:de:a9:4f:3a:8d:2d:2f:9d:53:dd:fb:7e:fb:
45:74:26:10:a0:99:ee:7b:28:6e:30:f3:ad:45:49:
fd:3e:b4:ee:16:35:ea:66:c6:2e:1e:3b:05:05:9a:
02:ca:49:00:f4:38:80:0e:e5:5f:ee:04:ec:0b:f2:
1a:55:2e:12:17:8c:09:74:0f:34:f8:e9:20:ba:a1:
35:50:a4:42:ab:1b:ee:31:2d:9b:47:a2:ca:89:35:
f8:80:4e:e6:ec:b4:bb:1d:20:79:b2:5d:42:32:59:
ef:8f:ad:44:2d:e5:22:f2:01:57:61:59:98:b5:39:
59:17:33:96:fe:b7:07:28:3b:c8:23:38:10:2e:7a:
67:35:41:4a:b3:1c:63:13:a0:e9:0d:f4:53:6f:19:
1e:47:ee:e9:0e:89:87:14:2a:f9:74:cd:57:d3:87:
e1:fc:4d:9a:c2:28:47:da:48:7b:e4:4e:3e:18:ef:
d4:ab:fc:c7:ce:87:0b:a3:f7:e2:1b:5b:a6:0a:27:
fc:c7:f0:a8:34:6e:cb:41:2c:d4:48:16:2d:79:b8:
a1:24:e0:15:2a:04:17:16:ad:c1:ac:51:56:cd:ed:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:C6:C4:B9:D5:04:FA:68:CE:65:6E:78:AF:43:0B:27:B0:21:BB
X509v3 Authority Key Identifier:
keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:85:d1:21:d1:ce:48:88:ec:28:c1:37:6b:9b:b0:cd:71:4d:
45:4e:df:e0:71:1a:3e:0a:3d:ed:f2:37:00:ed:52:90:32:ea:
7c:8b:8b:f3:ee:31:5e:b8:cb:5b:97:4d:9c:c0:87:b1:af:e7:
52:17:4a:2e:4e:a8:c6:07:67:da:48:ca:1d:0b:51:b9:11:ff:
be:9e:18:a1:14:17:1f:4a:06:5f:e4:9f:bf:bf:df:e9:5b:fb:
0b:f8:69:2d:0f:a5:b6:a7:be:0c:61:c0:e3:68:6a:b1:91:de:
ae:25:5a:ae:ae:30:e1:77:9b:4f:2c:71:05:ee:e8:0d:ba:14:
4e:7a:d4:1c:56:12:ea:68:bc:02:e2:10:19:7f:e7:60:12:9f:
76:0d:43:d6:0b:31:1b:4f:c4:b0:75:50:8a:e1:7b:72:b4:34:
dd:d0:54:66:04:53:ce:c9:28:4f:a0:28:40:5e:ae:ac:34:14:
db:b7:22:34:4a:60:5e:09:cc:2e:ef:9b:d9:eb:bf:fe:4a:8f:
28:4b:2c:c8:66:43:6c:49:69:b1:5b:d1:4e:4b:be:be:a1:58:
33:0b:ff:53:4e:88:05:2b:da:9a:2e:8b:84:f9:71:eb:0f:69:
f7:87:08:b2:c6:20:da:46:f5:b8:d6:65:98:35:d8:06:40:9d:
60:c4:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:30 2026 by rpki-client