
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json)
Hash identifier: uecVHNlrG3GYnTNRU/6MiiNhYKU2mQlsU5T1+1Gm3kM=
Subject key identifier: 36:DB:71:61:A1:37:ED:8F:54:5F:49:44:53:73:B9:F9:89:BC:E7:72
Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
Certificate issuer: /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
Manifest number: 4E
Signing time: Wed 25 Mar 2026 07:30:11 +0000
Manifest this update: Wed 25 Mar 2026 07:30:11 +0000
Manifest next update: Wed 01 Apr 2026 07:30:11 +0000
Files and hashes: 1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: GfFSIDQ1hp2/S6UqPJA8BqMjisMCtRYXKg0UE81I700=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Validity
Not Before: Mar 25 07:30:11 2026 GMT
Not After : Apr 1 07:30:11 2026 GMT
Subject: CN=69c38f03-2f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:a7:7c:7e:96:4c:5e:36:44:24:be:d3:93:
c7:b6:77:2b:53:d8:2d:21:03:f8:ae:6a:9c:0e:dc:
71:88:e4:95:7d:1d:b4:2d:39:79:93:ba:19:2a:5f:
84:92:d3:71:c3:29:e4:ef:b9:cd:e7:8c:37:f5:6d:
a6:40:72:c9:07:c8:ce:68:d6:c4:b0:8c:9a:96:da:
0b:45:62:f0:cf:1d:17:f4:64:7e:b2:67:a8:2b:f7:
84:84:59:c4:71:c1:4b:9e:18:dc:89:38:7e:cf:0d:
e1:14:74:03:7c:06:94:13:5a:26:6b:fb:15:8e:eb:
c3:63:47:9c:00:82:62:f5:d0:70:88:42:c1:9f:ec:
46:9b:9e:d1:69:8c:ad:13:80:e3:d6:60:77:38:a9:
8c:e0:2f:f8:e3:b6:03:b2:e5:9b:fa:b3:b5:cf:53:
16:d9:2a:f9:48:bb:10:95:9e:bc:a9:92:e6:a1:cc:
aa:60:89:8a:a2:8f:79:f9:ee:97:da:56:75:25:bd:
1a:8a:d1:50:e0:7d:9d:5a:6e:93:2d:4c:55:94:18:
3f:53:58:4b:39:4c:57:ac:76:9a:3e:f2:de:a8:6c:
f6:ac:d3:61:35:39:66:6a:68:d4:84:91:4f:43:d2:
e7:be:53:8b:84:b4:da:16:9f:98:3c:06:64:86:92:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:71:61:A1:37:ED:8F:54:5F:49:44:53:73:B9:F9:89:BC:E7:72
X509v3 Authority Key Identifier:
keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:12:cc:14:a8:76:ea:3f:9e:1a:fa:70:3c:a0:2d:8a:b8:88:
d9:6c:d1:3d:5a:b3:6b:b2:f9:52:65:36:19:f6:86:51:a9:e9:
a4:fd:e2:80:f8:49:c0:e7:93:99:09:57:d3:03:36:46:8d:18:
56:3b:2f:c6:74:ff:54:bd:38:08:87:0f:70:d3:de:ec:4d:3b:
36:58:4b:2c:31:d1:1b:61:d1:f9:47:84:46:fd:ea:df:c6:56:
db:8f:58:18:e7:e6:2b:35:b0:43:65:d7:48:56:8d:ae:57:cd:
a0:b2:74:ef:23:df:6b:27:99:23:d2:c7:d2:80:1b:0d:b0:a0:
e0:ff:7b:48:ac:2f:15:3b:c0:7d:9c:67:9e:c5:9c:0c:19:b5:
88:8a:18:19:9e:da:74:bb:53:20:c5:d1:cf:9b:45:84:aa:4f:
bc:cd:fa:6f:3a:3e:b9:71:b8:f5:50:34:ce:df:80:43:84:96:
c5:9e:1e:3d:6c:c2:f1:3c:9a:36:c6:fe:d3:bb:e4:63:fb:12:
81:a4:8f:24:99:75:fb:9b:00:08:27:49:b5:27:88:db:10:b9:
26:6e:f1:06:7d:3c:24:72:65:df:ef:39:0f:c6:03:96:aa:08:
58:03:e2:c0:e9:3e:17:e5:a8:79:3f:66:d3:2d:ff:51:26:2f:
4a:e8:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:27 2026 by rpki-client