
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
File: SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json)
Hash identifier: ANHPYl+wkAGhFP3vydsT35IUKiWtfpd1QVZ/bQ+QTos=
Subject key identifier: FD:16:36:81:7F:7D:C5:30:79:B0:C7:C0:7B:B9:78:EF:F0:12:22:67
Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Certificate serial: 0394
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
Manifest number: 038F
Signing time: Wed 25 Mar 2026 00:26:14 +0000
Manifest this update: Wed 25 Mar 2026 00:26:13 +0000
Manifest next update: Wed 01 Apr 2026 00:26:13 +0000
Files and hashes: 1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: D65IYd1CTxLoSp9FmoXAOifrtH9NT0u+H5SP36FbUO4=)
2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: UoeTGdDWFi8XFqsO7bK2F7lfw58R0SVfg1rPBc2qAFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916 (0x394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Validity
Not Before: Mar 25 00:26:13 2026 GMT
Not After : Apr 1 00:26:13 2026 GMT
Subject: CN=69c32ba6-ac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:6a:11:ad:c2:c7:d1:44:a6:79:dc:5c:f9:
ef:9e:9a:e6:92:29:98:f7:00:f4:08:45:39:40:c5:
fb:c8:88:3b:56:13:43:20:6e:d1:a5:07:9e:bc:68:
40:e9:46:5b:2f:2c:56:b5:a2:0c:c3:d0:6c:68:bb:
6b:bf:76:ee:76:67:b1:b7:c7:79:3f:af:5f:4c:53:
29:05:68:2d:62:4a:b9:4c:10:2d:78:73:6d:85:26:
dc:f0:80:4d:a7:3f:fb:d9:d2:55:d6:ce:41:37:7a:
c4:b3:36:7a:72:e5:2d:c8:02:45:df:cb:e4:70:d3:
8f:13:08:92:ec:7c:b0:71:e5:c0:da:00:8f:0f:70:
7e:82:e5:70:f9:08:87:de:32:1b:3f:dd:b0:49:da:
9a:81:7f:ff:7b:91:92:ad:0e:ca:46:c4:73:9d:02:
80:1f:05:ff:b6:1a:16:89:c9:20:02:10:61:e8:2f:
d0:43:24:a7:3e:72:b6:3f:ac:62:64:af:09:3d:39:
09:0f:40:9d:5f:e4:12:9b:06:f2:9e:9b:3d:73:be:
77:67:36:ec:de:7d:0c:97:38:30:c1:4e:23:06:82:
9e:01:b1:f0:42:e9:6c:49:53:5a:ca:25:a4:b7:bb:
9a:d4:b0:52:27:4a:a7:0b:a8:40:3f:e4:5a:a2:a9:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:16:36:81:7F:7D:C5:30:79:B0:C7:C0:7B:B9:78:EF:F0:12:22:67
X509v3 Authority Key Identifier:
keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:15:e2:af:0f:56:75:22:d6:12:3d:82:2f:d3:04:9b:22:d2:
58:83:26:a9:c8:c8:2c:67:27:d3:26:58:24:af:5a:9a:0f:69:
7f:66:1e:c4:1e:d4:93:7b:db:e6:c3:de:02:a3:7a:4d:bd:3d:
40:68:de:f5:49:c1:0b:70:8a:43:04:bd:70:a2:ed:ea:a2:a8:
e3:43:09:d4:4b:d9:60:25:20:75:21:89:2e:76:05:6a:0a:76:
34:09:b2:63:0c:29:b0:8c:14:f5:9f:4e:2f:f2:c8:d5:5d:51:
5d:8e:a0:0e:70:e8:75:11:fc:5a:10:f6:1f:8f:36:e9:44:f2:
a4:66:4e:4c:1c:cb:e5:ea:08:27:d2:a0:2d:e7:3a:9a:ab:17:
77:aa:fb:59:42:16:fe:83:61:9a:8a:27:9a:7b:95:a4:b5:68:
5c:8f:e0:66:89:15:24:45:cf:d1:14:85:3c:ee:11:90:21:0f:
12:66:68:ca:99:3d:ce:40:a6:9f:8c:42:93:a2:29:78:59:5a:
fa:80:47:4a:72:9a:32:01:40:2a:d3:67:9f:93:2a:6e:62:26:
0d:14:57:df:e7:88:ce:2c:cc:c2:86:f8:7e:40:b5:a9:4f:96:
2c:f4:39:d0:b9:c6:59:d5:81:fd:91:b2:93:77:87:c1:6f:e0:
bc:48:67:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0
NjJCMDhDQzcwHhcNMjYwMzI1MDAyNjEzWhcNMjYwNDAxMDAyNjEzWjAYMRYwFAYD
VQQDEw02OWMzMmJhNi1hYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rZqEa3Cx9FEpnncXPnvnprmkimY9wD0CEU5QMX7yIg7VhNDIG7RpQeevGhA
6UZbLyxWtaIMw9BsaLtrv3budmext8d5P69fTFMpBWgtYkq5TBAteHNthSbc8IBN
pz/72dJV1s5BN3rEszZ6cuUtyAJF38vkcNOPEwiS7HywceXA2gCPD3B+guVw+QiH
3jIbP92wSdqagX//e5GSrQ7KRsRznQKAHwX/thoWickgAhBh6C/QQySnPnK2P6xi
ZK8JPTkJD0CdX+QSmwbynps9c753Zzbs3n0MlzgwwU4jBoKeAbHwQulsSVNayiWk
t7ua1LBSJ0qnC6hAP+RaoqnP/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP0WNoF/
fcUwebDHwHu5eO/wEiJnMB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC
RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjBEMC85M0ZCN0Y0RURCRjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtB
RUFoWXdONVE2NXBHS3dqTWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdxXirw9WdSLWEj2CL9MEmyLSWIMmqcjILGcn0yZYJK9amg9pf2YexB7Uk3vb
5sPeAqN6Tb09QGje9UnBC3CKQwS9cKLt6qKo40MJ1EvZYCUgdSGJLnYFagp2NAmy
YwwpsIwU9Z9OL/LI1V1RXY6gDnDodRH8WhD2H4826UTypGZOTBzL5eoIJ9KgLec6
mqsXd6r7WUIW/oNhmoonmnuVpLVoXI/gZokVJEXP0RSFPO4RkCEPEmZoypk9zkCm
n4xCk6IpeFla+oBHSnKaMgFAKtNnn5MqbmImDRRX3+eIzizMwob4fkC1qU+WLPQ5
0LnGWdWB/ZGyk3eHwW/gvEhnqw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:53 2026 by rpki-client