
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json)
Hash identifier: Td3jd9imvl+vwZSgyUZpDtsMoTY1Yx6v/RJ6EhSs81w=
Subject key identifier: 8B:74:B1:8D:96:42:C3:75:4D:E8:B7:0C:38:2A:CA:FA:50:EC:B7:F4
Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
Manifest number: F8
Signing time: Mon 29 Jun 2026 06:57:25 +0000
Manifest this update: Mon 29 Jun 2026 06:57:24 +0000
Manifest next update: Mon 06 Jul 2026 06:57:24 +0000
Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: HzTnqZgkxyC8JvPkzGr64S+hkN9MRLJvl+YNWZQx9Zs=)
2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: R0DPi+gCEM4E0p+D/Qj5W33hKErsLZCVNvWPk/SawTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 06:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Validity
Not Before: Jun 29 06:57:24 2026 GMT
Not After : Jul 6 06:57:24 2026 GMT
Subject: CN=6a421755-3519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d1:5f:90:e0:06:c6:1a:f1:92:b2:f8:60:79:
76:3c:56:7d:aa:c8:1b:b7:4c:b6:12:3d:05:f5:3a:
28:45:9a:8c:9d:b6:72:6c:1a:3b:77:c7:37:11:5f:
14:40:f7:15:6c:9a:ea:70:8b:7c:27:82:13:0d:63:
5b:5e:19:33:49:7e:46:39:e0:a0:13:8a:7a:2d:af:
9b:75:4c:14:05:cd:09:54:77:81:3a:69:69:3d:ca:
67:d2:6b:99:8e:75:8c:07:b8:8a:18:d7:f7:50:3f:
e2:dd:3f:ec:c6:83:37:b4:1d:b8:2f:2c:fb:1b:ad:
98:2a:ac:74:82:80:34:41:58:13:85:40:12:25:32:
7d:c9:b4:e9:af:02:b4:7b:98:73:28:d2:16:5c:14:
a8:47:ee:b4:f2:7c:1b:fc:0d:33:56:66:96:c6:ab:
69:f7:a9:b6:ea:cb:df:f6:7d:8c:c5:c2:e6:bb:a7:
2f:54:27:92:ac:7a:6e:38:ff:60:40:32:d2:80:92:
da:74:b1:4a:dd:ba:33:e4:88:9e:b5:09:a5:40:5d:
f6:0a:f8:53:ee:ba:a3:fd:19:bb:36:56:b1:b8:a8:
39:19:33:14:3d:fb:35:f5:7a:bb:57:b3:c1:f7:67:
0a:4b:94:4b:65:ff:00:c1:30:4b:f1:2c:ec:74:58:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:74:B1:8D:96:42:C3:75:4D:E8:B7:0C:38:2A:CA:FA:50:EC:B7:F4
X509v3 Authority Key Identifier:
keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7e:5b:f7:33:a6:a0:0e:af:ca:e1:86:59:8e:f3:3a:ff:43:
bc:b5:dc:89:b2:37:e4:d7:5d:a0:ca:28:1f:68:20:51:44:45:
99:1e:23:d6:a7:b8:d9:f4:b6:25:26:53:2b:d1:ad:8f:99:56:
89:0c:85:a9:bf:c7:1a:d1:cd:b1:d6:8e:15:e9:01:d8:5a:00:
98:49:41:07:7e:31:1d:1f:93:5f:db:ec:13:b3:bd:d5:b3:97:
3a:10:4d:a7:26:57:4c:ed:30:77:bf:bf:e5:97:79:6a:51:ca:
34:9c:27:dc:61:a7:b7:8a:05:e7:01:28:9a:69:1e:12:46:07:
6b:91:28:86:6a:81:e0:cc:70:70:e1:98:88:ed:53:f1:6f:48:
35:f9:ba:d6:ea:f5:3e:c6:b4:16:d7:ce:d1:34:c9:54:a0:00:
02:34:ea:6c:09:2f:c5:be:60:db:5e:fa:af:06:0e:95:59:01:
bd:ca:59:48:e1:a1:f3:34:2e:a7:b6:30:9e:f0:1a:5b:64:5f:
00:ae:91:70:1e:2b:c0:66:51:33:42:5c:ee:93:c0:00:a1:7c:
97:f4:e3:3e:2a:bb:06:8a:9f:9c:36:4f:0c:57:54:bb:f0:e4:
cf:61:36:95:01:fc:11:0b:6f:3b:95:4a:13:01:66:09:89:98:
2d:89:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:45:10 2026 by rpki-client