
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
File: zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json)
Hash identifier: RWn0tDsm/IkYzvr6QrJv9ilyF33TBJHRtuZBFWYPDm8=
Subject key identifier: 8E:71:27:EF:4E:0B:1C:D2:F3:63:F1:E2:11:29:74:03:B5:5E:99:F0
Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B
Certificate issuer: /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
Certificate serial: 03C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
Manifest number: 03BD
Signing time: Wed 25 Mar 2026 00:18:22 +0000
Manifest this update: Wed 25 Mar 2026 00:18:21 +0000
Manifest next update: Wed 01 Apr 2026 00:18:21 +0000
Files and hashes: 1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: 096lbTSiKRY8jhpYXwKOOUFpZGyO1bAaF8BkZBUtXMQ=)
2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: CQAaHQlUoziy3+k69fgN/Wsw5rtFHgLNTPy96hrXthw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl
rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
Validity
Not Before: Mar 25 00:18:21 2026 GMT
Not After : Apr 1 00:18:21 2026 GMT
Subject: CN=69c329ce-a5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:78:56:5a:8f:35:3c:59:85:44:94:5d:2c:
99:23:ee:62:c0:ef:08:be:d1:49:df:27:4b:a4:39:
49:29:24:1d:42:14:06:82:07:07:62:3f:7d:fb:d9:
ed:f7:e9:d6:56:96:c3:ad:f4:19:d7:55:36:4c:cc:
fa:25:96:6c:b7:db:00:f0:d4:ec:23:c9:4b:7e:ee:
57:48:52:5d:8b:23:50:90:bb:29:b8:d8:9b:0c:07:
14:e8:b2:22:35:47:68:c6:7d:67:24:37:e3:8a:0c:
dc:2e:61:22:55:b1:97:24:82:e3:bb:bf:ba:95:72:
7a:05:02:0d:89:e2:e6:39:dc:74:37:a5:cc:60:47:
2c:90:d5:5f:92:35:b2:b2:ca:cd:b1:72:32:ab:b5:
8e:69:01:ec:b8:fa:00:a5:a7:71:53:8b:e5:95:f1:
fc:65:80:07:9c:5a:04:7a:42:19:0d:65:36:74:8b:
56:0d:53:ab:82:f7:1b:8a:ba:59:b7:05:c3:23:a1:
bb:06:89:33:ba:06:17:8a:84:b8:02:2a:14:8d:17:
0f:a2:75:a5:c7:bf:3f:3e:fa:fb:21:2c:3e:38:67:
14:44:50:80:ed:f3:6f:63:ae:ae:ae:70:df:5e:b3:
06:a0:71:84:1f:d5:fc:ac:d8:fb:b3:67:49:c9:77:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:71:27:EF:4E:0B:1C:D2:F3:63:F1:E2:11:29:74:03:B5:5E:99:F0
X509v3 Authority Key Identifier:
keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:38:73:33:2e:cd:58:13:a7:60:d6:aa:62:e4:0a:e6:76:01:
3a:3b:24:4f:e8:32:02:b0:e4:a7:35:01:1d:8c:73:4f:24:b1:
b4:a8:5f:27:40:1b:16:ed:2f:12:8a:cb:18:ba:d9:46:40:d1:
53:91:93:22:63:82:d8:29:2f:eb:f8:de:e9:8e:61:c5:d4:97:
b8:b5:5f:95:ea:10:e5:da:35:bc:24:73:d4:53:ff:b5:54:9b:
83:0c:cd:5a:87:cc:9a:ce:d7:18:7d:50:95:1d:21:e5:fe:f3:
58:71:b8:54:1d:88:37:87:5c:ca:20:92:9a:38:d8:7d:40:40:
f6:47:7e:9c:46:66:e2:4e:be:4a:16:bb:3c:e0:26:b8:90:6c:
ab:b2:9c:60:53:95:13:b4:7d:62:aa:5a:75:7b:57:1c:8d:4d:
88:e0:48:b8:6e:01:21:44:9c:2e:97:e6:bc:b7:d2:37:89:91:
c5:66:d6:72:df:fb:0e:24:17:01:8a:1d:5f:19:74:8e:b1:48:
cd:9c:9a:2b:f0:75:51:61:7a:7d:48:3c:b9:b0:ec:ad:79:b0:
4a:da:64:2e:9b:c3:c6:9c:0c:4d:84:78:d7:a0:bd:e8:84:58:
e0:6f:b2:52:61:f4:9c:74:c6:b8:5f:31:6b:c4:66:f2:6a:db:
1e:a7:34:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:01 2026 by rpki-client