
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier: h+dk55Ei04aS26RaHru+T0oUKn/FtvRq4aVZRNLXhlY=
Subject key identifier: 6C:1C:E3:16:8E:CA:47:6E:27:49:42:46:4D:25:7B:B6:F6:4F:D7:BF
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number: 0130
Signing time: Fri 17 Jul 2026 07:07:05 +0000
Manifest this update: Fri 17 Jul 2026 07:07:05 +0000
Manifest next update: Fri 24 Jul 2026 07:07:05 +0000
Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: t/1jNBwK/6w5K+TFYyEQ0PfVLg5z335G1wC7xCZ9m74=)
2: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=)
3: 9CA293D4580D11F180B976959F833773.roa (hash: ONaoAg3ne8zQW7Hrh4OQo3YPR+3Q7AFS+MZZLnbL8D8=)
4: C19CD0D273CE11F18A0A8E6E86A30FBC.roa (hash: TyifwyRH2gwoNGS3cDGiNTSYF0ll70y1X64BGJ83VbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Validity
Not Before: Jul 17 07:07:05 2026 GMT
Not After : Jul 24 07:07:05 2026 GMT
Subject: CN=6a59d499-6f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:6f:83:77:68:1a:80:41:27:23:5a:63:c9:
1a:ac:b3:52:61:df:ee:55:00:9c:aa:58:23:1e:a3:
74:71:00:5d:a3:13:87:b0:f8:07:e6:fd:c8:ce:c6:
f9:ac:b1:cd:31:a6:e4:b1:64:b2:b1:6a:d4:3f:b5:
f8:1e:7c:72:2c:15:65:2d:e5:53:98:49:ea:45:ea:
80:89:c8:d0:46:11:36:a0:83:ad:cb:95:9a:07:e2:
11:71:ce:89:41:71:cb:50:d7:9e:90:f4:c3:41:f0:
4c:a3:40:bf:36:f7:88:a3:43:57:98:5d:c8:e2:c4:
52:0a:d8:6a:af:a7:39:43:75:47:1c:33:ca:1b:06:
b2:ad:42:70:12:d1:9e:8f:67:3a:c0:dc:8f:34:8a:
9e:f1:aa:81:fc:96:86:d3:01:cb:ba:1f:c1:0a:7b:
53:83:3c:de:e7:92:4a:66:27:d1:bb:8a:99:76:f2:
5a:1e:81:6b:e6:c0:c8:de:17:80:e5:0e:3b:6f:0f:
6f:b0:c7:a0:89:22:0f:c5:7c:3b:d3:28:00:7c:00:
33:62:c5:36:1b:cc:0c:35:fd:9a:65:8f:62:07:f7:
ac:76:30:3d:42:29:73:6a:18:34:b9:d2:a2:0f:d5:
34:94:22:5d:12:26:85:50:ce:2e:a4:90:ab:e6:1a:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1C:E3:16:8E:CA:47:6E:27:49:42:46:4D:25:7B:B6:F6:4F:D7:BF
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:62:c5:79:22:4e:eb:a0:e6:a0:10:67:25:a8:53:f3:98:31:
af:c7:05:3f:39:d4:38:73:1f:33:9d:56:86:8b:95:0a:46:bb:
da:0f:42:6e:94:7b:74:c1:37:59:da:8c:80:ce:7e:26:31:a4:
8b:2b:25:08:7a:26:c9:13:b5:da:3b:9d:3b:be:68:ff:3c:3a:
50:c9:eb:8e:c2:4b:be:6f:b1:02:94:c4:c2:ad:95:1e:6e:d4:
76:03:eb:75:65:88:37:0e:72:f2:62:d6:78:46:03:4b:0a:fa:
97:f9:57:6b:17:04:aa:3c:a8:7b:83:ce:00:de:a5:aa:c7:a9:
ae:48:5b:78:ce:e5:46:14:00:f8:25:90:af:2b:46:28:b5:8d:
5f:87:cc:4c:c5:d7:5a:29:34:48:e5:89:46:bd:d7:f6:76:ef:
6d:75:c3:20:27:52:14:8d:ac:9a:54:c3:39:31:90:94:e1:91:
58:35:78:31:93:50:e1:35:2d:0b:09:bb:62:7a:45:2b:fd:fd:
f1:eb:56:0f:1e:b7:f0:4a:f8:0a:8a:a3:48:d1:bb:74:56:67:
45:1a:19:80:bd:af:9d:a2:5b:f2:a5:8c:40:48:56:87:22:6f:
5b:4d:87:7f:b0:51:9d:f6:0f:db:8e:29:91:df:8e:f7:50:cd:
a3:6b:b2:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC
QjA3MzY1OTgwHhcNMjYwNzE3MDcwNzA1WhcNMjYwNzI0MDcwNzA1WjAYMRYwFAYD
VQQDEw02YTU5ZDQ5OS02ZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzX1vg3doGoBBJyNaY8karLNSYd/uVQCcqlgjHqN0cQBdoxOHsPgH5v3Izsb5
rLHNMabksWSysWrUP7X4HnxyLBVlLeVTmEnqReqAicjQRhE2oIOty5WaB+IRcc6J
QXHLUNeekPTDQfBMo0C/NveIo0NXmF3I4sRSCthqr6c5Q3VHHDPKGwayrUJwEtGe
j2c6wNyPNIqe8aqB/JaG0wHLuh/BCntTgzze55JKZifRu4qZdvJaHoFr5sDI3heA
5Q47bw9vsMegiSIPxXw70ygAfAAzYsU2G8wMNf2aZY9iB/esdjA9Qilzahg0udKi
D9U0lCJdEiaFUM4upJCr5hrEpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwc4xaO
ykduJ0lCRk0le7b2T9e/MB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG
MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS
OU5RckxXaEhKMHE3QnpaWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN2LFeSJO66DmoBBnJahT85gxr8cFPznUOHMfM51WhouVCka72g9CbpR7dME3
WdqMgM5+JjGkiyslCHomyRO12judO75o/zw6UMnrjsJLvm+xApTEwq2VHm7UdgPr
dWWINw5y8mLWeEYDSwr6l/lXaxcEqjyoe4POAN6lqseprkhbeM7lRhQA+CWQrytG
KLWNX4fMTMXXWik0SOWJRr3X9nbvbXXDICdSFI2smlTDOTGQlOGRWDV4MZNQ4TUt
Cwm7YnpFK/398etWDx638Er4CoqjSNG7dFZnRRoZgL2vnaJb8qWMQEhWhyJvW02H
f7BRnfYP244pkd+O91DNo2uyBQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:17:57 2026 by rpki-client