
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json)
Hash identifier: a2W5V08aWDyKSV5eQFLjyymFEAzUCljJ2MfST1A4/aU=
Subject key identifier: 72:A5:01:F9:68:AB:0B:C2:5C:63:45:D2:17:6B:41:66:C8:38:5F:57
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
Manifest number: 014A
Signing time: Wed 23 Sep 2026 05:09:04 +0000
Manifest this update: Wed 23 Sep 2026 05:09:04 +0000
Manifest next update: Wed 30 Sep 2026 05:09:04 +0000
Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: RsKlDkq57UN3qsraOaOFrEKV8c7XnYL2OIBTgUAPK8U=)
2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: gk55dQC8eTI12/UHwkyE0xAYw726BD8sevAqReEeCXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Validity
Not Before: Sep 23 05:09:04 2026 GMT
Not After : Sep 30 05:09:04 2026 GMT
Subject: CN=6ab35ef0-1f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:c1:a2:43:ec:0a:5b:b2:16:d4:80:d1:a5:
33:9b:ce:a6:0a:25:a3:09:d2:39:90:ab:57:a7:f1:
08:31:0f:8f:12:b8:53:0d:da:fa:11:01:3e:4e:51:
70:e6:01:ba:8a:49:8c:b5:8c:45:14:be:4c:ee:83:
0f:c4:05:81:a4:39:da:ae:98:95:14:cd:a5:9f:72:
b4:62:35:1b:fa:e2:74:bd:09:7a:f6:2d:79:92:42:
79:e0:88:00:d6:ed:bc:94:66:d5:86:d0:0e:cf:fc:
d8:70:bb:9b:c6:d6:3e:d0:21:5a:98:04:2a:e2:e4:
59:c7:0f:49:e3:bd:39:b4:82:2a:fb:90:5a:d2:94:
dc:80:a9:0f:2c:56:1e:42:c7:fc:a8:76:05:3f:cf:
6d:5e:b2:f3:17:5b:31:ed:87:48:2f:51:59:3f:d2:
a9:fa:e9:54:51:a0:04:c3:65:48:97:a5:89:2c:3c:
18:1d:2b:0e:b0:49:66:60:3a:b8:a0:25:96:ff:52:
e6:32:f3:85:c4:6b:11:6c:58:ab:75:1d:b6:b3:4e:
94:71:88:26:13:fe:17:6b:6f:6f:8d:40:5b:2a:29:
42:19:82:65:99:52:49:e4:0c:99:86:0f:1e:d7:a0:
f5:19:a2:e6:22:fd:07:fd:cf:19:38:d1:a8:a5:16:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:01:F9:68:AB:0B:C2:5C:63:45:D2:17:6B:41:66:C8:38:5F:57
X509v3 Authority Key Identifier:
keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:5f:11:07:2a:d1:f7:65:46:38:14:57:3c:70:a8:fb:c6:27:
45:53:ee:e9:01:0a:63:f5:15:33:36:db:0b:82:a6:6f:bf:98:
97:b4:35:43:5e:fa:a8:3f:f9:bd:45:24:d6:34:85:fe:37:31:
76:f1:e3:c2:51:e4:7a:90:e6:f4:e9:39:c2:81:f6:aa:da:f6:
d7:84:70:fe:4c:c3:05:40:2f:f3:1c:77:a3:99:e6:c0:cd:ee:
43:24:eb:e8:2b:62:02:76:a8:55:e5:3d:27:08:fb:1b:1a:9e:
63:0c:46:38:ee:3f:32:f7:77:7b:f3:9c:26:4e:f7:30:2c:cb:
41:7a:02:ce:1e:76:66:ef:40:65:df:2d:93:7a:4e:8b:f4:f3:
d9:3a:d1:86:37:1f:ba:b0:53:51:fe:00:a0:42:fe:cb:f0:71:
fa:e8:f0:b4:bd:b5:1d:d8:24:3a:8b:69:36:36:49:37:7c:ea:
bb:1d:0e:f8:50:2f:3d:6b:44:ae:6e:5c:00:ab:fe:dc:99:f6:
bb:48:7a:51:3e:ea:1c:9c:7b:5a:7c:f6:62:02:d5:1a:d2:75:
ba:59:10:10:54:60:b8:c2:6f:d8:a6:6c:77:05:16:7a:e2:65:
9f:d2:b2:77:ff:71:3e:bb:1f:70:e0:c4:16:82:53:a2:ea:de:
a5:e9:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:08:00 2026 by rpki-client