
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json)
Hash identifier: 8Nq9MqNeGGV3Di2hguCiJsfubPKez02AzwmMA5ZFCU8=
Subject key identifier: 74:F0:6A:FF:43:EF:B9:D8:B7:75:D2:98:89:E7:35:21:8B:A5:80:9E
Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
Manifest number: 0142
Signing time: Wed 25 Mar 2026 04:48:26 +0000
Manifest this update: Wed 25 Mar 2026 04:48:25 +0000
Manifest next update: Wed 01 Apr 2026 04:48:25 +0000
Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: wgiWOTw0GsNWDG2uuDrqddlhO1XSjnXCiJ9iWEwVtJo=)
2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: zIk6J0N0742RdEvubg3AlZvYEvOIg7avsvcbwF9cq9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl
rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
Validity
Not Before: Mar 25 04:48:25 2026 GMT
Not After : Apr 1 04:48:25 2026 GMT
Subject: CN=69c3691a-9229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:fd:18:ab:28:f2:d8:9a:55:f2:5b:fc:ed:
c5:f8:16:e3:6c:2a:b7:47:b4:3e:90:d0:fa:64:bc:
01:69:87:2b:1b:bc:34:a9:0c:04:c8:17:8f:09:58:
7e:27:6e:b7:0c:0e:3e:44:9d:ac:9e:73:d3:f5:84:
ea:eb:d1:22:4e:5e:43:c7:a3:f7:48:1e:4c:ad:4a:
4d:c6:b0:92:c5:3c:be:47:d8:05:eb:be:4d:33:ff:
cb:c8:f5:99:82:85:c7:1b:b9:92:78:7c:36:a5:71:
70:b5:1a:3a:2b:0e:fc:2b:75:91:be:1a:d9:fa:54:
19:70:2c:96:27:fb:59:09:5f:9f:d1:a5:e1:38:ee:
a8:a5:b6:14:c5:84:d2:f0:fa:4f:58:b0:13:58:08:
d7:e2:ad:11:b6:46:d2:be:a6:ba:64:e7:38:30:d5:
d6:96:eb:0c:96:e0:ce:7f:42:c6:ed:e5:17:86:9f:
53:a1:f6:a4:55:91:df:39:c2:9e:01:31:19:35:90:
3d:86:3c:85:be:86:fa:5e:1b:c3:3c:1d:db:20:10:
35:fb:4a:93:f6:18:0f:3c:ca:d2:e0:8d:62:ba:05:
43:bc:05:33:81:64:67:80:3f:67:6a:1d:c7:c5:06:
bb:d0:c4:bd:4a:a3:03:34:10:53:2a:63:a7:2a:57:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F0:6A:FF:43:EF:B9:D8:B7:75:D2:98:89:E7:35:21:8B:A5:80:9E
X509v3 Authority Key Identifier:
keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:36:08:98:88:eb:bc:ca:82:4b:33:f7:83:84:d7:84:9d:c6:
9c:89:d5:16:aa:3e:b9:cf:1d:3c:cd:3b:6c:30:1a:ce:00:56:
70:0a:83:2a:54:3f:3b:2a:25:c0:14:27:6b:ad:8a:20:c2:99:
88:fd:9f:07:51:e1:a3:d7:bf:19:0e:37:c5:63:c6:df:ea:5c:
90:6f:ad:2d:be:27:ec:1c:8e:95:6c:3b:da:42:c5:dd:38:70:
fd:9b:14:17:f7:7f:59:4e:7d:0c:4e:81:b2:e6:5f:f9:ac:ff:
18:8c:2a:c9:e1:c2:fb:e5:52:ac:9b:ce:5e:b5:bb:51:1c:99:
ce:6a:ae:10:34:f1:32:2f:03:86:8f:d2:2f:31:77:de:b6:a7:
5c:f2:01:ae:2b:f3:34:bf:9a:62:29:c4:cf:a1:7e:f3:03:db:
de:b4:f6:1b:ad:d4:29:38:36:79:cc:d3:50:c6:6c:cd:be:79:
71:95:fc:15:2a:c5:1f:47:3d:84:c3:5a:d6:db:96:58:d4:ec:
d5:ea:e0:39:09:99:ef:03:3f:3d:b9:e3:38:2b:a5:5d:8a:0d:
c3:c6:62:10:5a:b6:1a:c9:47:ea:83:c2:79:ef:3a:70:80:c5:
a8:47:60:96:ab:7b:59:2e:d4:e2:d6:c4:1f:b2:c0:64:3f:c9:
5d:ab:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:09 2026 by rpki-client