
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier: 6trnIQ8TGQeRwitnq166GkQDYcCipcRufK9Wi4yCJHE=
Subject key identifier: 3F:56:41:D2:5B:27:B3:F4:D1:82:78:83:65:AD:56:46:0A:AE:6D:EC
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number: 8D
Signing time: Wed 25 Mar 2026 06:51:35 +0000
Manifest this update: Wed 25 Mar 2026 06:51:35 +0000
Manifest next update: Wed 01 Apr 2026 06:51:35 +0000
Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: X8ajRrAJmnSGOcji/VwJN0oOdgVajrwgwN9gw1/pURA=)
2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: BxOM7SgqdGJtQ0VBZeNqfMKq52lRmXi/Ew1Q7dVeV+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Validity
Not Before: Mar 25 06:51:35 2026 GMT
Not After : Apr 1 06:51:35 2026 GMT
Subject: CN=69c385f7-4696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:08:91:ed:7e:54:03:fe:21:cf:d8:48:e1:
0b:13:c1:0d:c1:28:86:44:12:21:32:67:69:6c:0e:
70:6d:05:e8:2c:d7:63:1e:07:9b:20:95:64:2f:5d:
c8:94:cb:a3:09:de:4f:fc:13:1c:11:9b:d3:ce:98:
32:3d:92:45:73:2a:ea:a0:48:6e:64:3f:f7:26:8b:
e9:4f:85:b3:9d:b8:02:b9:5d:23:ad:cf:5c:b3:65:
a3:b7:b2:70:b9:2f:ea:58:c8:57:a6:42:5d:61:af:
a8:6f:02:b4:88:66:b9:61:98:8d:6d:ce:a3:17:33:
6f:d1:1d:42:e1:c1:88:bd:1b:b5:40:9e:67:5a:7d:
e9:c3:f9:4a:63:57:2f:76:8b:d0:6d:a1:54:d0:74:
56:84:d2:e2:49:39:c2:e7:26:e0:e7:b7:aa:d5:ae:
27:7b:4c:2c:a8:db:a8:46:73:c3:b0:5a:0f:49:b0:
1e:ce:62:8d:cc:80:0e:34:8e:78:f0:69:5b:d7:6e:
60:fd:cf:46:2d:28:37:b2:75:17:de:fe:ca:ec:03:
28:0d:8c:6c:16:73:25:a4:c2:ea:ab:8d:88:0d:01:
71:40:ac:89:17:a7:e7:6c:ac:86:92:a3:58:ac:69:
88:3e:ef:c1:bf:c0:f7:f2:f7:18:ad:18:ee:ca:a9:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:56:41:D2:5B:27:B3:F4:D1:82:78:83:65:AD:56:46:0A:AE:6D:EC
X509v3 Authority Key Identifier:
keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:b3:7c:6a:63:ff:0d:23:c2:2a:cf:7f:22:01:de:7c:8e:fd:
fe:5d:b1:1f:5d:df:e2:01:05:be:52:64:5f:90:40:ce:c0:05:
45:92:3f:08:ec:b6:b8:cb:99:4e:a5:53:c1:be:ce:74:bb:17:
4d:a7:f3:a4:01:9b:f2:c3:2a:71:bd:a0:94:4a:27:67:02:82:
e6:10:ca:d3:2c:23:e4:b5:c1:a6:5c:cc:e1:ed:0d:6d:48:fe:
c4:cb:6a:f8:c6:ec:02:60:04:5a:62:bf:56:e0:b1:7c:ad:03:
a3:27:5b:12:b7:a1:12:15:ea:4d:f7:f2:73:3a:c4:2f:97:79:
33:82:6a:b1:78:8c:72:90:8b:4b:9e:b0:1b:f5:5b:38:97:fb:
70:3f:2d:55:c3:6a:b5:c6:ce:2e:1a:09:91:4f:17:f0:b1:bc:
c4:f2:45:d1:1b:3b:65:4a:11:61:b6:09:4a:5f:cf:2d:79:24:
92:72:11:32:54:d3:bf:bd:05:4f:e5:a9:2c:1a:95:9f:7e:a2:
3d:f1:c0:10:17:fa:a9:fa:5a:6b:83:38:68:39:7b:ee:43:ca:
a6:88:1d:cc:23:92:02:a8:a4:db:1b:8b:b9:4e:ca:b5:a1:89:
23:22:78:e4:72:c5:67:73:29:4c:7a:c6:0b:de:64:82:93:68:
c0:d9:d1:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA5NjExMTAvBgNVBAUTKDY2MzI2Q0MwNjg1QTM3NjM2QTQ1QkM3MDk0N0MyMTlE
MEI1Q0NDNjAwHhcNMjYwMzI1MDY1MTM1WhcNMjYwNDAxMDY1MTM1WjAYMRYwFAYD
VQQDEw02OWMzODVmNy00Njk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA424Ike1+VAP+Ic/YSOELE8ENwSiGRBIhMmdpbA5wbQXoLNdjHgebIJVkL13I
lMujCd5P/BMcEZvTzpgyPZJFcyrqoEhuZD/3JovpT4WznbgCuV0jrc9cs2Wjt7Jw
uS/qWMhXpkJdYa+obwK0iGa5YZiNbc6jFzNv0R1C4cGIvRu1QJ5nWn3pw/lKY1cv
dovQbaFU0HRWhNLiSTnC5ybg57eq1a4ne0wsqNuoRnPDsFoPSbAezmKNzIAONI54
8Glb125g/c9GLSg3snUX3v7K7AMoDYxsFnMlpMLqq42IDQFxQKyJF6fnbKyGkqNY
rGmIPu/Bv8D38vcYrRjuyqmi2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9WQdJb
J7P00YJ4g2WtVkYKrm3sMB8GA1UdIwQYMBaAFGYybMBoWjdjakW8cJR8IZ0LXMxg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk2MS84RTU5OTZDNDYw
M0QxMUYwQjE1MDVCMjFDNEY5QUUwMi9aakpzd0doYU4yTnFSYnh3bEh3aG5RdGN6
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDk2MS84RTU5OTZDNDYwM0QxMUYwQjE1MDVCMjFDNEY5QUUwMi9aakpzd0doYU4y
TnFSYnh3bEh3aG5RdGN6R0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ7N8amP/DSPCKs9/IgHefI79/l2xH13f4gEFvlJkX5BAzsAFRZI/COy2uMuZ
TqVTwb7OdLsXTafzpAGb8sMqcb2glEonZwKC5hDK0ywj5LXBplzM4e0NbUj+xMtq
+MbsAmAEWmK/VuCxfK0DoydbErehEhXqTffyczrEL5d5M4JqsXiMcpCLS56wG/Vb
OJf7cD8tVcNqtcbOLhoJkU8X8LG8xPJF0Rs7ZUoRYbYJSl/PLXkkknIRMlTTv70F
T+WpLBqVn36iPfHAEBf6qfpaa4M4aDl77kPKpogdzCOSAqik2xuLuU7KtaGJIyJ4
5HLFZ3MpTHrGC95kgpNowNnRMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:36 2026 by rpki-client