
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json)
Hash identifier: rRGZnQzm/en/Ma+jAsgYoYNcYauqseb3kxOlbTu660g=
Subject key identifier: C3:3A:00:CF:C0:93:1F:EF:57:31:F8:5B:B6:DD:1C:25:C1:43:CF:51
Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
Manifest number: 012E
Signing time: Tue 13 Oct 2026 06:20:38 +0000
Manifest this update: Tue 13 Oct 2026 06:20:38 +0000
Manifest next update: Tue 20 Oct 2026 06:20:38 +0000
Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: ZgRRs3sYzKytRQfXMC1y5TQxPBztxmV0e3X91TN8FKw=)
2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: R0DPi+gCEM4E0p+D/Qj5W33hKErsLZCVNvWPk/SawTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 06:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Validity
Not Before: Oct 13 06:20:38 2026 GMT
Not After : Oct 20 06:20:38 2026 GMT
Subject: CN=6acdcdb6-b0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:d6:77:7c:6b:4f:76:98:a8:e2:4c:e5:10:
1d:a5:39:e8:71:b1:f4:89:ba:1a:2d:0b:8f:27:ff:
11:7a:7b:d3:9b:b4:ba:f7:56:da:28:04:90:52:89:
21:9a:c1:40:ca:a7:be:ce:c8:69:f7:ce:d4:db:27:
2c:4e:f3:88:23:f8:76:48:41:ed:1f:47:63:32:44:
09:7e:6e:45:14:47:a5:0e:47:25:b6:a3:d2:56:af:
76:51:0b:14:71:ac:fa:d5:62:e1:94:c7:4c:b8:c0:
76:ee:cf:00:3f:01:36:c2:8e:2d:52:30:ed:74:7a:
78:33:9d:69:76:a4:f7:6c:02:b8:a1:97:6a:5b:92:
e8:5b:8e:85:51:ed:a0:6b:ae:02:e4:63:f0:78:98:
66:fd:1b:e3:4b:7d:d1:6b:e3:34:e9:6f:e7:82:43:
f9:9e:b5:cc:13:41:ae:1a:d8:b6:11:43:fd:e6:f1:
74:f3:d8:c9:cf:66:e7:6f:bf:a1:d0:7b:9c:28:45:
30:8c:9e:ed:ac:4a:98:34:84:4f:c3:b6:9c:71:1c:
bd:f1:6c:49:6f:9a:3f:3a:31:f4:62:c8:ba:36:d4:
57:fe:3e:e5:54:83:f8:a6:df:f3:c6:04:6f:a8:c9:
5e:da:86:27:43:5f:0b:66:d8:70:da:2d:a7:c4:1e:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3A:00:CF:C0:93:1F:EF:57:31:F8:5B:B6:DD:1C:25:C1:43:CF:51
X509v3 Authority Key Identifier:
keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:30:9f:77:d2:c8:62:85:63:27:8e:8d:ad:ab:cb:2c:9d:0c:
42:80:7d:dd:c2:3f:3e:d2:9d:ff:95:24:8b:fb:92:b2:aa:7a:
92:ee:b6:c1:e9:d4:3c:ca:e1:cc:0d:79:51:c1:0d:56:11:66:
bd:4c:b6:90:0e:96:35:13:76:f4:87:e4:51:14:d3:76:7b:79:
e6:3e:d0:54:69:e4:0a:bc:6b:4c:9c:ec:ff:eb:67:80:c5:36:
fb:db:b8:e2:2f:3c:c8:07:0f:07:c7:e8:a1:40:15:4d:8d:1b:
32:62:2c:37:8c:eb:a3:a3:2c:4f:04:61:52:b5:55:26:aa:06:
57:5a:be:1e:d7:5f:c0:7b:18:fc:5f:7c:f8:8a:1a:c9:59:7d:
3d:b6:ee:53:6a:d8:74:2a:86:17:b9:7c:63:b3:d6:eb:a8:54:
0f:cb:de:68:e1:94:94:af:27:68:a0:51:61:85:75:38:3d:e0:
79:5e:8b:5a:92:73:b8:cd:f8:71:c1:8e:82:03:9d:73:2b:d0:
8d:1c:2c:39:db:3e:e3:9c:df:09:5d:15:7a:14:ca:7b:c1:e4:
be:84:ac:7a:c5:2f:8f:53:57:3c:97:3f:e7:f9:1c:08:28:7c:
cb:83:05:33:fb:47:b8:ff:cb:5a:79:86:2d:68:97:a6:af:7f:
f2:a5:08:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJGMTgxMTAvBgNVBAUTKENFRUE2NjM4MzU3NTYzQUM1NTc2OEYwMEQ4NEQyNzdC
M0E2M0M0NDkwHhcNMjYxMDEzMDYyMDM4WhcNMjYxMDIwMDYyMDM4WjAYMRYwFAYD
VQQDEw02YWNkY2RiNi1iMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0DnWd3xrT3aYqOJM5RAdpTnocbH0iboaLQuPJ/8RenvTm7S691baKASQUokh
msFAyqe+zshp987U2ycsTvOII/h2SEHtH0djMkQJfm5FFEelDkcltqPSVq92UQsU
caz61WLhlMdMuMB27s8APwE2wo4tUjDtdHp4M51pdqT3bAK4oZdqW5LoW46FUe2g
a64C5GPweJhm/RvjS33Ra+M06W/ngkP5nrXME0GuGti2EUP95vF089jJz2bnb7+h
0HucKEUwjJ7trEqYNIRPw7accRy98WxJb5o/OjH0Ysi6NtRX/j7lVIP4pt/zxgRv
qMle2oYnQ18LZthw2i2nxB6LBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMM6AM/A
kx/vVzH4W7bdHCXBQ89RMB8GA1UdIwQYMBaAFM7qZjg1dWOsVXaPANhNJ3s6Y8RJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkYxOC8wOTUwNDM0OEZC
NjUxMUVGQjQ1QTg5NjZDNEY5QUUwMi96dXBtT0RWMVk2eFZkbzhBMkUwbmV6cGp4
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1cG1PRFYxWTZ4VmRvOEEyRTBuZXpwanhFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkYxOC8wOTUwNDM0OEZCNjUxMUVGQjQ1QTg5NjZDNEY5QUUwMi96dXBtT0RWMVk2
eFZkbzhBMkUwbmV6cGp4RWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAezCfd9LIYoVjJ46NravLLJ0MQoB93cI/PtKd/5Uki/uSsqp6ku62wenUPMrh
zA15UcENVhFmvUy2kA6WNRN29IfkURTTdnt55j7QVGnkCrxrTJzs/+tngMU2+9u4
4i88yAcPB8fooUAVTY0bMmIsN4zro6MsTwRhUrVVJqoGV1q+HtdfwHsY/F98+Ioa
yVl9PbbuU2rYdCqGF7l8Y7PW66hUD8veaOGUlK8naKBRYYV1OD3geV6LWpJzuM34
ccGOggOdcyvQjRwsOds+45zfCV0VehTKe8HkvoSsesUvj1NXPJc/5/kcCCh8y4MF
M/tHuP/LWnmGLWiXpq9/8qUIyg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:09:21 2026 by rpki-client