
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
File: ZuoPg73TYyv_GUALOhum_t_8VYc.mft (raw, json)
Hash identifier: vDV3DR/gJI6PxcaFtyt28I7cWKYRGS1blYLo/lGdj1w=
Subject key identifier: E4:C6:34:AE:18:37:A9:6D:17:AF:D1:AF:9F:83:48:34:1D:23:A1:CC
Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87
Certificate issuer: /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
Certificate serial: 353C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
Manifest number: 352F
Signing time: Thu 26 Mar 2026 15:14:21 +0000
Manifest this update: Thu 26 Mar 2026 15:14:20 +0000
Manifest next update: Thu 02 Apr 2026 15:14:20 +0000
Files and hashes: 1: ZuoPg73TYyv_GUALOhum_t_8VYc.crl (hash: jNvJlDaKdn6U6sk0BnnteNiqUk2yVHZ6U/kw118Imhk=)
2: 1190361AAF1B11E7B89F3883C4F9AE02.roa (hash: zl0jrIeJxII+atMy5dCdCnVAXxI5uX70xqsr3BS1v78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl
rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 15:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13628 (0x353c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
Validity
Not Before: Mar 26 15:14:20 2026 GMT
Not After : Apr 2 15:14:20 2026 GMT
Subject: CN=69c54d4d-826d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:2f:f3:d8:f6:5a:eb:89:cd:36:92:6c:f3:
2b:c6:42:8f:35:db:de:5f:85:47:8d:3a:aa:41:27:
04:9e:54:f1:74:5e:ae:30:c0:23:25:cd:94:b6:34:
90:f9:12:3d:7c:e6:dc:bf:f1:4c:85:90:82:60:f9:
ad:7b:8b:9b:06:60:e0:b3:13:15:e4:0b:e7:2a:2a:
b7:33:73:64:1a:f1:08:eb:61:0f:a3:e9:ee:fa:ea:
a3:b1:bf:fa:9e:bb:6e:4d:2a:b3:25:82:41:ef:75:
2e:be:6e:79:c9:7f:6c:e7:dc:2c:a5:f3:5e:1b:6a:
cb:cd:2e:74:22:4b:b4:d9:f5:ef:11:fe:26:52:b5:
a8:a8:52:63:76:7c:63:ca:8a:44:79:e1:70:36:26:
0e:30:9b:d8:74:b0:0b:c5:2b:f1:c0:eb:13:1e:1e:
1a:ed:96:26:c7:26:84:2e:db:c5:9f:d1:93:c7:13:
bf:4d:3e:69:65:e0:c7:eb:7e:d1:19:7b:2e:b8:78:
4c:c1:19:42:77:28:58:05:8f:49:30:99:56:41:8b:
31:b9:42:cf:ca:fc:5a:90:87:47:7f:a8:de:23:6e:
0e:da:aa:d1:36:2f:39:54:91:de:00:b3:9a:59:f1:
1b:6d:21:b3:e3:03:14:9a:df:2e:43:fd:17:6f:04:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C6:34:AE:18:37:A9:6D:17:AF:D1:AF:9F:83:48:34:1D:23:A1:CC
X509v3 Authority Key Identifier:
keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:81:f8:15:fc:aa:af:34:e6:a2:a4:2a:f1:62:3c:99:10:4b:
13:02:54:cb:8e:03:3c:66:1d:be:62:42:6b:e6:09:4a:a3:6b:
4f:55:a6:67:09:a6:ba:a0:95:37:b7:21:2a:67:39:85:e3:f6:
60:ff:0f:53:8a:63:ef:c1:86:9e:1e:cf:69:73:b9:59:16:49:
47:0a:09:f2:00:55:2c:94:0e:8c:5d:78:df:1b:6f:ee:c4:a0:
b3:31:54:51:58:d5:c4:85:0a:e7:fc:13:31:a9:df:e9:45:17:
26:83:2d:95:3f:96:fc:72:fa:e1:b0:78:05:71:f6:08:59:20:
24:3e:2c:81:ba:70:ab:51:a6:15:35:b4:43:49:34:08:9d:8d:
83:81:e4:33:c2:52:40:ef:da:40:04:34:f2:d3:5d:56:23:a1:
e1:e7:48:cb:8e:0a:cd:bb:5f:09:80:eb:ea:c4:f1:10:f5:d9:
8e:26:c7:da:e4:3b:bb:f8:3a:5b:0d:08:b0:a7:f9:4f:e2:e7:
fd:9b:d6:d6:db:e0:39:e7:3c:f8:f0:d1:50:70:84:b0:71:a3:
38:45:8e:ab:3d:c8:4a:e3:07:61:f4:ca:cc:20:ef:c2:d3:5c:
3a:4c:c7:e7:fb:d6:2c:82:24:7c:c2:7d:00:c0:21:97:64:8a:
c1:d1:43:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NCNjMxMTAvBgNVBAUTKDY2RUEwRjgzQkREMzYzMkJGRjE5NDAwQjNBMUJBNkZF
REZGQzU1ODcwHhcNMjYwMzI2MTUxNDIwWhcNMjYwNDAyMTUxNDIwWjAYMRYwFAYD
VQQDEw02OWM1NGQ0ZC04MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtkYv89j2WuuJzTaSbPMrxkKPNdveX4VHjTqqQScEnlTxdF6uMMAjJc2UtjSQ
+RI9fObcv/FMhZCCYPmte4ubBmDgsxMV5AvnKiq3M3NkGvEI62EPo+nu+uqjsb/6
nrtuTSqzJYJB73Uuvm55yX9s59wspfNeG2rLzS50Iku02fXvEf4mUrWoqFJjdnxj
yopEeeFwNiYOMJvYdLALxSvxwOsTHh4a7ZYmxyaELtvFn9GTxxO/TT5pZeDH637R
GXsuuHhMwRlCdyhYBY9JMJlWQYsxuULPyvxakIdHf6jeI24O2qrRNi85VJHeALOa
WfEbbSGz4wMUmt8uQ/0XbwTFpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOTGNK4Y
N6ltF6/Rr5+DSDQdI6HMMB8GA1UdIwQYMBaAFGbqD4O902Mr/xlACzobpv7f/FWH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0I2My9FMUIwNTRGQzFE
QTcxMUUyQjY4OEVCQTEwOEIwMkNEMi9adW9QZzczVFl5dl9HVUFMT2h1bV90XzhW
WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p1b1BnNzNUWXl2X0dVQUxPaHVtX3RfOFZZYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0I2My9FMUIwNTRGQzFEQTcxMUUyQjY4OEVCQTEwOEIwMkNEMi9adW9QZzczVFl5
dl9HVUFMT2h1bV90XzhWWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASYH4FfyqrzTmoqQq8WI8mRBLEwJUy44DPGYdvmJCa+YJSqNrT1WmZwmmuqCV
N7chKmc5heP2YP8PU4pj78GGnh7PaXO5WRZJRwoJ8gBVLJQOjF143xtv7sSgszFU
UVjVxIUK5/wTManf6UUXJoMtlT+W/HL64bB4BXH2CFkgJD4sgbpwq1GmFTW0Q0k0
CJ2Ng4HkM8JSQO/aQAQ08tNdViOh4edIy44KzbtfCYDr6sTxEPXZjibH2uQ7u/g6
Ww0IsKf5T+Ln/ZvW1tvgOec8+PDRUHCEsHGjOEWOqz3ISuMHYfTKzCDvwtNcOkzH
5/vWLIIkfMJ9AMAhl2SKwdFDQQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:13 2026 by rpki-client