
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json)
Hash identifier: 0KhQs4ANkF4rEUKj5kH1xAGoGa1wxICcRoU9UJCfTlg=
Subject key identifier: 87:33:B7:81:2F:24:EE:B2:6E:E4:B0:D8:CE:81:39:ED:CB:B4:72:BC
Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
Manifest number: 012B
Signing time: Wed 25 Mar 2026 04:50:10 +0000
Manifest this update: Wed 25 Mar 2026 04:50:09 +0000
Manifest next update: Wed 01 Apr 2026 04:50:09 +0000
Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: va5f9wiYxH5UiN8fxan0ka2v8q+ZRENqwZFeoZ1mHpg=)
2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: CXpCRLt60Gekc/Mc5tcE7Fr8HBob962lZTc++9cwTzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Validity
Not Before: Mar 25 04:50:09 2026 GMT
Not After : Apr 1 04:50:09 2026 GMT
Subject: CN=69c36982-589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:fe:99:10:bb:e5:30:ac:7c:7b:1d:61:b7:
0e:dd:8d:44:8f:1d:97:0e:dc:7d:7d:a0:c3:8b:9d:
2a:0b:1d:1b:24:1a:f7:26:b4:52:33:a0:88:6d:03:
1b:65:4d:ea:46:8d:98:3d:67:01:6d:44:05:1b:0d:
84:b4:12:f6:b8:77:88:bc:6a:f8:24:95:f3:d3:bb:
af:6c:87:c9:ea:1a:e8:78:12:90:fa:01:ad:9b:a8:
49:b3:c7:01:f5:ce:0b:cd:e5:dd:99:e9:83:e1:86:
ec:82:55:f1:44:05:fc:8b:3d:3e:6c:c7:26:ce:9f:
e4:6b:5c:35:6e:dd:cf:3e:2f:1a:3f:c1:e7:d5:46:
56:e7:3d:84:23:e5:dc:a2:37:09:7f:87:57:76:31:
fc:c9:6d:bd:bc:44:ab:3d:50:c3:55:7c:c3:97:cd:
ae:b8:f6:9c:42:a1:01:14:95:52:0f:37:27:83:d1:
e9:82:e2:9e:69:5e:7f:63:e9:62:14:c4:24:0e:38:
14:89:50:5a:48:3f:6e:74:f5:8b:c6:b5:cc:62:b9:
58:cf:1e:bf:ca:32:bd:37:7a:fc:b3:26:e7:94:fe:
81:4e:b6:ca:48:c9:cb:a1:05:33:57:70:d7:fc:4b:
40:cf:1c:cd:67:90:68:31:92:44:be:86:d0:f9:cd:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:33:B7:81:2F:24:EE:B2:6E:E4:B0:D8:CE:81:39:ED:CB:B4:72:BC
X509v3 Authority Key Identifier:
keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:b6:d4:8c:1a:6a:a6:71:82:55:df:20:a6:23:42:cf:49:
85:dd:49:9a:2f:d2:19:41:ff:67:0c:57:8c:13:ad:18:36:1f:
ca:11:bd:0f:dc:c0:e8:bf:f5:74:6e:d6:17:95:f1:e9:78:b5:
d9:22:94:cf:3f:25:2b:b9:fb:b1:ce:af:13:36:3c:53:5c:20:
a2:03:5a:25:52:69:9f:d0:2f:02:80:b3:11:17:cb:12:1d:0a:
88:7e:7a:d7:5e:11:30:96:eb:7b:87:7e:98:9b:f2:c6:f8:e7:
c7:54:61:11:9b:b5:2c:e3:93:be:20:62:c9:b9:d1:dd:ea:b2:
d2:bf:45:63:6d:39:a7:da:ad:6c:c9:87:5d:51:91:72:52:03:
87:a1:18:af:91:fd:69:19:ae:84:88:3b:c5:0f:61:8d:bc:bf:
a8:ab:db:06:c3:7b:7b:bd:e4:56:90:08:f6:4e:6a:77:35:52:
88:0c:81:0f:14:15:9e:97:2c:c4:8f:42:62:de:d6:38:57:d3:
6d:8e:11:8f:03:18:7d:9d:f6:0e:28:d2:7a:8f:32:8e:73:7f:
f5:45:f0:14:87:38:c9:2c:8e:f1:9e:b5:03:34:6a:18:20:9a:
45:ba:80:df:ce:45:b2:67:d2:0b:75:de:4a:1a:a9:2a:1f:56:
84:f6:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:23 2026 by rpki-client