
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier: KVK5bbhGDkjEzHmirfldrKtdc3u76MXiH9+gii8nKTA=
Subject key identifier: 7E:85:57:03:0E:56:26:FB:39:35:02:90:CA:E0:14:F6:F7:BE:4E:5B
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number: 016E
Signing time: Mon 11 May 2026 04:50:24 +0000
Manifest this update: Mon 11 May 2026 04:50:23 +0000
Manifest next update: Mon 18 May 2026 04:50:23 +0000
Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: 955UxUl6OW5gFVN0/pTEu+8qjRBUhrU9dO+cUVqcT4w=)
2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: E315WW0WaEtv5nqU/xmLAkhLxUnKQm864OEvRTAgO9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Validity
Not Before: May 11 04:50:23 2026 GMT
Not After : May 18 04:50:23 2026 GMT
Subject: CN=6a016010-b54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:86:71:9d:39:f7:4b:50:50:fa:b2:36:02:
ea:3b:67:96:45:b6:0e:e8:54:d9:0d:76:e2:0f:96:
84:c2:7e:09:e0:20:61:09:85:8b:5b:03:12:68:b6:
ea:f8:2d:db:4b:f2:b5:ae:bc:de:8e:32:3c:00:ff:
95:84:4b:7a:b6:6d:41:1d:aa:68:58:5a:93:a4:1f:
04:62:fb:97:4f:24:40:80:38:3e:34:95:2e:50:0d:
6e:71:c7:37:5e:0f:b8:e6:bb:24:53:7f:34:ef:54:
24:82:54:22:a4:65:70:9f:d7:45:c6:19:6f:31:53:
42:77:da:72:28:53:67:4f:0a:b8:72:4b:ef:d0:99:
e0:ba:61:66:f5:dd:e1:93:b9:28:2e:67:2b:79:f6:
3c:44:23:1d:89:e1:6f:51:a0:22:8e:dd:97:f3:79:
49:a3:db:e6:ce:3b:1c:cf:b9:0b:8a:69:2b:cd:5c:
a8:ab:d8:ad:1b:07:8f:b9:8a:f1:b4:dc:19:fb:00:
1f:e2:21:8d:8a:5c:40:b4:e1:45:3d:e5:01:f8:e3:
16:20:93:ad:c2:5b:d2:4f:75:52:c8:70:30:1b:64:
0b:4e:ce:a0:84:5d:d3:db:a8:4b:ed:e0:06:44:47:
55:96:a1:b1:07:c4:5d:19:c7:50:27:f2:06:2c:09:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:85:57:03:0E:56:26:FB:39:35:02:90:CA:E0:14:F6:F7:BE:4E:5B
X509v3 Authority Key Identifier:
keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:b3:9b:df:0d:6d:7b:6a:e3:f6:7c:29:76:78:ea:ef:01:35:
54:2a:48:b8:64:0b:ef:a3:a2:47:ee:b9:8c:ed:b7:8e:a7:3f:
e7:1c:2c:d7:e7:66:56:aa:c8:80:93:8f:e7:fe:e7:26:53:aa:
11:c6:38:87:1a:a3:4a:48:9b:22:5f:31:cc:8d:be:6a:53:c7:
d7:0e:c3:ad:69:ab:39:5a:c9:0e:c0:70:7e:b1:90:d4:7e:63:
4f:6a:14:a7:2a:4a:78:7a:49:66:8e:27:7a:58:7d:60:e6:01:
e3:38:7e:c9:dc:9f:c0:f1:54:c8:dc:d3:24:44:2c:cb:d2:7a:
37:96:f0:cd:66:9c:75:08:70:60:ee:7e:41:da:7e:63:25:41:
97:68:f0:b6:70:e0:8d:f2:47:2e:7a:5b:dd:1a:ad:7a:c9:2a:
13:eb:d6:1c:ac:57:0c:49:64:6e:48:17:4d:6c:80:c4:f1:82:
cb:11:6b:82:60:48:a8:26:b4:2c:8f:37:8c:97:9c:2b:cd:c5:
46:a9:41:c6:0d:c6:97:34:56:25:12:21:6d:ec:a7:94:08:4f:
9a:b3:c7:1f:bb:0a:c0:73:fc:18:f6:de:34:95:49:78:b6:3f:
89:72:b3:a9:c4:65:05:aa:4b:65:4c:c4:e8:40:e3:af:7a:47:
41:c5:98:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:10 2026 by rpki-client