
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier: Bvzm80CsSVKs0xGbssvNghiK7I9G+FHBhTKJQauDj7U=
Subject key identifier: 92:45:9B:63:C7:86:32:2B:51:F7:E7:A3:3D:99:77:5F:3D:91:38:C8
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number: 014A
Signing time: Sat 05 Sep 2026 05:26:50 +0000
Manifest this update: Sat 05 Sep 2026 05:26:49 +0000
Manifest next update: Sat 12 Sep 2026 05:26:49 +0000
Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: FKosijop7G3pbdCv1UKs0A8O9vzuixpALW3vqSDRaSM=)
2: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=)
3: C19CD0D273CE11F18A0A8E6E86A30FBC.roa (hash: TyifwyRH2gwoNGS3cDGiNTSYF0ll70y1X64BGJ83VbE=)
4: 9CA293D4580D11F180B976959F833773.roa (hash: ONaoAg3ne8zQW7Hrh4OQo3YPR+3Q7AFS+MZZLnbL8D8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 05:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Validity
Not Before: Sep 5 05:26:49 2026 GMT
Not After : Sep 12 05:26:49 2026 GMT
Subject: CN=6a9ba819-7a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:ad:20:aa:62:fe:48:19:93:d4:05:95:32:
db:a1:ff:82:d8:6d:99:4e:d3:73:41:47:e5:2d:1c:
c0:94:fe:93:44:e2:bd:5a:60:12:51:15:d8:53:b7:
90:69:5c:52:2a:03:27:51:79:1c:2c:2f:85:82:8b:
51:66:04:dd:e5:20:f2:ae:e5:e5:bd:c9:f7:40:cc:
1b:2e:83:65:aa:6a:92:fb:38:dc:18:99:d8:7a:3d:
a7:30:38:73:37:07:fb:ec:7b:aa:39:7d:ae:5a:ef:
fe:dc:61:a9:77:74:cc:8f:65:a7:5b:06:39:91:8a:
28:d0:1a:dc:2f:af:dd:59:f6:1a:ad:67:ff:30:68:
e9:ee:9c:15:b8:8c:dd:bd:d8:00:6d:b5:94:43:47:
87:47:17:55:47:c3:fa:6d:82:ef:04:73:ab:08:70:
ef:bd:a4:70:b7:f9:f6:be:c3:e3:a8:a5:4a:59:13:
8f:da:ff:70:07:81:1e:c3:2f:84:95:62:aa:4f:6b:
02:60:b1:44:21:29:0f:f2:45:51:c8:ca:7d:78:14:
1b:be:cc:7b:37:44:8f:57:4d:e6:aa:9d:40:ad:d1:
0a:6d:37:ba:26:db:25:b7:d6:f9:83:bb:0c:25:9e:
b4:cf:17:18:79:3d:25:c7:45:a9:6b:35:8d:85:90:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:45:9B:63:C7:86:32:2B:51:F7:E7:A3:3D:99:77:5F:3D:91:38:C8
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:05:cf:f5:0f:74:8b:4e:86:00:7b:0f:89:42:bd:37:1a:c1:
6c:41:64:05:2c:29:9d:79:04:39:20:7e:c6:8e:e8:c1:be:b6:
b9:7d:f3:b0:9a:e5:8b:30:34:3f:cd:7b:01:b8:4f:1b:e9:20:
0a:55:01:30:b5:49:b0:f5:22:2f:b5:c9:17:ec:8a:09:5c:e7:
50:c4:d5:2c:6b:83:b4:cb:17:cf:86:b4:9a:1b:fa:d0:8a:59:
9f:ab:4b:8c:a6:d9:ae:3a:49:e3:11:98:04:2d:72:be:75:7f:
0d:00:5a:11:e4:ac:8c:5a:1c:c6:4f:82:bc:9a:da:fe:91:f0:
20:62:6a:ab:d4:d7:ce:04:e9:68:4c:19:13:79:9c:cf:52:cd:
46:7b:6c:de:b8:19:5a:44:9d:78:a7:4c:82:59:9a:68:79:24:
ba:cd:d0:fd:36:73:33:13:c5:0a:90:ff:84:2e:32:24:ba:ed:
d3:10:be:d2:e1:ec:74:84:ac:ab:8a:12:40:fd:af:7d:ec:85:
fa:94:df:63:de:1d:f2:03:82:05:9e:13:bd:0b:13:ac:4b:67:
94:62:41:e8:fc:32:02:82:3c:72:ab:b2:db:b1:c4:06:51:a4:
f6:6d:75:55:b7:17:74:f5:4d:97:d7:96:fc:44:30:e9:22:76:
e0:1c:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:22:02 2026 by rpki-client