
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier: eE5lgMxTU1QQZGR3Cq4ImTqGBXn5rFXB1UaIBPTqShM=
Subject key identifier: C4:5D:CA:DD:5F:A3:43:47:60:55:A0:EE:63:1F:67:23:C4:29:4D:E8
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number: EB
Signing time: Wed 25 Mar 2026 05:50:18 +0000
Manifest this update: Wed 25 Mar 2026 05:50:18 +0000
Manifest next update: Wed 01 Apr 2026 05:50:18 +0000
Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: lZnSOW2pgaF2YuojiKjPAD0wwFFbgKX8VMWlfzUs0eg=)
2: 48243250E78D11EF98760355C4F9AE02.roa (hash: pKuQcb5a0CGJjxiglyAc4MtEoKPTKV47Xl1uLaj1W8A=)
3: A1F7F22ECEF211F09F0B2645C4F9AE02.roa (hash: E04VhvYEpnYiLkCtoSN6envyPqVYQPyv9GsXt7FIHas=)
4: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Validity
Not Before: Mar 25 05:50:18 2026 GMT
Not After : Apr 1 05:50:18 2026 GMT
Subject: CN=69c3779a-29f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:2f:4c:85:13:4a:1c:21:68:2f:50:43:79:
6a:1e:f2:b4:a0:3e:70:ee:fc:f5:c0:af:7d:f5:65:
14:9d:92:a1:68:77:be:4f:9e:bd:1c:82:d0:eb:db:
8a:86:2f:dc:2a:e8:81:05:fa:85:ad:e4:66:a7:6a:
72:75:cf:33:ae:a3:71:10:12:b4:bb:62:31:4d:bd:
0e:8d:fb:12:12:2b:00:06:c3:15:d4:85:53:fc:61:
af:d1:91:cf:39:89:ed:a1:18:ac:1a:92:1c:8e:ae:
f1:2c:b4:1f:81:8d:fe:eb:f8:53:ac:1b:45:c9:d4:
4a:dc:43:27:e8:31:30:32:c6:81:c7:21:09:3e:f5:
c7:b1:ee:ae:a6:c0:6d:87:59:a7:62:e5:8b:f0:4d:
c4:2f:5b:80:32:2b:81:61:ff:e0:9a:c1:3b:8b:48:
8f:d9:41:1d:c2:a9:24:5e:04:4e:81:5e:b9:b7:47:
17:8c:a8:85:59:b3:35:0d:82:03:31:3a:f9:00:50:
b3:13:cf:5e:6c:8e:80:20:47:e4:76:dc:0e:d5:6a:
67:36:a4:e9:cc:84:a8:4a:bc:ca:fe:2c:2d:94:4f:
ff:61:60:8c:52:d0:15:c7:b8:1f:8c:1c:a9:91:bb:
33:fc:c7:f9:d4:87:f6:87:cf:d4:7c:ea:c9:6c:84:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5D:CA:DD:5F:A3:43:47:60:55:A0:EE:63:1F:67:23:C4:29:4D:E8
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9f:8f:f0:20:d3:32:01:98:f5:56:cb:22:c0:08:d0:3e:40:
02:a9:16:ac:77:e4:a0:4c:06:02:2a:fd:da:eb:fd:72:12:ff:
01:4b:45:75:5d:6f:4d:a7:b6:e3:12:5b:27:e3:ca:e9:2f:98:
2a:75:f0:4b:42:db:64:0e:7c:f3:25:ef:ff:56:1c:92:5e:47:
ac:21:67:63:d8:54:90:95:d0:b9:10:74:d8:b5:3e:9c:c4:19:
53:fc:dc:f9:98:6b:0f:3b:57:99:86:ba:03:79:b8:90:37:2d:
30:5d:5e:fb:45:75:2a:80:02:c7:77:87:d4:0c:c7:d1:10:42:
e8:c8:f4:09:c4:18:55:6a:63:a6:a1:7c:20:a5:a6:19:88:42:
75:2d:4f:bc:1c:8b:7c:27:e2:02:17:f1:6f:62:da:f4:db:91:
50:be:62:d1:54:15:9c:92:1b:b8:9d:7c:b5:73:d8:a6:d6:5d:
5c:87:cc:4c:e8:38:3c:cd:de:56:57:92:c5:a8:f0:08:1f:d9:
75:dc:7f:3b:6f:82:6f:e9:36:fe:4c:62:5b:16:a4:dc:38:5f:
df:1d:a9:e9:bd:8c:ec:cd:9c:4f:00:f2:5d:6a:95:59:63:4b:
e7:fd:73:82:51:8e:c9:c4:3a:26:ab:9c:fd:de:53:9c:5b:f6:
1c:b5:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:27 2026 by rpki-client