
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json)
Hash identifier: M/jCr9nC9DtwP3++tpexVZR7ZRxNpmoh5HjNoB71GXQ=
Subject key identifier: 2A:9A:B0:02:40:95:0E:93:6D:89:A8:CD:72:5E:E1:45:26:BC:A4:A6
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
Manifest number: 0259
Signing time: Sun 05 Apr 2026 01:52:01 +0000
Manifest this update: Sun 05 Apr 2026 01:52:00 +0000
Manifest next update: Sun 12 Apr 2026 01:52:00 +0000
Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: agCURTy5hR6N0ECwN0r/sQKb3LubeQL5ty51NbevYYc=)
2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=)
3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: aOKk9LCH0CUcXcS8w/DwIj3FtJbtCVyhM8kYs+mLuAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Validity
Not Before: Apr 5 01:52:00 2026 GMT
Not After : Apr 12 01:52:00 2026 GMT
Subject: CN=69d1c041-0228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:c4:33:f7:9e:bf:65:ee:27:a6:93:4f:9c:
e3:63:df:30:49:78:24:59:1b:11:de:52:5a:e2:4a:
32:f6:bd:ca:4e:fb:fa:e1:fa:a5:18:9a:5e:75:01:
c2:4f:1d:bb:6a:f0:d2:33:3c:25:5c:20:14:35:c4:
35:40:94:bd:c9:06:f0:db:51:4a:b8:66:7b:82:e3:
62:9b:69:ed:5f:0c:9c:72:24:7f:a5:0f:b8:52:ce:
76:ae:a9:ba:0e:f9:92:68:77:20:cb:98:5f:3c:87:
48:d4:10:e3:52:8f:85:6e:e0:e1:ef:f1:d0:db:71:
39:8a:02:69:91:b0:43:36:18:18:58:a6:f3:bb:8e:
04:51:b2:1b:de:5d:e0:68:a4:40:3c:55:0b:f2:51:
86:0b:c7:b5:7d:dd:72:9e:14:df:e5:ad:b7:ae:15:
b9:f6:db:5a:6b:44:43:5b:dd:04:f3:2d:17:92:ff:
19:e4:ad:92:c5:27:ec:01:af:f6:b8:ef:6e:0c:a0:
8d:15:cc:7c:31:e3:e0:7d:bf:c8:68:8f:dc:6a:c4:
36:9d:ac:39:ab:17:01:2d:47:11:41:da:56:1d:1d:
5b:e0:25:a6:64:1c:ca:4a:03:5b:31:90:15:49:60:
87:dd:a7:89:a0:7c:29:13:d0:b5:64:61:d6:da:3d:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9A:B0:02:40:95:0E:93:6D:89:A8:CD:72:5E:E1:45:26:BC:A4:A6
X509v3 Authority Key Identifier:
keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:8c:c6:1d:1a:53:1e:9b:87:78:50:24:76:ea:ae:01:28:7f:
ac:ea:8f:e1:1e:9d:d9:a1:20:76:93:e7:fe:23:38:8b:bc:9d:
ae:6e:76:8e:3e:84:5a:b4:22:b6:96:21:1f:3b:ca:7e:4d:3e:
23:7b:9c:72:5d:48:c3:7f:00:ce:86:65:12:3a:e9:37:88:e0:
0b:17:b7:10:02:15:86:f8:0d:28:86:2a:81:6a:05:7d:28:99:
19:f2:f7:c6:66:d5:f5:dd:87:45:04:4b:2c:ae:63:15:13:45:
4d:f9:bd:20:e7:d6:c3:5a:66:33:c2:f5:eb:b2:b2:28:92:90:
c2:2e:1c:cf:31:e1:68:c7:45:18:02:7d:0a:80:41:a0:d7:9d:
3d:e2:7b:36:ec:8b:f0:fd:56:fb:44:a8:3a:3a:6a:b4:6a:83:
8f:19:56:8b:10:08:5f:61:5f:b3:a4:8a:78:16:18:3b:98:a9:
e6:f1:48:20:11:57:44:67:d2:ad:43:54:a5:e3:70:2b:1a:a1:
14:de:1d:c7:28:e7:8b:15:9c:0c:96:9a:bb:73:c9:62:80:36:
f5:bb:c1:15:e3:3b:88:46:95:ed:54:86:8b:83:76:ad:61:1e:
cb:ab:8c:44:ba:f9:79:5b:26:95:bc:26:ad:f6:e1:8d:fa:4b:
aa:78:a8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:29:37 2026 by rpki-client