
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json)
Hash identifier: BQ/ADwHnnwxsDsCwQt/UmPd+7NkUjwDVF1IRiaZrZqE=
Subject key identifier: 5F:F4:48:A5:ED:C5:4E:0C:B0:AC:79:60:36:66:E5:1F:03:69:71:DD
Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
Manifest number: 0137
Signing time: Fri 17 Apr 2026 05:09:44 +0000
Manifest this update: Fri 17 Apr 2026 05:09:43 +0000
Manifest next update: Fri 24 Apr 2026 05:09:43 +0000
Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: BSHs3x+BEdRNU9C0WHA9thyFgY00JSsmPhw2spnMCDc=)
2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: CXpCRLt60Gekc/Mc5tcE7Fr8HBob962lZTc++9cwTzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Validity
Not Before: Apr 17 05:09:43 2026 GMT
Not After : Apr 24 05:09:43 2026 GMT
Subject: CN=69e1c098-f845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:56:a1:3f:d0:77:f7:4c:b3:e6:f6:e8:7b:
1f:d8:26:46:02:c9:9a:af:36:7b:4b:21:27:82:38:
66:e6:f8:7c:f7:47:c5:64:82:78:c0:06:9c:70:6c:
8f:3a:b9:f6:7b:17:e9:cc:80:bb:e1:77:1d:65:a8:
fe:7d:c3:d5:b9:e4:94:46:5d:cd:78:0a:51:32:32:
2e:26:59:b9:2a:04:cd:5b:ca:ae:ba:a5:8f:33:85:
a4:92:f2:4f:41:59:d3:bf:21:81:a6:95:77:ff:db:
32:61:a0:d3:b5:55:c2:a7:02:64:80:0f:2f:e3:5d:
96:e0:8c:57:e0:6a:3e:eb:79:c4:fa:47:47:b4:cd:
4d:23:9e:95:bd:fe:a4:07:7c:b1:b5:0d:69:8d:d3:
74:6c:67:b4:d6:22:7f:ef:36:09:0e:95:e1:eb:24:
0b:fb:a0:ef:e0:62:58:87:8b:1a:67:d7:88:cd:31:
0a:b4:c4:c1:ab:2f:4f:89:77:39:25:ee:28:1e:11:
cc:7c:5d:15:8c:19:38:77:f3:85:fe:0e:c5:dc:8f:
e0:03:2e:5e:6b:f4:10:69:01:a0:76:f1:86:08:ed:
40:cf:a4:ff:58:53:8a:a5:31:65:bb:d0:58:0b:12:
71:7f:28:cd:90:3b:72:4d:d9:b6:fe:a1:ab:0d:d9:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F4:48:A5:ED:C5:4E:0C:B0:AC:79:60:36:66:E5:1F:03:69:71:DD
X509v3 Authority Key Identifier:
keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6c:f6:d4:32:89:0c:db:63:f2:5c:df:94:f2:aa:96:8a:74:
51:9b:01:8d:13:c1:1f:3f:ab:5a:cc:ed:4f:f7:54:60:08:38:
f8:e3:97:7e:af:c8:d3:a8:8a:2c:47:bb:09:1e:f9:50:05:91:
8b:b5:ed:b2:a1:b1:6b:21:4c:03:a3:cd:30:59:4f:26:20:3b:
0b:1c:73:78:99:45:f0:9f:0d:fc:0d:48:da:45:a6:da:96:d7:
cc:73:e5:26:f3:75:72:b5:17:d0:fb:27:7e:b5:30:68:17:eb:
a7:46:73:d4:85:8a:92:1e:30:3a:6d:5b:3f:0f:bd:3c:ec:44:
2b:ae:e3:10:20:96:3e:6f:48:5d:1c:e1:30:9e:73:3a:89:7f:
45:cf:eb:39:d3:d3:83:66:df:38:68:1b:c6:ae:72:2a:89:29:
c0:06:e7:f9:ff:4d:c0:50:df:45:5c:24:ff:d0:2f:ae:ae:76:
a5:57:ca:ac:50:e8:b8:96:91:fb:fa:3b:48:c9:88:29:da:30:
9b:be:9a:3b:8f:21:ba:b3:83:d1:73:3e:e1:27:72:29:10:aa:
f4:07:5f:81:c5:72:43:57:9a:ad:0e:b5:aa:67:62:aa:de:b0:
af:50:b3:74:38:0f:95:5b:fe:3a:e6:46:14:53:5c:77:50:0d:
ed:51:05:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:12 2026 by rpki-client