
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier: TO0crjJ+Xrn2eraJzk6GzPgCtbyOtftpj5DjhJB+RbA=
Subject key identifier: 94:46:D7:76:4A:C4:C3:42:3D:99:43:D2:74:67:B8:1A:C2:60:BD:36
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number: 011D
Signing time: Sat 13 Jun 2026 06:15:31 +0000
Manifest this update: Sat 13 Jun 2026 06:15:30 +0000
Manifest next update: Sat 20 Jun 2026 06:15:30 +0000
Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: jrsutS1Ct7wu/EMjx7EddiVShNhTHiSoEmNTRkThjTA=)
2: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=)
3: 48243250E78D11EF98760355C4F9AE02.roa (hash: pKuQcb5a0CGJjxiglyAc4MtEoKPTKV47Xl1uLaj1W8A=)
4: 9CA293D4580D11F180B976959F833773.roa (hash: ONaoAg3ne8zQW7Hrh4OQo3YPR+3Q7AFS+MZZLnbL8D8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Validity
Not Before: Jun 13 06:15:30 2026 GMT
Not After : Jun 20 06:15:30 2026 GMT
Subject: CN=6a2cf583-b6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:d3:6c:a2:5a:25:18:34:d0:0c:94:5e:0d:
a6:6d:3e:ea:9f:2a:cf:37:d9:9f:d7:a6:b5:06:1c:
8d:79:29:cf:e3:c2:0f:14:5e:3b:64:4e:7a:0c:97:
54:1a:2a:32:fc:e2:5a:a6:b7:ba:e5:a1:9b:f9:b2:
a0:61:03:f7:d4:db:a5:1b:50:27:a5:30:e5:4e:42:
8b:05:1b:3e:5f:8e:76:61:ad:d0:f7:0f:89:6e:e4:
e4:eb:61:eb:35:ba:01:2f:85:57:ab:9f:9c:3e:1f:
37:d8:dc:0a:ac:f0:e8:70:7a:bf:c4:fb:fe:b5:dd:
76:b8:e3:b6:fb:78:fc:cd:87:0e:f9:78:60:a4:6e:
e2:1d:3b:84:d3:b7:74:64:00:ff:26:bc:fe:07:a2:
c7:49:9a:9a:27:5e:ac:c8:5d:49:34:9a:bb:3c:62:
95:ac:6b:fe:76:95:e2:d7:f3:3f:d0:e9:61:72:fd:
aa:15:a6:fc:7d:51:2e:6c:c8:7f:3c:1a:5a:52:60:
2a:88:9e:fc:e0:28:6b:f9:a4:10:3e:1e:dd:c6:00:
75:e8:24:3a:43:cc:af:28:4a:24:64:04:64:c0:00:
5d:20:a1:cc:e1:09:f9:76:7c:64:4a:86:15:3f:b7:
03:ca:3f:d1:c4:b5:75:0b:b9:d9:fd:62:39:86:c1:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:46:D7:76:4A:C4:C3:42:3D:99:43:D2:74:67:B8:1A:C2:60:BD:36
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:48:63:3e:8f:10:0a:b5:98:21:f6:b1:2a:b6:ea:90:3b:45:
fa:79:bd:ca:6a:42:f7:88:54:f0:a3:bd:2a:42:1c:18:10:42:
77:e7:6b:47:7d:2c:76:fd:26:61:f0:1a:c2:da:5d:54:8d:06:
4d:ed:2b:6f:07:0f:93:2b:27:de:3d:cb:0a:ce:3e:24:44:b1:
bf:1e:aa:de:c6:c7:8d:cb:20:29:93:40:18:3c:57:5c:ce:7a:
0c:f1:7a:12:20:33:2e:8f:89:6f:9a:1e:20:95:ee:ac:42:ba:
88:bb:72:e1:1a:97:06:69:da:21:10:c5:16:9e:02:cd:08:70:
48:b2:2b:48:55:d3:61:20:3a:a3:21:59:a6:2b:78:da:43:bb:
cf:aa:7a:e2:77:e6:41:c8:0a:ce:1f:07:99:ce:87:17:15:42:
f0:22:1a:7b:da:02:8e:a3:e6:67:7b:a3:16:68:fc:7a:99:da:
8f:30:b7:76:3f:fc:ca:8a:cf:fa:a7:b3:37:e1:65:40:f1:09:
b2:65:c5:cb:f4:83:7c:4d:d2:c0:51:98:58:c9:1d:d4:58:16:
18:38:58:f5:87:d9:d1:8c:e7:dd:d8:df:f2:05:df:4b:e4:ee:
cd:13:d8:57:99:d0:0a:cd:e8:38:7e:85:f9:19:66:78:a9:fd:
cd:28:c3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:22 2026 by rpki-client