
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier: KCinSVPTFhw+KWOZGNTbj9vsD7pD/24d4pUpGBSQiuE=
Subject key identifier: B7:60:0D:4C:24:CA:99:2D:A1:3C:E1:2A:C7:14:F1:86:A4:2E:8B:C1
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number: 0260
Signing time: Wed 25 Mar 2026 01:36:59 +0000
Manifest this update: Wed 25 Mar 2026 01:36:59 +0000
Manifest next update: Wed 01 Apr 2026 01:36:59 +0000
Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: v5LbdLgbq31i3axVFrk5joIOjoXFcNKn3+owheWkMOQ=)
2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Validity
Not Before: Mar 25 01:36:59 2026 GMT
Not After : Apr 1 01:36:59 2026 GMT
Subject: CN=69c33c3b-c55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4b:80:47:a4:55:84:2d:2a:f4:84:9d:6d:39:
c6:99:8f:98:c7:3c:04:d3:57:6b:57:15:7c:07:78:
7c:92:51:47:a8:09:5b:88:1f:0a:dc:02:6c:d9:c4:
ce:42:86:1b:21:78:e1:3b:d3:c2:cf:1c:01:4f:59:
21:e8:9b:29:20:36:2f:fe:34:2e:dd:d8:32:78:43:
bc:ae:45:18:7a:92:95:d8:7a:17:ea:c5:aa:f3:7b:
f1:62:7b:0d:9b:41:7a:ff:14:ef:29:1f:55:04:21:
c7:9d:9a:58:fc:3b:de:65:95:a3:af:f3:a8:36:8f:
51:5e:c4:a8:87:bd:90:26:c5:43:c4:97:a9:ac:db:
b7:e1:48:12:19:7e:97:d7:4a:41:3f:bd:c1:b8:1f:
c3:0b:35:f6:5d:c0:7f:84:2e:08:75:53:06:15:25:
44:12:6d:86:01:2d:9e:c9:ad:61:46:63:ab:1f:cc:
f1:e3:08:21:53:0e:92:4d:e2:bd:f8:ed:2e:f3:b4:
7a:c2:2c:8d:e4:84:84:7c:b2:30:23:3a:3d:0f:50:
6c:7f:22:6a:f4:4d:c9:31:69:cf:6b:b6:6f:9c:eb:
7a:58:7d:8e:97:76:29:68:1e:f6:a2:1e:95:26:f6:
26:ff:d4:6a:e7:67:e9:a3:65:87:6c:14:e4:8a:06:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:60:0D:4C:24:CA:99:2D:A1:3C:E1:2A:C7:14:F1:86:A4:2E:8B:C1
X509v3 Authority Key Identifier:
keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:78:6e:54:8c:b9:cf:db:6f:ee:dc:a6:23:b1:c9:3e:39:48:
f7:ed:4f:14:4a:7e:7a:b6:5b:61:a8:08:8e:b7:9b:5f:6e:5b:
ef:c6:27:7c:38:2d:d9:81:c0:3a:1d:9d:70:d0:56:70:fe:5f:
7b:c6:b4:ce:b2:26:90:cd:47:5c:62:65:3c:3a:56:57:f9:3c:
fd:d8:f6:a7:1b:ff:c8:25:45:b3:f7:5c:0f:57:bf:43:a3:c8:
d2:aa:78:b5:3d:8e:ef:b9:0a:20:9c:96:30:05:00:b5:82:89:
59:75:48:78:45:e9:64:e2:2f:a4:48:b5:a4:64:c3:9b:d0:11:
00:27:9c:13:49:a7:69:ac:bd:d5:67:bd:99:87:8d:ee:32:ef:
4d:3f:51:69:dd:e5:ff:04:9e:1b:2c:39:6d:59:d1:ca:6c:b1:
ae:91:6e:a4:70:eb:6f:f2:80:46:29:cc:07:31:30:0f:2a:d1:
46:41:f7:af:d8:5d:41:af:d5:ad:8f:8a:8c:9f:95:c1:f1:56:
aa:e0:f6:24:cb:74:c3:f2:8c:09:bc:6a:2e:a9:1e:90:91:1e:
a0:fd:5f:0b:5c:c6:37:28:55:18:86:4f:ae:f5:80:ee:79:7a:
fd:04:db:5d:03:58:f1:95:8f:41:4f:d2:39:4c:dd:79:cc:60:
81:74:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:26 2026 by rpki-client