
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json)
Hash identifier: kf4TwH8IRoBIfBNkOAKOgwTKsYeBlZxsniWf8V31NQA=
Subject key identifier: DC:81:C5:6B:B4:42:19:79:6E:26:7D:F2:51:0A:A8:7C:E0:1B:A0:18
Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Certificate serial: 07B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
Manifest number: 07A8
Signing time: Tue 12 May 2026 21:33:18 +0000
Manifest this update: Tue 12 May 2026 21:33:17 +0000
Manifest next update: Tue 19 May 2026 21:33:17 +0000
Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: mjg4bjmSEPI6vYBojkpstNKbaEeoCfRPV/eILbE/rsw=)
2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: zBDrIrM5ZNmyGZZJoQehnFsEZgI4D/QOvG+mRLYkJ1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969 (0x7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Validity
Not Before: May 12 21:33:17 2026 GMT
Not After : May 19 21:33:17 2026 GMT
Subject: CN=6a039c9e-4a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:0a:dd:3d:91:e4:99:cb:a0:7d:3e:1e:9a:
44:a3:78:a6:3d:c3:93:0a:e7:72:04:68:e3:2c:02:
0c:9e:56:99:fc:0a:28:86:55:7f:c6:6c:71:21:2a:
4f:4e:06:d1:eb:e7:e9:12:bd:32:39:d6:2c:33:cb:
35:a2:af:d8:73:d7:f1:b1:a8:04:27:b1:d1:7f:f2:
25:32:bf:4f:4a:0d:93:4a:21:6f:95:50:a5:7d:ac:
56:b0:88:1f:6e:36:74:c0:5d:46:5f:2a:71:65:66:
58:81:d2:01:3a:d3:15:b2:79:d3:b0:0e:39:b2:6d:
4e:48:50:3e:05:66:48:50:2e:24:49:41:15:3e:7a:
34:54:66:84:b5:b4:bc:6e:5d:1b:19:a4:dd:03:21:
88:bf:68:21:e9:60:03:bd:3e:8c:91:cd:3b:89:bf:
47:34:91:4e:3d:a6:69:36:63:0f:6e:e8:88:92:bf:
6a:7b:11:49:3d:53:c2:3b:d6:c7:02:b3:ab:45:a5:
00:c5:e9:78:74:b7:7e:fa:09:b6:fb:a7:54:17:e7:
b4:71:92:b8:06:0a:df:ff:06:61:f6:69:66:30:15:
c6:b9:77:57:cb:66:0e:f9:8b:a4:b8:b8:bc:cd:76:
aa:c3:a8:eb:87:86:bd:7e:30:27:aa:85:d1:5f:57:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:C5:6B:B4:42:19:79:6E:26:7D:F2:51:0A:A8:7C:E0:1B:A0:18
X509v3 Authority Key Identifier:
keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:71:ae:35:ef:56:81:c2:5d:0d:59:81:97:35:1e:db:9c:ef:
59:0c:6b:ed:6f:8b:cd:57:c3:6f:4b:e5:2f:cf:3c:d6:17:6b:
e8:df:e3:b4:fb:e9:e3:77:a8:5a:05:aa:b2:f6:13:aa:f5:6b:
63:51:04:78:4c:cc:95:a3:4d:4d:de:e1:a7:ff:85:93:7e:62:
c4:08:37:55:1d:d7:ae:e9:c4:5a:1f:86:e8:34:7c:c5:aa:dc:
ae:37:16:4b:f2:1c:d1:dd:9d:d7:a7:20:2b:54:26:d4:84:2c:
d0:d5:52:63:e6:23:6d:f9:59:fe:49:94:05:b1:5b:fa:21:46:
18:5e:0c:63:7f:9e:18:7d:86:21:36:9e:99:d5:21:26:ca:80:
4f:3e:04:27:66:ed:49:ab:60:c0:2d:3d:c3:60:19:43:5f:43:
09:fc:e8:91:a1:e2:bb:eb:82:a1:b6:14:7d:af:97:44:aa:30:
47:64:7c:c5:97:9d:d2:a6:56:47:18:48:e2:0d:21:86:5c:a2:
b6:92:f8:96:20:e6:aa:28:76:d2:ec:e8:64:73:a7:1d:c3:01:
9e:a2:7f:17:7b:fd:a3:03:ae:4d:b5:9c:57:d3:cf:27:b2:14:
c8:55:f9:7b:6a:54:df:8b:94:29:7c:fa:83:39:71:1d:b9:20:
84:fe:3a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:31 2026 by rpki-client