
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json)
Hash identifier: WKG6AwFF7Q0j8EEDWje0iLI2puHXxh+0rodyjR96cUY=
Subject key identifier: F5:CD:BB:06:42:39:36:53:2E:8F:5F:9C:E4:93:A1:EC:B6:8F:64:31
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
Manifest number: 01C1
Signing time: Mon 27 Jul 2026 05:54:16 +0000
Manifest this update: Mon 27 Jul 2026 05:54:16 +0000
Manifest next update: Mon 03 Aug 2026 05:54:16 +0000
Files and hashes: 1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: JpCs8jov1AZTDfe4zrv6qri+zWyYaL/EO1kdLSgM/FQ=)
2: 51030EF09B9C11F09447A92BC4F9AE02.roa (hash: VQq0sDcpuJnFq4v7msivZnAQEDugXoLmHOJKzCZD5yU=)
3: 197265906D4611F1B12173717447A888.roa (hash: 8jLOemqhrCZWF+sxmoyvLGoqN4WLvYF1aJetU9SxMZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Validity
Not Before: Jul 27 05:54:16 2026 GMT
Not After : Aug 3 05:54:16 2026 GMT
Subject: CN=6a66f288-9614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:08:37:9a:28:dd:50:ae:8b:9f:73:7f:26:
51:5f:17:ff:fd:be:ce:53:cf:81:7e:e9:89:36:44:
fc:e2:ab:92:ae:46:84:48:dd:17:a9:df:f9:80:95:
13:d0:1d:94:99:d1:45:10:90:12:5f:f2:5b:89:0a:
b0:da:70:03:01:3f:c6:12:71:fe:a1:4b:df:61:00:
c5:d4:0a:b2:75:00:dc:dc:00:21:c9:f7:0b:23:48:
3b:5d:b2:ce:bd:25:b5:4b:47:4e:ed:66:7e:ec:e7:
08:33:29:54:78:6d:ed:3f:17:11:c8:1c:6a:71:11:
b8:b9:c5:c4:5c:bb:5e:97:04:9a:91:0a:ec:0a:b9:
58:e7:0f:d0:1e:9a:92:03:1e:df:1b:c9:c8:ff:bb:
65:ed:f9:17:b8:2c:5a:51:e1:46:26:89:a4:d9:76:
de:bd:e1:ad:7d:42:cc:1c:79:a6:f4:72:bc:4f:6e:
79:17:46:c0:7b:a8:31:e1:42:b1:8c:39:ee:70:e7:
0b:75:3e:2d:dd:2b:cc:25:7b:e2:c9:7e:7f:fc:bb:
67:42:5e:b5:91:bc:43:c3:71:5c:df:5a:03:02:ab:
24:43:8f:20:aa:05:97:e6:0e:e0:db:3e:39:ed:a9:
40:c4:24:35:71:d8:54:bd:f1:77:45:81:49:fa:00:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CD:BB:06:42:39:36:53:2E:8F:5F:9C:E4:93:A1:EC:B6:8F:64:31
X509v3 Authority Key Identifier:
keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:eb:db:38:27:9d:37:6c:65:7e:b0:86:52:70:14:fa:84:2e:
70:97:f5:66:1b:ef:5a:a1:88:73:a3:db:76:72:5b:3e:4b:f8:
91:2d:77:b6:bf:4d:b1:42:44:09:c8:83:b5:d5:24:8f:b8:2d:
63:de:11:c4:9f:29:08:35:5b:5e:fa:d2:a3:e0:df:45:97:c7:
e9:58:08:d8:fe:5b:d5:17:4f:14:43:45:7d:9f:08:60:51:8a:
95:a8:d6:b3:31:e6:61:b3:2f:a2:6e:79:89:1b:af:30:cb:81:
92:fc:8a:3a:ba:cd:06:1d:ae:df:a3:1f:ce:44:4c:b5:e4:c8:
72:cb:13:5d:5d:25:cb:39:80:76:dc:7c:af:52:b6:b4:65:78:
c7:82:98:4d:f5:d3:4a:0a:63:82:8a:b4:c3:11:cf:5b:1a:fc:
a5:cf:f6:3d:e2:00:e3:21:19:23:35:fc:d7:c6:06:2a:7a:a1:
c7:1f:71:bb:c5:61:8c:67:a1:3c:b1:ff:11:3c:96:a4:ff:76:
89:c0:bb:b4:0a:08:6d:32:a4:11:40:52:94:40:89:f9:c1:db:
55:be:4e:cd:5c:13:e1:27:64:ec:64:45:6a:16:9d:0f:db:5f:
b2:1c:3a:6e:1e:ee:19:64:0f:a0:30:8e:36:8a:85:b7:19:3c:
50:61:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:32 2026 by rpki-client