
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json)
Hash identifier: i7a879xQAPvT6mqHBHKHNQANmBCJJ971h0x3g//iSn4=
Subject key identifier: B3:A7:D0:B9:9D:D4:79:10:D5:20:BA:61:59:A9:E7:67:49:AA:58:85
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial: 03A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
Manifest number: 039B
Signing time: Wed 25 Mar 2026 00:27:40 +0000
Manifest this update: Wed 25 Mar 2026 00:27:40 +0000
Manifest next update: Wed 01 Apr 2026 00:27:40 +0000
Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: MxF+xyhiMMJoU6mO3HZovZzMnMAgh0Tm4Ck5cA6sulM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934 (0x3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Validity
Not Before: Mar 25 00:27:40 2026 GMT
Not After : Apr 1 00:27:40 2026 GMT
Subject: CN=69c32bfc-d84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:13:1f:f2:37:d3:47:51:8d:a4:48:6f:2b:
c9:ef:c6:cf:9d:f5:7a:65:81:4e:bd:eb:d0:33:c0:
7a:f5:7a:c4:a4:0e:8a:2d:a3:2e:1e:c0:17:cd:a6:
8e:a1:9c:37:3b:62:1e:38:28:57:91:81:b0:cf:ca:
ac:cf:9c:fb:86:2e:e9:9d:37:62:0b:6e:60:f1:6c:
4c:a3:07:82:1b:0b:cb:04:9b:cb:87:c0:5a:a8:3a:
39:b6:e5:ac:80:32:59:8b:7c:70:e3:b7:28:8e:f3:
ae:8b:0d:59:80:88:af:5f:d0:04:8d:03:de:79:ae:
56:76:f4:a5:b6:5a:ac:fb:a7:63:41:33:18:72:c8:
e2:10:e4:fa:4c:4a:df:54:14:93:79:ce:2c:6a:5d:
ce:0d:f3:34:d3:47:8b:7c:cb:ea:ae:79:d0:e2:95:
a4:94:64:04:bf:12:50:ea:2c:34:51:4c:7d:60:e3:
d4:d6:ae:a6:35:29:74:0e:f3:29:b7:55:78:00:3f:
e3:3b:07:3b:77:4d:06:27:b6:e2:05:96:9e:68:c3:
b1:27:fd:d5:6d:38:4f:54:fc:b7:a1:9f:ac:43:be:
88:f3:18:d8:d2:78:2c:46:d6:79:6a:13:c1:1f:10:
9a:82:14:a3:c0:ac:7f:82:c3:e5:2b:1b:fa:e8:04:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A7:D0:B9:9D:D4:79:10:D5:20:BA:61:59:A9:E7:67:49:AA:58:85
X509v3 Authority Key Identifier:
keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0d:8c:1b:08:76:22:91:17:ac:01:6c:93:7b:db:74:a0:f1:
7c:36:28:54:d0:d5:a1:dc:15:76:cd:39:7c:10:98:f2:26:c5:
4b:1c:51:43:47:14:54:74:d3:1f:99:40:e0:5f:a0:34:77:e8:
b2:f3:ed:22:3e:0d:72:9b:3e:78:04:65:8c:fd:a3:bc:67:6f:
07:ce:f7:06:58:f8:90:d1:4a:4b:03:c6:34:70:d0:dc:6e:ca:
dd:e9:68:d8:ce:50:1d:12:48:48:42:49:f2:48:8a:b2:c5:cd:
d2:87:7d:a0:3a:b9:ba:50:71:39:86:5c:02:ac:3d:9c:bd:2b:
e6:bf:63:17:a8:b7:4c:84:8b:29:91:9e:be:66:49:6a:a8:d7:
b5:75:d8:08:78:1c:a3:88:42:af:6c:3b:31:fb:17:9b:61:9a:
b1:ba:32:3c:38:4b:0f:d1:1c:2a:8f:b4:46:fe:f8:08:a0:94:
24:97:1f:45:3b:15:a3:b1:e0:23:9a:be:6c:9f:08:8b:3c:67:
3d:d2:be:1d:6e:bd:74:d2:a4:d4:e8:47:b3:83:61:2f:0b:ef:
54:4d:a6:93:21:47:79:c6:84:f9:f1:17:62:23:65:34:d8:b5:
c9:28:26:38:b9:2e:c0:85:c4:51:13:ee:df:e1:6a:87:b1:04:
e4:82:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:55 2026 by rpki-client