
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json)
Hash identifier: o5tuRX+M4K2sTgwi/SdVLZyWomdC+LsM90k995v/MVk=
Subject key identifier: ED:4B:66:88:B9:FA:43:C2:FE:1C:41:41:A4:57:03:72:37:1F:9C:00
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
Manifest number: 0135
Signing time: Wed 25 Mar 2026 04:44:57 +0000
Manifest this update: Wed 25 Mar 2026 04:44:57 +0000
Manifest next update: Wed 01 Apr 2026 04:44:57 +0000
Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: /hyZAti4Ah+A27oIIZmUNWyl0E6bZlWkPoJNNIHHFd0=)
2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Validity
Not Before: Mar 25 04:44:57 2026 GMT
Not After : Apr 1 04:44:57 2026 GMT
Subject: CN=69c36849-c31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:03:3f:0d:6a:85:c6:4d:f6:68:58:ed:3d:
20:59:db:e5:9e:2c:cc:bc:c3:08:4d:f5:cc:dc:91:
3a:d1:e6:e1:3a:2c:6a:2d:e8:fd:7b:ad:ba:50:7c:
b8:3c:28:73:97:d9:68:ca:d4:d0:9b:ee:8d:ce:a8:
ea:38:7f:e9:91:a3:b8:f0:02:72:6f:7e:73:0d:7e:
47:5e:8f:68:51:f6:e8:7d:7c:45:10:7a:97:c9:fb:
a1:2f:44:50:bc:2e:4b:d6:b6:37:51:83:98:f1:a0:
49:90:61:ba:9f:34:f4:47:df:2d:30:cc:ff:cb:d4:
54:f1:8f:07:c9:d5:0d:f0:ce:af:71:8b:48:0a:d6:
eb:12:d6:b9:88:e1:d6:b9:16:66:79:e8:29:df:c2:
56:15:93:9b:03:3c:b9:48:94:bd:e9:1e:3d:05:c6:
94:2a:1b:14:e2:a4:a8:34:86:38:17:19:9b:a0:9a:
5b:51:d6:9e:3a:fa:8c:e7:04:89:30:55:89:be:f8:
b5:19:cd:5d:fe:2f:f2:d6:7d:1c:9f:06:be:a7:4f:
3f:66:07:ab:5f:35:f0:49:74:00:2c:7b:03:54:ec:
36:46:a7:40:63:42:79:2b:4f:ef:79:3d:c1:a0:84:
03:cc:70:1f:fe:bc:45:42:f7:29:70:93:6f:de:0f:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:66:88:B9:FA:43:C2:FE:1C:41:41:A4:57:03:72:37:1F:9C:00
X509v3 Authority Key Identifier:
keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:54:75:cf:93:71:67:a7:d6:62:6e:15:4a:47:5d:dd:97:e0:
78:4d:cd:7f:c4:f7:d0:b0:75:de:a4:35:26:0c:3e:36:59:df:
fa:50:6c:dc:76:4a:c4:2e:26:b0:33:e1:06:73:24:e0:f4:7e:
48:a3:56:88:2a:d4:00:38:49:26:55:0b:fe:11:eb:65:d6:4d:
0f:da:f5:8e:fc:4b:8a:28:2d:15:71:09:c0:59:9c:43:49:fa:
70:a7:f8:7f:39:29:2a:ec:1e:e5:04:a5:bb:5b:b4:ba:f6:c3:
7f:92:4c:a6:61:aa:8e:58:8f:75:cd:61:6b:86:5a:10:07:2c:
fd:9c:bf:8b:d7:e2:f3:c4:64:83:1c:69:4a:c6:90:a4:8e:b8:
41:4a:a0:fe:37:51:81:33:2c:6e:b2:36:f9:56:bf:6b:da:c1:
5e:0e:e0:ad:5d:15:ab:38:2b:72:29:37:b6:b3:af:46:13:54:
db:33:76:38:4e:bc:31:72:37:14:59:5f:9a:61:70:9a:6a:89:
80:bb:14:f9:24:35:bb:c5:f7:d7:c4:fa:3c:3a:85:6e:4d:78:
57:ee:d8:53:53:e9:43:6b:5a:58:e0:19:f1:9a:13:b0:93:64:
b0:da:94:29:4c:24:6d:3a:0c:42:30:66:f7:cf:fd:45:ec:41:
9c:19:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:10 2026 by rpki-client