
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier: ljsBNdgqrW1LLPDfY4gLF5wzwqfSIBQW9InCh/9ugEU=
Subject key identifier: 0E:04:12:5B:F3:BA:2A:3C:99:C0:D2:45:DF:01:96:91:5B:AA:5D:A9
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number: 94
Signing time: Thu 23 Oct 2025 08:41:45 +0000
Manifest this update: Thu 23 Oct 2025 08:41:44 +0000
Manifest next update: Thu 30 Oct 2025 08:41:44 +0000
Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: +HWT+uuD6h+kNBJtxgGEjQLuRnv8d7QL/T4AELcIUFY=)
2: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=)
3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=)
4: CAB9B360E20211EF80FC810DC4F9AE02.roa (hash: 65X5sPIhdKM1lp6V7hevZEuaDbWujUAm7MoeXT80kOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 08:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Validity
Not Before: Oct 23 08:41:44 2025 GMT
Not After : Oct 30 08:41:44 2025 GMT
Subject: CN=68f9ea49-fcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:2d:d2:2c:d8:a8:e2:9d:ad:f2:46:09:76:
69:19:bc:f9:99:ce:ff:77:e1:fb:70:fd:72:fc:4c:
dd:1e:31:7d:4b:fb:0a:41:6f:35:9d:8f:54:1c:22:
83:49:2e:2e:19:8c:dc:6f:35:4a:20:a4:8f:4b:c7:
9b:b9:d4:72:e7:92:be:f0:dd:e9:66:e5:e0:86:37:
65:af:3f:cf:5f:72:64:5c:dd:d2:6c:57:5b:aa:ae:
8e:c1:24:0b:03:90:34:81:f8:1b:a3:0b:3e:04:a4:
6b:c2:69:7b:54:01:0c:31:dc:92:06:aa:8e:a5:22:
0b:1c:e9:0b:35:01:af:fa:10:4f:f3:18:c0:07:a0:
bb:db:e3:f4:ba:2b:92:23:d2:96:7d:af:ec:72:fb:
61:d5:cb:5a:34:b0:a7:d5:54:03:68:00:af:f7:96:
fa:88:d6:4f:94:67:4f:3d:58:5c:65:aa:01:62:39:
81:58:b3:e2:b2:d2:5b:f6:84:38:6f:1d:cb:f3:b6:
d7:ab:38:76:c7:58:37:39:fe:d5:20:33:34:b1:b0:
79:59:c2:a1:03:af:d4:55:2b:79:6c:4b:a6:fa:3b:
8e:1f:83:b3:17:87:d5:98:b7:7f:df:67:ab:02:86:
76:f4:9b:56:a8:5d:69:43:2d:e0:e2:d2:b2:52:68:
f7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:12:5B:F3:BA:2A:3C:99:C0:D2:45:DF:01:96:91:5B:AA:5D:A9
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:95:f6:9e:ed:bf:1b:1a:e3:0c:e0:2b:00:22:cd:bb:ab:3a:
c4:ed:5f:90:1c:81:3c:21:ab:8f:92:ce:e5:79:38:2a:78:1f:
84:55:13:16:44:fa:d5:5f:50:73:78:a2:60:39:fb:f5:57:4d:
e5:f3:e5:97:fe:f9:ae:05:a0:4f:9b:7e:0f:32:2e:2f:34:e7:
15:3b:0a:7b:21:2c:ec:ea:35:4a:89:14:8f:7d:9c:99:56:80:
77:a9:c2:e9:f4:5a:56:83:ee:35:74:94:87:62:c9:79:20:1e:
97:8f:d7:09:ac:b7:91:98:46:61:e8:62:70:b7:42:f1:fe:44:
28:b2:2d:62:30:0b:f1:16:b0:3f:f0:67:4c:9d:1c:d0:4d:e2:
95:74:41:37:41:d7:eb:53:14:26:24:2e:a1:69:61:4c:87:9c:
d6:5f:4f:72:f5:5b:76:89:6f:0b:26:10:9d:96:5f:4e:fa:1b:
0b:12:44:49:0b:ab:97:bf:b2:31:00:8a:07:35:fa:12:2c:ce:
4f:ad:98:ca:8d:ab:c3:13:0a:7d:f0:75:b4:2f:19:7e:2a:1e:
f4:a1:34:42:db:7c:33:b4:e6:77:70:b1:81:b5:f0:a6:56:59:
e3:3f:13:41:db:48:d3:0e:fd:5a:54:da:c3:5a:b7:9b:de:a8:
b7:c6:34:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC
QjA3MzY1OTgwHhcNMjUxMDIzMDg0MTQ0WhcNMjUxMDMwMDg0MTQ0WjAYMRYwFAYD
VQQDEw02OGY5ZWE0OS1mY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnG4t0izYqOKdrfJGCXZpGbz5mc7/d+H7cP1y/EzdHjF9S/sKQW81nY9UHCKD
SS4uGYzcbzVKIKSPS8ebudRy55K+8N3pZuXghjdlrz/PX3JkXN3SbFdbqq6OwSQL
A5A0gfgbows+BKRrwml7VAEMMdySBqqOpSILHOkLNQGv+hBP8xjAB6C72+P0uiuS
I9KWfa/scvth1ctaNLCn1VQDaACv95b6iNZPlGdPPVhcZaoBYjmBWLPistJb9oQ4
bx3L87bXqzh2x1g3Of7VIDM0sbB5WcKhA6/UVSt5bEum+juOH4OzF4fVmLd/32er
AoZ29JtWqF1pQy3g4tKyUmj3TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4EElvz
uio8mcDSRd8BlpFbql2pMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG
MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS
OU5RckxXaEhKMHE3QnpaWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMlfae7b8bGuMM4CsAIs27qzrE7V+QHIE8IauPks7leTgqeB+EVRMW
RPrVX1BzeKJgOfv1V03l8+WX/vmuBaBPm34PMi4vNOcVOwp7ISzs6jVKiRSPfZyZ
VoB3qcLp9FpWg+41dJSHYsl5IB6Xj9cJrLeRmEZh6GJwt0Lx/kQosi1iMAvxFrA/
8GdMnRzQTeKVdEE3QdfrUxQmJC6haWFMh5zWX09y9Vt2iW8LJhCdll9O+hsLEkRJ
C6uXv7IxAIoHNfoSLM5PrZjKjavDEwp98HW0Lxl+Kh70oTRC23wztOZ3cLGBtfCm
VlnjPxNB20jTDv1aVNrDWreb3qi3xjRt
-----END CERTIFICATE-----
Generated at Sat Oct 25 04:24:24 2025 by rpki-client