
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json)
Hash identifier: 8okC52PZBywuPdoorjDsBfgZcbGORcQ8T/018NCR7OE=
Subject key identifier: 06:62:E8:16:83:F3:FB:16:C3:34:95:91:8B:01:39:5E:6C:4F:2E:F4
Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
Manifest number: 0144
Signing time: Wed 13 May 2026 05:23:30 +0000
Manifest this update: Wed 13 May 2026 05:23:30 +0000
Manifest next update: Wed 20 May 2026 05:23:30 +0000
Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: k58/h5rQ63umhf69YjKSJ2BoWnP8rS/OeUwXeGPnt68=)
2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: CXpCRLt60Gekc/Mc5tcE7Fr8HBob962lZTc++9cwTzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Validity
Not Before: May 13 05:23:30 2026 GMT
Not After : May 20 05:23:30 2026 GMT
Subject: CN=6a040ad2-7d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:18:0a:5b:64:98:4a:e4:5f:dd:2e:34:b9:
7b:8a:52:dd:d4:42:3a:a7:ee:db:73:20:d3:6c:d7:
d7:15:df:45:9c:5d:15:16:ce:99:a2:fc:e8:91:8b:
25:c9:28:91:b0:fe:2f:15:d8:3a:2c:25:3e:e7:bd:
b9:89:9e:dd:42:d4:12:1e:4f:29:eb:c0:80:08:32:
8e:a7:ce:1e:c4:88:f7:ba:bd:61:37:c1:8c:f6:08:
6e:6f:88:f2:e7:76:27:0a:90:8b:6c:65:cd:a7:c0:
61:fb:84:6f:25:37:a1:4b:84:3a:dd:0a:25:7b:c1:
ca:35:a0:7b:7e:ae:f8:b8:39:b0:78:e1:15:ff:43:
73:ae:fd:36:bf:e6:ab:dc:bf:9a:08:eb:ee:92:64:
39:89:8a:b5:6c:74:52:ac:c0:67:0c:6f:0d:0c:99:
bb:82:9a:0f:4f:b1:f2:4a:10:9d:4c:2c:b3:28:03:
61:62:43:b8:c3:7d:48:55:67:e1:c9:27:d9:1f:54:
3a:ac:ea:9d:6f:86:e3:af:64:4d:bf:f6:3d:1e:d1:
88:fa:86:c7:83:8c:e7:73:a7:ec:1f:8e:5e:68:db:
34:ff:54:57:1e:a3:79:36:ee:a9:4f:66:5e:39:32:
f0:87:c9:82:0e:3a:28:d8:04:49:3f:2d:db:62:6b:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:62:E8:16:83:F3:FB:16:C3:34:95:91:8B:01:39:5E:6C:4F:2E:F4
X509v3 Authority Key Identifier:
keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:71:aa:b3:f5:e3:9a:2b:b0:a7:6f:e4:b0:a8:86:78:1c:2c:
8e:9f:32:7d:2e:dd:b4:1e:b6:4a:7b:39:40:a1:e3:4d:cc:41:
eb:10:05:09:8f:eb:a8:c9:e6:ef:0b:67:ea:1a:a2:ff:2a:4b:
8b:c8:3d:a4:38:6e:00:e0:75:14:e0:f1:b0:e4:7c:51:86:1d:
c7:6e:27:f3:a5:69:f4:54:3d:8c:1c:45:4f:f1:cd:49:c5:13:
bf:d8:24:2c:58:cb:22:9f:e0:af:78:ce:38:94:97:a5:22:9c:
48:9d:d2:5e:69:90:06:56:88:30:09:ae:0d:40:00:32:36:39:
a4:35:0a:c4:4f:eb:5e:5f:a6:bb:d8:2b:27:cf:22:f3:a8:bb:
48:c2:00:a5:54:d6:99:08:1d:32:1e:17:7b:64:5e:13:15:63:
50:2e:df:11:11:9a:42:be:67:c3:5c:43:85:84:a1:4d:3e:ee:
29:22:20:79:9f:ce:65:40:20:f3:e5:9e:ce:5f:86:8c:d4:aa:
b4:79:85:56:52:a3:b7:0a:e1:f4:99:b7:e9:e2:2a:1b:a5:a7:
d2:33:75:ae:57:ea:c8:c8:9d:dc:cb:24:4a:48:b7:8e:a1:c4:
8c:aa:0c:a1:ed:ae:85:13:54:f5:a2:ea:4e:1d:7a:5c:cd:4f:
86:7b:b2:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjRDMUIxMTAvBgNVBAUTKENFRTczQTk1RDVDQ0VFMDYyRTdENUVCQTFCNUExMjcw
NTJFMTI1MzgwHhcNMjYwNTEzMDUyMzMwWhcNMjYwNTIwMDUyMzMwWjAYMRYwFAYD
VQQDEw02YTA0MGFkMi03ZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlv0YCltkmErkX90uNLl7ilLd1EI6p+7bcyDTbNfXFd9FnF0VFs6ZovzokYsl
ySiRsP4vFdg6LCU+5725iZ7dQtQSHk8p68CACDKOp84exIj3ur1hN8GM9ghub4jy
53YnCpCLbGXNp8Bh+4RvJTehS4Q63Qole8HKNaB7fq74uDmweOEV/0Nzrv02v+ar
3L+aCOvukmQ5iYq1bHRSrMBnDG8NDJm7gpoPT7HyShCdTCyzKANhYkO4w31IVWfh
ySfZH1Q6rOqdb4bjr2RNv/Y9HtGI+obHg4znc6fsH45eaNs0/1RXHqN5Nu6pT2Ze
OTLwh8mCDjoo2ARJPy3bYmvhSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZi6BaD
8/sWwzSVkYsBOV5sTy70MB8GA1UdIwQYMBaAFM7nOpXVzO4GLn1euhtaEnBS4SU4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9DRjM3MzVEMDY0
MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdnWXVmVjY2RzFvU2NGTGhK
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3p1YzZsZFhNN2dZdWZWNjZHMW9TY0ZMaEpUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NEMxQi9DRjM3MzVEMDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdn
WXVmVjY2RzFvU2NGTGhKVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjHGqs/Xjmiuwp2/ksKiGeBwsjp8yfS7dtB62Sns5QKHjTcxB6xAFCY/rqMnm
7wtn6hqi/ypLi8g9pDhuAOB1FODxsOR8UYYdx24n86Vp9FQ9jBxFT/HNScUTv9gk
LFjLIp/gr3jOOJSXpSKcSJ3SXmmQBlaIMAmuDUAAMjY5pDUKxE/rXl+mu9grJ88i
86i7SMIApVTWmQgdMh4Xe2ReExVjUC7fERGaQr5nw1xDhYShTT7uKSIgeZ/OZUAg
8+Wezl+GjNSqtHmFVlKjtwrh9Jm36eIqG6Wn0jN1rlfqyMid3MskSki3jqHEjKoM
oe2uhRNU9aLqTh16XM1PhnuyYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:09:56 2026 by rpki-client