
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json)
Hash identifier: C611Ywiv4zAjfEzyb5znp7Eb6j2T7bDMlcI2lgeSXlA=
Subject key identifier: 7B:38:FA:26:89:0F:09:DE:D2:B5:3E:6D:9D:43:78:32:23:46:07:A0
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
Manifest number: 0245
Signing time: Sun 01 Mar 2026 03:12:43 +0000
Manifest this update: Sun 01 Mar 2026 03:12:43 +0000
Manifest next update: Sun 08 Mar 2026 03:12:43 +0000
Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: gQwKxzPzPHSrKWa1K6njQm/ev9BkNvG04e9IwZGBzlE=)
2: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: VApl5gOnxtdCywBPMR0dXxKkqk3t+bnPo30E9g9b6bA=)
3: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5MB2PDcakDg/26VL0TUZlY6MMrD+mZ34XPyyIZou81c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Validity
Not Before: Mar 1 03:12:43 2026 GMT
Not After : Mar 8 03:12:43 2026 GMT
Subject: CN=69a3aeab-755a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:fa:50:21:21:17:14:13:d5:dd:2f:0a:a8:
a0:a8:2c:d9:f8:de:c7:83:22:6b:f1:0d:36:79:9e:
f3:af:1e:f3:c2:f9:fd:72:2e:e1:21:84:67:73:c3:
6b:45:44:22:d3:3f:48:8c:2a:7a:95:3c:51:8a:06:
82:84:ee:4e:e7:fd:90:c8:bc:40:b8:01:64:01:3a:
d6:40:a5:38:78:b0:41:c4:9b:35:eb:9a:e3:af:4c:
67:ba:be:45:5c:f1:34:3e:2f:8a:88:ac:29:f1:7d:
44:8a:95:5c:40:fa:bd:09:7d:18:72:12:3f:4b:6e:
f7:e5:46:b7:d5:64:78:2e:f2:90:6e:a5:51:3e:e4:
a7:06:05:98:b4:37:9a:bf:85:e0:05:db:90:dc:c5:
6d:1c:09:23:b6:8b:fe:92:b7:6c:cc:fa:ef:c1:0e:
94:48:f7:7d:d8:06:1d:2d:74:66:a0:82:ca:fb:51:
09:60:85:c5:94:8a:cc:ba:e6:83:5a:4d:59:1c:9e:
c6:77:7c:83:4b:40:09:4d:6e:7d:28:dd:26:ed:6f:
49:7a:76:4a:02:ff:08:21:bc:f6:dd:63:92:a8:8e:
5c:b6:3c:df:85:39:b3:6b:f8:ae:6d:71:21:55:75:
10:f8:0f:ba:c2:17:05:69:a6:aa:09:3e:26:b7:00:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:FA:26:89:0F:09:DE:D2:B5:3E:6D:9D:43:78:32:23:46:07:A0
X509v3 Authority Key Identifier:
keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:f9:34:61:ee:ee:e0:70:8f:19:ed:85:48:26:04:12:fa:a5:
96:d8:cc:9b:6d:83:c8:75:fb:d9:24:0c:df:02:2c:cb:71:86:
85:ad:6f:e9:9c:de:a8:2e:53:01:06:67:3b:f2:32:96:1b:06:
cf:4d:cb:08:b5:30:a8:1d:a8:a7:f8:a8:4d:bf:96:f5:0a:6e:
af:34:3d:11:5f:0b:0f:ef:8f:7d:aa:e1:15:fa:fe:a7:09:09:
f4:03:af:f0:50:23:bf:81:63:2b:d3:d1:42:1e:bf:d4:3a:79:
40:1c:4d:9a:20:74:e6:a5:fb:bc:73:a3:28:ee:7d:e2:f4:25:
ad:8c:6e:50:b3:9f:a5:4f:ff:dc:51:ee:c8:1f:b9:0e:37:17:
13:9c:25:96:30:10:82:b8:24:3b:90:94:c9:cf:1c:f4:da:02:
b5:3a:09:42:49:4d:68:9b:b1:b6:26:08:83:b5:3b:57:c9:50:
4c:bd:54:e7:39:65:37:c5:9b:1e:8a:64:11:0d:4b:95:3c:bd:
e2:d5:62:3b:5f:f1:4e:1a:c0:38:29:a8:ef:ff:ce:bc:cf:9e:
37:f9:de:4c:93:6c:d5:3d:59:7b:ac:72:b7:e7:87:66:65:a1:
ae:4e:e5:4c:80:e6:a4:c7:4b:53:e6:81:06:7c:78:96:0b:59:
b3:e3:df:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:00 2026 by rpki-client