
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json)
Hash identifier: kNEhtp7zbvXwWBM/dx4hug9B1sQvmaVBV5VZuaRO9kc=
Subject key identifier: FB:EC:CD:FC:99:8F:7E:63:6C:D8:21:7E:5F:A2:26:47:75:65:78:1A
Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
Manifest number: F4
Signing time: Wed 25 Mar 2026 05:32:30 +0000
Manifest this update: Wed 25 Mar 2026 05:32:30 +0000
Manifest next update: Wed 01 Apr 2026 05:32:30 +0000
Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: BTSrUrRZqoOHQCXYbyMRW5kX7P9DkylQMsXPzh92Ots=)
2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Validity
Not Before: Mar 25 05:32:30 2026 GMT
Not After : Apr 1 05:32:30 2026 GMT
Subject: CN=69c3736e-4b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:41:da:6f:dd:16:fd:20:f4:98:be:3a:db:
25:67:1f:f6:fc:37:81:32:a6:99:5d:25:af:4f:59:
39:35:af:77:50:ca:87:63:0c:f8:36:61:d9:2f:ab:
c4:46:e7:4c:77:7b:3f:43:5c:c2:cd:8f:33:e5:74:
4b:f2:e3:36:2a:2d:7c:ad:0c:ee:5d:3c:7e:f9:43:
9c:89:18:e9:ac:58:3c:58:85:cd:e9:1c:9e:cd:9b:
37:8e:72:36:ea:19:28:b7:3f:02:f6:b5:db:93:8c:
4e:b1:c2:c1:26:a4:41:d5:18:fc:cd:6e:88:7d:f3:
8d:e9:cf:15:24:61:76:d3:91:fc:13:86:04:5e:0d:
17:da:1d:6d:b7:f4:9f:de:43:38:6f:f7:30:6c:9c:
5b:00:6a:ef:0b:13:84:fc:0f:85:53:3f:09:10:c0:
98:66:fa:fa:94:96:03:52:d0:f6:23:bb:bc:a5:3d:
d9:0f:72:2b:ff:69:e7:40:49:af:b5:c8:80:bd:fc:
71:05:1f:5e:78:66:a2:86:24:00:42:a4:61:99:44:
ab:62:3a:02:46:fb:8e:3e:99:6e:4c:bf:10:f7:28:
75:68:80:09:65:8d:85:b5:e5:2c:c2:9e:98:93:56:
51:43:14:c0:a8:21:82:07:ce:27:10:72:d9:7d:56:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EC:CD:FC:99:8F:7E:63:6C:D8:21:7E:5F:A2:26:47:75:65:78:1A
X509v3 Authority Key Identifier:
keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f4:0c:8b:3d:ab:93:aa:55:1c:81:ee:0c:51:0f:b7:74:ee:
d2:34:83:9b:c6:33:02:65:53:7f:a3:d7:42:68:e1:fd:0b:fe:
99:1f:10:fe:be:21:fe:44:9a:28:41:b7:22:ee:c4:44:eb:65:
2d:0f:ab:3d:bf:9c:c1:31:cd:85:87:80:60:30:17:ec:6c:a7:
0b:cb:51:40:fd:10:50:4e:9c:94:73:e1:3d:90:0e:52:87:1c:
36:01:1c:c9:b1:65:9f:c6:7a:79:90:01:bd:de:84:5e:6d:45:
04:55:29:98:1d:5c:d8:7f:ed:00:ac:61:4b:8f:64:36:bc:d8:
46:72:88:33:3d:ab:dd:16:5c:51:ed:e7:14:75:87:a7:26:43:
de:d2:73:e5:d4:cd:3c:a5:6e:d3:72:51:90:2a:06:74:c9:0d:
65:58:28:51:51:54:4b:47:6d:69:c8:aa:a3:f9:35:9f:c7:c9:
57:5a:55:6f:a6:64:bc:04:6d:4d:76:ce:43:8f:0d:fc:4f:d0:
a8:29:ac:61:88:d2:32:f9:1c:84:20:88:43:88:d0:73:ff:e8:
ed:60:60:d7:3a:1d:87:6a:65:e8:8f:60:bf:7a:01:5d:84:d6:
11:c0:d3:f5:73:7e:f7:d4:2d:4a:24:29:0e:00:f3:a6:91:c4:
28:e9:a1:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2
QjY0MUQ2QTMwHhcNMjYwMzI1MDUzMjMwWhcNMjYwNDAxMDUzMjMwWjAYMRYwFAYD
VQQDEw02OWMzNzM2ZS00YjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsKNB2m/dFv0g9Ji+OtslZx/2/DeBMqaZXSWvT1k5Na93UMqHYwz4NmHZL6vE
RudMd3s/Q1zCzY8z5XRL8uM2Ki18rQzuXTx++UOciRjprFg8WIXN6RyezZs3jnI2
6hkotz8C9rXbk4xOscLBJqRB1Rj8zW6IffON6c8VJGF205H8E4YEXg0X2h1tt/Sf
3kM4b/cwbJxbAGrvCxOE/A+FUz8JEMCYZvr6lJYDUtD2I7u8pT3ZD3Ir/2nnQEmv
tciAvfxxBR9eeGaihiQAQqRhmUSrYjoCRvuOPpluTL8Q9yh1aIAJZY2FteUswp6Y
k1ZRQxTAqCGCB84nEHLZfVay1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvszfyZ
j35jbNghfl+iJkd1ZXgaMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2
QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx
cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN
NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0PQMiz2rk6pVHIHuDFEPt3Tu0jSDm8YzAmVTf6PXQmjh/Qv+mR8Q/r4h/kSa
KEG3Iu7EROtlLQ+rPb+cwTHNhYeAYDAX7GynC8tRQP0QUE6clHPhPZAOUoccNgEc
ybFln8Z6eZABvd6EXm1FBFUpmB1c2H/tAKxhS49kNrzYRnKIMz2r3RZcUe3nFHWH
pyZD3tJz5dTNPKVu03JRkCoGdMkNZVgoUVFUS0dtaciqo/k1n8fJV1pVb6ZkvARt
TXbOQ48N/E/QqCmsYYjSMvkchCCIQ4jQc//o7WBg1zodh2pl6I9gv3oBXYTWEcDT
9XN+99QtSiQpDgDzppHEKOmhLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:21 2026 by rpki-client