
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json)
Hash identifier: f4c0HxxMqETT681kUQ2eCWHC+dsFJ2VHyp0lrTw+9NY=
Subject key identifier: 29:19:93:CF:9C:D5:33:2F:65:FF:E1:03:EA:FD:10:E0:7F:E0:1D:A0
Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41
Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
Manifest number: 0275
Signing time: Mon 11 May 2026 02:01:32 +0000
Manifest this update: Mon 11 May 2026 02:01:31 +0000
Manifest next update: Mon 18 May 2026 02:01:31 +0000
Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: LtAluewEMm+q+yyJxierEe+DH+kUXvqjDPt+j1FD3bY=)
2: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: HO3OH/8eL6+bCFfILAtxQnck6D05JchPl7X69tG4qW4=)
3: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: bqrc3GnqSlvctr34CSmLH7pQRmgRC/6jwFegK+dWq/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl
rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41
Validity
Not Before: May 11 02:01:31 2026 GMT
Not After : May 18 02:01:31 2026 GMT
Subject: CN=6a01387c-ace2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:0d:6a:e6:b1:07:ff:40:ec:69:99:17:6a:
19:ad:e1:65:da:d1:ce:59:75:fe:4b:6e:47:a3:85:
38:48:fc:e4:d8:fe:72:75:81:75:7c:41:a2:2f:cc:
4d:90:c3:09:a8:3e:66:ca:51:4a:14:bf:48:8a:1b:
00:27:11:4d:d7:ca:9e:56:f4:0f:0f:8e:cd:17:66:
d2:c9:00:af:f3:c9:6b:9d:f4:9b:4d:a2:0f:b4:a7:
a7:e0:92:ec:63:ec:8c:99:c9:ff:40:73:48:a4:ed:
24:ca:3d:84:31:a4:b1:83:37:cd:1b:b6:1c:24:12:
31:56:09:2e:b0:d5:01:0e:29:eb:70:1f:fc:0c:c6:
74:47:ca:cc:85:31:73:b5:dc:9f:70:1d:7c:e1:60:
aa:45:86:eb:59:bd:05:cb:22:96:88:68:90:bb:d5:
eb:7f:92:ef:e2:fe:71:9e:63:34:66:b3:01:a0:d0:
b6:aa:6c:9f:29:9b:d0:dd:c3:6c:c2:87:01:cd:5d:
62:c9:77:92:0c:95:8b:cd:b2:3c:23:50:2b:53:a5:
97:69:63:88:36:82:f0:82:a0:51:fe:a9:4b:1e:84:
8f:74:7f:4d:68:8c:8e:d9:a9:30:aa:00:be:10:a9:
8b:95:b7:63:62:45:c6:17:6b:ff:89:35:48:7c:eb:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:19:93:CF:9C:D5:33:2F:65:FF:E1:03:EA:FD:10:E0:7F:E0:1D:A0
X509v3 Authority Key Identifier:
keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:3a:ee:28:1d:a0:6d:64:b5:35:fb:25:2e:a9:bf:85:15:e5:
df:39:f9:0e:14:e1:ed:cd:5b:20:f7:4f:7f:91:36:de:95:a5:
5e:e9:55:47:2b:8d:8b:3f:cb:a9:34:d4:a9:17:16:57:83:ff:
c8:ab:27:0d:28:be:ce:f3:6b:38:4e:22:a6:70:40:4d:9d:9e:
03:79:a1:5b:9c:01:d8:5f:5e:ff:48:59:d4:0b:4e:46:20:bd:
ed:44:65:4b:2a:29:82:c2:20:3a:5c:cc:e3:05:5b:a5:b4:25:
37:b1:76:9a:30:78:71:49:26:ca:d0:50:7f:d0:57:1d:46:17:
a0:e9:ae:e0:4f:db:89:d7:5f:e8:ca:60:6c:1b:fb:cd:14:42:
b4:36:ac:d5:4f:45:0c:98:1d:53:92:59:54:3d:19:08:06:67:
a2:d8:6b:f4:22:6c:54:d6:4d:cd:e2:cb:45:cf:55:63:9a:cb:
37:d3:c0:7d:2f:b6:bb:bb:f5:cd:75:34:b3:71:b6:03:75:e9:
af:0e:45:78:d6:a8:a0:c6:7c:42:84:3c:d2:6d:ae:df:81:ad:
81:fe:49:ff:30:e1:0a:f2:57:cf:6c:78:5e:44:7d:11:6d:89:
ce:68:8a:b5:71:27:c4:b3:67:5c:0f:92:91:7a:03:70:de:35:
74:52:2b:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF
NDg4RkJBNDEwHhcNMjYwNTExMDIwMTMxWhcNMjYwNTE4MDIwMTMxWjAYMRYwFAYD
VQQDEw02YTAxMzg3Yy1hY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1AwNauaxB/9A7GmZF2oZreFl2tHOWXX+S25Ho4U4SPzk2P5ydYF1fEGiL8xN
kMMJqD5mylFKFL9IihsAJxFN18qeVvQPD47NF2bSyQCv88lrnfSbTaIPtKen4JLs
Y+yMmcn/QHNIpO0kyj2EMaSxgzfNG7YcJBIxVgkusNUBDinrcB/8DMZ0R8rMhTFz
tdyfcB184WCqRYbrWb0FyyKWiGiQu9Xrf5Lv4v5xnmM0ZrMBoNC2qmyfKZvQ3cNs
wocBzV1iyXeSDJWLzbI8I1ArU6WXaWOINoLwgqBR/qlLHoSPdH9NaIyO2akwqgC+
EKmLlbdjYkXGF2v/iTVIfOvCKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkZk8+c
1TMvZf/hA+r9EOB/4B2gMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD
RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1
a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm
Y3VJcDJpaGl2QkRraVB1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeDruKB2gbWS1NfslLqm/hRXl3zn5DhTh7c1bIPdPf5E23pWlXulVRyuNiz/L
qTTUqRcWV4P/yKsnDSi+zvNrOE4ipnBATZ2eA3mhW5wB2F9e/0hZ1AtORiC97URl
SyopgsIgOlzM4wVbpbQlN7F2mjB4cUkmytBQf9BXHUYXoOmu4E/biddf6MpgbBv7
zRRCtDas1U9FDJgdU5JZVD0ZCAZnothr9CJsVNZNzeLLRc9VY5rLN9PAfS+2u7v1
zXU0s3G2A3Xprw5FeNaooMZ8QoQ80m2u34Gtgf5J/zDhCvJXz2x4XkR9EW2JzmiK
tXEnxLNnXA+SkXoDcN41dFIrdg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:37:00 2026 by rpki-client