
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json)
Hash identifier: RfSyIoIP0+tVUitgaQIdP3LiYH/bBQXnEH0yMBQYYKg=
Subject key identifier: C6:5E:A6:3E:11:70:09:46:53:20:8C:9A:E3:AE:DF:51:36:AE:9B:A8
Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Certificate serial: 07D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
Manifest number: 07CC
Signing time: Wed 22 Jul 2026 21:58:24 +0000
Manifest this update: Wed 22 Jul 2026 21:58:23 +0000
Manifest next update: Wed 29 Jul 2026 21:58:23 +0000
Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: 6K3+XfqrC11zUBl9+/UGD0ypU7OaLncd6S/6pwKPyMg=)
2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: zBDrIrM5ZNmyGZZJoQehnFsEZgI4D/QOvG+mRLYkJ1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Validity
Not Before: Jul 22 21:58:23 2026 GMT
Not After : Jul 29 21:58:23 2026 GMT
Subject: CN=6a613d00-27f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:e8:fa:89:bb:75:3c:c4:d5:18:15:74:1a:
29:e2:79:15:2d:14:05:5b:91:d1:f4:de:3b:79:21:
d4:16:54:40:1c:92:5d:3b:05:8e:7f:dd:97:2c:a4:
67:f0:ae:6d:c6:4c:a6:f4:02:79:b2:70:e0:b9:0c:
4d:93:60:55:a1:b7:1a:d0:e8:78:38:f4:d7:0f:38:
b6:ec:0c:af:72:4c:11:cf:7e:6c:f7:d0:78:18:aa:
28:3d:3f:6a:f7:74:6a:ac:04:4c:f6:62:57:ea:b9:
e6:94:b5:98:e6:ca:08:7f:7b:89:79:de:9c:88:dc:
ae:5a:f1:c9:51:59:42:c9:f2:6a:4c:e9:4c:00:99:
fc:9d:00:c8:4e:1b:1c:3f:d6:a4:d9:1e:a4:a0:aa:
0b:25:92:f1:85:ad:b1:4e:c1:ab:57:38:29:68:24:
74:55:e6:21:e2:4a:80:0d:34:97:d1:2b:98:db:31:
c4:35:f0:6c:ec:44:b9:33:eb:26:c3:c9:c7:63:b5:
3c:a7:8d:ab:a7:be:85:95:b9:b7:38:37:08:44:2c:
b3:5c:60:80:53:b4:ab:f0:db:5e:2f:a9:7a:71:a9:
d6:9f:b7:d6:c8:62:0d:b2:40:2e:7f:ef:be:03:49:
bd:b1:af:fe:5a:6d:3f:25:63:7c:2b:75:6a:cb:ed:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5E:A6:3E:11:70:09:46:53:20:8C:9A:E3:AE:DF:51:36:AE:9B:A8
X509v3 Authority Key Identifier:
keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:90:1d:b0:c3:2b:5b:b1:99:8d:e3:d1:43:1a:bd:1e:52:de:
bd:6a:0a:e5:60:71:97:7c:05:e8:88:03:eb:ea:33:b5:25:1c:
45:f7:69:8c:21:5d:37:35:05:ff:08:c9:03:c1:11:99:4d:7b:
5b:7f:2e:66:38:5c:b2:25:96:9b:0b:3f:a2:14:9a:a0:ba:8a:
94:1f:f1:5c:16:dd:8d:56:04:13:1f:9b:9c:f9:12:5b:2d:98:
71:fc:5d:14:9f:c4:1b:88:6a:4a:59:d1:b0:21:b9:fd:7d:d5:
39:da:67:e1:c1:fe:98:06:e1:b3:82:19:93:e4:d0:19:df:db:
d0:63:f3:6e:f4:45:09:24:53:93:b1:9d:90:51:aa:e8:8c:d5:
6e:d0:a7:78:c0:3c:6d:4b:f8:5d:e1:01:4b:27:88:ef:a5:d7:
ff:e9:f1:fe:f4:fe:c7:94:b6:a0:08:84:2a:c1:e2:6f:3a:1d:
cc:98:de:b9:26:68:84:e4:e3:f2:cd:b0:84:fd:8d:c4:9f:e0:
e0:44:9b:91:c6:d4:b3:a1:8f:1c:db:eb:44:b4:d5:e2:db:84:
cf:84:f2:b4:01:ce:38:84:58:42:28:7b:9f:78:65:0c:a4:ee:
11:70:bd:9b:26:99:0a:7d:56:9c:9d:be:5b:2a:c9:c5:84:1f:
ef:e7:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:01 2026 by rpki-client