
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json)
Hash identifier: ChAURmAyyJ/yKcKU6mQ6HxctIvTIIJ5bFMJOzHj0iA4=
Subject key identifier: 85:A4:96:70:EE:BC:07:86:4E:67:5E:10:2D:77:12:A6:6C:EA:EE:BC
Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
Manifest number: 01FA
Signing time: Wed 25 Mar 2026 02:34:49 +0000
Manifest this update: Wed 25 Mar 2026 02:34:49 +0000
Manifest next update: Wed 01 Apr 2026 02:34:49 +0000
Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: mKs8bhp4UF2w/L+yBLxPtvxWQ40MpQXo+l/mJu8JwF8=)
2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 8y7hfK3jGDMBr1f4yhw0XCvK5AAMWqEEBB2+0ezh2M4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Validity
Not Before: Mar 25 02:34:49 2026 GMT
Not After : Apr 1 02:34:49 2026 GMT
Subject: CN=69c349c9-efca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:d1:45:99:70:66:5b:59:8c:77:a5:ab:8f:
1e:f8:8c:62:ee:2e:85:fa:b2:af:49:e1:ea:a3:2c:
0a:ef:bc:9d:9e:f4:25:22:59:1f:2f:1e:2c:cd:8f:
62:70:11:b3:fa:0a:60:8b:77:ed:7b:5a:99:4d:f4:
d8:85:5c:cb:2f:aa:a1:a3:62:79:bc:f3:28:5f:e9:
96:64:02:0d:3d:fc:9d:4d:38:07:db:fe:cf:cc:a0:
f2:1a:01:db:74:99:cd:8b:b1:82:93:6a:df:fb:d3:
a6:0b:83:eb:91:b9:3e:72:9b:de:7a:61:92:16:74:
7b:db:d2:73:9a:fa:9d:9f:f2:20:96:bf:7d:22:01:
a8:98:2a:27:71:f9:56:f1:35:67:b2:c0:57:72:73:
3a:9a:09:d5:c5:d2:d2:0c:15:2c:18:df:6d:86:b5:
b8:33:51:57:ed:86:07:51:43:5e:e0:0b:36:c2:8b:
87:f9:f2:44:69:0e:6f:74:ef:e7:e7:2e:69:21:12:
6a:d8:05:8a:fc:6e:3c:50:0b:0d:2b:60:39:7c:c1:
3a:00:d3:1d:cb:98:fd:98:0d:13:a8:fc:d9:34:da:
07:ac:b7:ae:14:06:e5:71:de:76:2f:d4:52:fb:13:
fe:6d:7b:7e:13:1e:3c:49:d5:31:84:1e:22:dc:7b:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:96:70:EE:BC:07:86:4E:67:5E:10:2D:77:12:A6:6C:EA:EE:BC
X509v3 Authority Key Identifier:
keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:69:6d:ae:9d:7f:47:55:3f:62:80:db:6f:63:bd:b3:8d:a0:
32:3e:fe:45:8a:77:6e:85:93:f6:65:75:57:9c:57:a0:4a:97:
a9:99:59:c2:6a:fd:55:82:2a:78:83:ba:f5:ae:06:e6:63:24:
75:bc:dc:f7:17:99:de:ac:d3:c9:3b:b1:b4:8e:68:17:c4:46:
2f:00:8f:a7:de:09:1a:7c:bc:48:27:cc:4b:28:38:b1:d9:1a:
15:c5:b7:19:40:6d:92:10:a5:09:bf:f2:7e:d4:fd:e2:53:dc:
96:6a:b0:99:bd:c9:31:b8:76:88:d0:96:8a:11:5a:3a:9c:bc:
a5:5a:41:a2:d7:35:9d:c7:b4:15:bb:13:83:a5:1f:5f:06:2d:
be:db:18:c1:03:7f:aa:67:89:ea:30:22:cb:6f:f2:27:d9:0a:
af:6b:36:0b:19:d0:57:16:2c:5c:f0:0d:65:ae:fd:84:0b:2a:
a8:24:67:19:47:08:42:18:0e:9c:e6:fc:6a:b2:e8:ad:07:bf:
13:32:66:23:da:da:76:70:aa:98:a7:5e:5f:f4:37:4e:88:1b:
00:e4:2e:4b:cc:6b:5b:be:1c:98:fd:93:66:51:ca:bc:8b:99:
df:ed:7d:4d:ae:59:f5:cf:e4:b3:13:04:de:d3:fc:ff:a3:f7:
2f:78:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:32 2026 by rpki-client