
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json)
Hash identifier: 6QQ++68SA3lzZH/Zns9Vf0NvMGJ6uKR22oRMfgQjyM8=
Subject key identifier: 6D:E0:10:FC:31:36:27:45:F6:1C:07:CB:92:13:D9:B3:D9:31:8F:8C
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
Manifest number: 026B
Signing time: Mon 11 May 2026 02:09:35 +0000
Manifest this update: Mon 11 May 2026 02:09:35 +0000
Manifest next update: Mon 18 May 2026 02:09:35 +0000
Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: ZHS0JgtbPCSehw+Iud2fSTNfIHYkNdyLGM2pm5rH/bQ=)
2: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: aOKk9LCH0CUcXcS8w/DwIj3FtJbtCVyhM8kYs+mLuAo=)
3: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Validity
Not Before: May 11 02:09:35 2026 GMT
Not After : May 18 02:09:35 2026 GMT
Subject: CN=6a013a5f-c1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:f2:fa:d5:d6:ab:3e:96:bd:ac:a0:8a:b0:
95:8e:81:49:3d:f8:ff:50:54:7e:7b:55:88:82:6c:
b1:fd:a9:9e:29:c2:ed:95:f4:4a:66:f5:bd:ec:52:
7c:ae:3b:50:b7:cc:3b:45:ee:fe:dd:45:eb:9e:0c:
7e:f8:92:e6:31:b1:bb:6f:5f:4d:1e:c3:3c:86:5e:
51:8f:e1:4f:53:a6:7d:1d:60:cc:49:f6:76:be:34:
46:d2:32:3d:a5:6d:12:17:69:d2:35:39:64:1d:a6:
0b:e2:17:e3:c3:e0:c3:2a:73:a2:f0:2b:0f:c1:c3:
a4:71:8e:3e:bd:b8:84:32:f2:08:a5:7b:4b:90:f1:
83:0c:1d:18:26:43:c8:9a:40:39:d4:4d:25:bf:f5:
22:48:ba:61:46:e7:3d:b0:cd:d3:50:53:d2:97:b1:
ee:53:1e:3f:e2:ff:05:d0:3f:f5:20:bb:f9:a6:59:
31:52:60:a1:b7:65:1d:03:c5:dc:4e:41:7b:90:34:
f6:5f:64:84:eb:a4:1b:ef:9f:94:33:bd:48:71:50:
8f:cb:36:57:43:1e:4a:71:b5:9f:5c:d3:6c:78:6b:
8a:2a:06:50:8d:01:77:c5:2e:65:e5:d5:c4:fc:80:
69:be:bb:e2:2d:58:ef:e6:63:c6:fd:6a:f4:a3:1d:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:10:FC:31:36:27:45:F6:1C:07:CB:92:13:D9:B3:D9:31:8F:8C
X509v3 Authority Key Identifier:
keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b2:da:6d:19:74:e8:51:f4:cb:f3:1c:fa:d4:db:ac:e0:47:
56:99:f3:c4:f8:86:bb:8d:af:05:84:d0:78:a7:79:3d:7a:8e:
12:3a:ab:1f:00:86:b0:fe:b4:01:8e:da:05:f3:87:f1:3f:c3:
c6:a0:32:4c:44:0b:a5:4d:a5:d8:9e:19:57:bf:e7:f7:93:92:
33:a0:83:58:0b:b1:4d:86:fd:ca:fb:85:fa:44:88:60:05:94:
6f:b2:93:fa:a9:d5:f1:2d:b5:07:60:94:6e:f1:7f:9e:05:60:
14:6e:85:e9:b1:21:d9:2a:cd:ae:1c:7c:98:fb:76:18:d1:ac:
1d:1f:e2:53:61:59:e9:57:43:e9:6c:a4:96:4a:4b:2f:5b:63:
dd:48:13:11:3f:54:eb:3d:66:fd:14:9e:1c:7b:07:9c:b1:43:
94:46:98:86:ca:76:14:5e:85:ce:db:e4:e7:25:16:c7:09:b2:
32:93:19:82:54:fc:f2:5c:88:44:96:8b:c9:c1:60:b5:bc:f0:
10:ce:b5:22:f8:ab:02:73:98:b4:80:06:3e:f5:f9:69:80:75:
7a:ae:2c:64:70:0a:ad:b9:25:9b:d6:88:e6:b2:6f:18:c1:25:
91:f6:3c:03:7c:0a:a6:7e:96:15:e6:e8:0f:36:37:0c:ec:93:
81:e9:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:34 2026 by rpki-client