
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
File: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json)
Hash identifier: PRrWk+O/xKoVnRP5n/w6+3JKp9ne+n1G+wLJcQhcBU8=
Subject key identifier: 52:D9:D4:74:43:41:64:5A:BC:78:60:E1:54:F5:B8:64:5D:BD:ED:93
Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Certificate serial: 0470
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
Manifest number: 0446
Signing time: Tue 24 Mar 2026 23:59:45 +0000
Manifest this update: Tue 24 Mar 2026 23:59:45 +0000
Manifest next update: Tue 31 Mar 2026 23:59:45 +0000
Files and hashes: 1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: 8ekQUgZTEF6OO4XWOhTCNnG+CG8QU3AOS8Ddthf/PKg=)
2: E57F70C206C311F185D816DB103D8C67.roa (hash: ldEkt8AnQQd4OxqJC4JbMV5PgPlGcaBYG25O0CezBnI=)
3: 62AC0F740B1511F189F6F0D93B3D8C67.roa (hash: 3cQBG+eCngkux1xOr3AWliZdBv2QypSCmE9xW1mHxwE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1136 (0x470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Validity
Not Before: Mar 24 23:59:45 2026 GMT
Not After : Mar 31 23:59:45 2026 GMT
Subject: CN=69c32571-6c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:fb:fb:a8:90:19:ef:84:69:76:f6:0d:64:
9c:00:f9:1b:63:c2:c4:61:96:d1:46:0d:d3:f6:72:
be:7d:11:12:a3:78:d0:22:8e:f4:12:c3:06:92:b3:
e0:43:6d:71:13:dd:ba:2b:84:72:2e:50:48:f4:be:
8c:a7:c7:a1:11:17:4f:6c:4c:16:90:7c:5f:e2:70:
7f:c8:ca:17:3c:28:8f:75:8a:13:54:7c:bb:7c:d5:
9e:c0:93:48:2e:52:5d:f8:8b:1e:3a:ae:58:2e:be:
2b:51:77:81:1a:77:9d:64:25:46:bb:cf:95:c6:98:
02:a2:55:f4:fd:e6:6c:ec:c3:05:ef:ec:bb:7b:eb:
40:df:f5:7c:77:ad:96:b3:90:ff:0d:4e:5e:1d:07:
db:25:d5:49:71:20:1b:ab:cc:c2:08:72:15:66:e3:
5c:f4:61:1e:0e:a3:1c:bd:fd:e4:08:88:7a:42:a8:
c6:48:98:54:03:7e:84:ad:42:49:d3:b8:f6:d6:b8:
03:05:22:e5:3b:c5:31:17:e5:18:b6:10:e8:db:be:
e2:f0:80:8c:cd:fc:9e:df:69:b2:21:e1:86:6b:38:
2d:35:16:52:b2:79:17:33:bb:f8:6a:3b:ce:14:b5:
7e:b6:1d:1b:47:2f:b0:5b:23:5a:81:20:83:57:bf:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:D4:74:43:41:64:5A:BC:78:60:E1:54:F5:B8:64:5D:BD:ED:93
X509v3 Authority Key Identifier:
keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:56:89:e1:1a:2c:cf:8d:7e:4d:65:66:75:60:57:cf:98:fa:
19:b4:9b:ed:89:ee:75:1a:1d:82:aa:e1:5c:cc:62:ab:d2:d3:
62:56:45:2d:cd:1b:a9:84:ab:07:e3:48:98:1c:94:63:0b:86:
0c:eb:b0:f9:6a:e2:6d:dc:a3:12:84:6c:fc:3c:99:ee:33:74:
76:67:e7:96:0a:0e:c1:da:68:1e:2e:02:57:d0:3e:31:ea:74:
59:1d:a4:29:bd:7a:82:f2:da:fa:ba:97:be:d5:b2:d9:1e:5b:
c0:72:9a:a9:72:e5:ed:63:cb:60:d3:b8:49:7b:92:b3:50:1c:
5b:60:8e:75:3d:b7:e0:e5:6f:9b:8d:52:21:5b:23:71:24:18:
0a:e7:d7:3e:c5:f0:e7:cd:b3:14:4b:1c:96:af:cf:08:62:cd:
5e:4d:70:56:6a:68:00:6d:77:19:81:56:62:c0:8d:af:4c:46:
10:4a:05:e0:a6:f8:0a:f9:0f:e0:d8:1a:c3:a6:07:f9:cc:87:
cd:65:72:e6:cc:b9:35:07:60:f7:3a:bb:22:8a:cd:8e:0c:cc:
3c:09:b3:d8:ac:38:8d:96:8f:4c:bd:bb:bd:7c:bb:e5:5a:3d:
8a:dc:50:0b:dc:20:4c:00:40:fe:c6:7b:96:da:f6:a1:64:76:
36:b4:bb:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB
MzdFNzRGQjQwHhcNMjYwMzI0MjM1OTQ1WhcNMjYwMzMxMjM1OTQ1WjAYMRYwFAYD
VQQDEw02OWMzMjU3MS02YzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4P7+6iQGe+EaXb2DWScAPkbY8LEYZbRRg3T9nK+fRESo3jQIo70EsMGkrPg
Q21xE926K4RyLlBI9L6Mp8ehERdPbEwWkHxf4nB/yMoXPCiPdYoTVHy7fNWewJNI
LlJd+IseOq5YLr4rUXeBGnedZCVGu8+VxpgColX0/eZs7MMF7+y7e+tA3/V8d62W
s5D/DU5eHQfbJdVJcSAbq8zCCHIVZuNc9GEeDqMcvf3kCIh6QqjGSJhUA36ErUJJ
07j21rgDBSLlO8UxF+UYthDo277i8ICMzfye32myIeGGazgtNRZSsnkXM7v4ajvO
FLV+th0bRy+wWyNagSCDV79+gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLZ1HRD
QWRavHhg4VT1uGRdve2TMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG
MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzA0NS9CRkFEQzYxMDlGMjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtr
bU50VmNEWkdNRnlqZm5UN1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABVaJ4Rosz41+TWVmdWBXz5j6GbSb7YnudRodgqrhXMxiq9LTYlZFLc0bqYSr
B+NImByUYwuGDOuw+WribdyjEoRs/DyZ7jN0dmfnlgoOwdpoHi4CV9A+Mep0WR2k
Kb16gvLa+rqXvtWy2R5bwHKaqXLl7WPLYNO4SXuSs1AcW2COdT234OVvm41SIVsj
cSQYCufXPsXw582zFEsclq/PCGLNXk1wVmpoAG13GYFWYsCNr0xGEEoF4Kb4CvkP
4Ngaw6YH+cyHzWVy5sy5NQdg9zq7IorNjgzMPAmz2Kw4jZaPTL27vXy75Vo9itxQ
C9wgTABA/sZ7ltr2oWR2NrS7tQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:07 2026 by rpki-client