
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier: vUsLSLfdKEvLqd4/ZbWZ7MCtkYify/2sL9/MSUgeRWk=
Subject key identifier: CC:60:99:F9:EC:32:86:67:5D:04:DD:86:66:F4:0A:1D:76:6B:F2:D7
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number: 0133
Signing time: Thu 23 Jul 2026 07:37:16 +0000
Manifest this update: Thu 23 Jul 2026 07:37:16 +0000
Manifest next update: Thu 30 Jul 2026 07:37:16 +0000
Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: JYo3HEmyVCj8G4AfMeiRDGcrsEF6sItkYJwK1I+TxSU=)
2: 9CA293D4580D11F180B976959F833773.roa (hash: ONaoAg3ne8zQW7Hrh4OQo3YPR+3Q7AFS+MZZLnbL8D8=)
3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=)
4: C19CD0D273CE11F18A0A8E6E86A30FBC.roa (hash: TyifwyRH2gwoNGS3cDGiNTSYF0ll70y1X64BGJ83VbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Validity
Not Before: Jul 23 07:37:16 2026 GMT
Not After : Jul 30 07:37:16 2026 GMT
Subject: CN=6a61c4ac-2f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:09:6b:85:ec:42:fe:7b:72:ba:b4:24:f1:
98:27:fe:e1:f1:ef:77:3f:3f:4e:70:54:5b:cc:35:
d6:59:5a:26:ec:cb:57:d1:34:43:3f:74:b9:0a:4e:
05:2c:08:e5:00:7b:82:1c:ce:41:ba:13:9e:60:c3:
0a:7f:10:3e:f3:84:0f:c2:8d:28:aa:e5:8d:4b:a7:
c3:a2:e1:03:b3:73:d9:3c:57:bb:62:e9:7d:27:49:
db:2b:ca:06:a9:22:97:e0:2d:59:1d:d6:a5:8f:fb:
09:e1:a0:31:7b:b1:32:23:25:4f:b0:06:c4:3c:ac:
a4:e1:b8:25:ec:70:ce:44:05:d5:2a:65:b8:dc:c5:
55:0b:2f:5e:61:13:37:14:a7:47:7f:d3:a3:a9:4b:
8f:bc:e8:75:94:c8:5e:13:56:e2:53:54:53:0f:54:
6e:84:aa:99:11:96:c1:75:1d:ca:bb:c9:6d:32:bb:
4c:ed:10:70:89:65:0d:92:fb:c3:16:59:ef:0c:16:
be:3a:1f:19:91:85:be:d7:cd:86:64:fb:30:01:13:
cc:ca:e1:44:e7:3f:e5:aa:57:1a:9b:1a:d4:9e:c3:
5d:57:92:73:c2:49:57:99:e6:61:53:76:ab:46:f6:
3e:50:b5:ae:21:a5:0b:cc:e3:b5:27:2b:f9:90:98:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:60:99:F9:EC:32:86:67:5D:04:DD:86:66:F4:0A:1D:76:6B:F2:D7
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:04:3c:da:56:d8:2f:60:e5:f3:7f:40:b2:59:4c:a6:e5:fa:
d5:c5:8d:17:c7:80:46:43:21:e1:e5:fe:64:8b:bb:af:47:46:
9e:66:04:4c:94:fa:84:06:da:61:95:01:a5:6b:7c:e6:e9:bc:
fb:00:38:d3:9d:e0:6e:b1:14:eb:cd:f3:6b:02:29:5e:a9:6d:
b7:7b:43:0f:34:35:8f:88:ad:a9:e6:67:f2:f5:9e:31:af:72:
fd:09:80:8a:e0:a9:19:22:72:91:cc:7f:ea:46:03:95:b7:31:
ad:c6:ab:30:0d:15:80:fd:55:5e:89:18:26:d0:5b:d2:83:01:
02:0f:26:e0:cf:95:db:b7:7a:1b:c9:21:e4:7f:3d:82:ac:cd:
ba:42:df:f9:4c:2b:80:22:77:f2:55:69:ba:ac:3c:62:5e:5e:
34:7b:b1:7d:0b:29:b1:9d:fb:8a:e8:d3:a1:75:23:ea:53:54:
e6:1e:5e:5d:d9:62:dd:bf:70:c0:be:83:b9:f9:2f:63:7e:56:
74:66:ca:00:2c:98:a8:93:d4:07:c4:f3:2c:a4:f2:98:c0:80:
f6:85:98:be:ee:de:bc:be:05:a2:6a:0d:9a:fd:b6:39:90:98:
ae:40:2b:0b:e6:88:52:28:22:17:9e:e1:55:e8:2f:d2:f2:6b:
88:be:9b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:49 2026 by rpki-client