
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json)
Hash identifier: C1tB8Sm4/1Q3XhdgUdB7LZ9/6f/nb5hPL9URGGgK61M=
Subject key identifier: B7:28:F1:F9:8C:09:35:CF:2C:20:DD:74:B6:44:DD:4E:26:52:29:87
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial: 03E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
Manifest number: 03D8
Signing time: Thu 23 Jul 2026 01:30:16 +0000
Manifest this update: Thu 23 Jul 2026 01:30:15 +0000
Manifest next update: Thu 30 Jul 2026 01:30:15 +0000
Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: cvoTHNGP+s5r4GLliNHp5IQ1YgxglaI9EISGclNK4+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Validity
Not Before: Jul 23 01:30:15 2026 GMT
Not After : Jul 30 01:30:15 2026 GMT
Subject: CN=6a616ea7-b7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:be:33:44:e9:cb:cf:ae:00:29:9b:3e:01:16:
89:be:61:b6:78:fb:8f:13:63:28:8b:be:75:6a:d4:
29:59:35:7a:53:5b:a5:45:b6:24:b4:88:f2:05:f7:
12:78:e5:be:60:54:02:fa:96:80:e4:f4:cb:00:00:
21:34:b7:f0:5d:c7:a4:74:f1:85:be:01:f5:1c:bf:
f7:d9:77:f8:f1:b1:63:c6:43:31:ea:9b:a9:91:a8:
d5:6f:65:2a:f0:b1:a6:c7:c8:35:bd:f6:1f:ae:aa:
bd:d8:53:ae:fa:de:41:92:43:98:e0:31:cc:d4:c2:
10:22:8d:d3:46:39:57:7f:db:ac:ff:71:26:56:57:
23:8d:ad:b3:6d:b1:67:43:af:36:70:6b:c8:ae:75:
b4:1c:7d:b1:bb:98:69:06:c4:b3:9e:96:3b:10:cd:
fb:65:a3:10:e8:1f:86:6c:c2:1f:fc:e1:6c:63:8d:
a8:0f:6a:07:00:6e:94:1f:84:50:d5:21:e7:13:27:
62:75:be:8d:2d:d1:9e:88:89:9a:12:c5:b4:c5:a9:
f3:b3:e3:9f:7a:ce:cf:76:02:61:8b:69:fb:08:b1:
d8:f6:9f:f6:e6:a4:0e:9d:3c:a7:ce:8e:c5:1d:e7:
9b:3c:a2:d6:7f:a4:38:82:55:a1:43:f9:d5:f0:da:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:F1:F9:8C:09:35:CF:2C:20:DD:74:B6:44:DD:4E:26:52:29:87
X509v3 Authority Key Identifier:
keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:95:da:63:03:3f:0b:94:69:98:53:85:09:fd:8b:5d:cc:86:
05:1a:85:31:cb:c0:2e:ea:e4:15:a7:1d:bd:a8:5f:3a:e3:24:
7b:15:96:97:a9:6e:ca:91:9a:13:10:4b:42:66:b6:52:30:35:
3d:94:ce:44:5a:7b:10:b5:3f:1e:9a:07:ea:7f:ee:11:9e:70:
11:50:b8:7f:d4:b7:72:33:7a:2e:2e:35:4e:7c:da:db:c2:87:
4a:c3:eb:48:ae:c1:96:e9:0c:12:cc:73:79:76:00:e1:48:49:
80:19:6f:0c:0c:92:6f:5a:c4:ab:0b:5c:57:7f:62:23:60:5c:
b7:d6:f0:ba:4c:71:0e:d9:97:5b:54:2f:e4:69:19:6f:ed:c1:
ad:61:05:fa:1b:ac:37:e2:0c:ee:b7:06:39:33:9f:77:63:1a:
d6:26:26:62:1d:10:53:b4:b8:a7:e7:93:96:6f:a8:fe:79:a2:
3c:d2:1f:c4:39:c5:bb:69:b6:cc:05:13:dd:6d:df:83:0d:e5:
99:bd:93:4c:72:cd:68:2b:7c:f1:6d:1f:57:61:d9:cb:bf:3e:
9b:1f:95:3b:10:23:b0:ff:11:6d:4a:63:21:4a:b7:c3:33:41:
df:cf:0a:43:ea:57:7d:2b:43:8c:50:c6:f4:2e:7d:2d:f7:18:
68:04:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:05:12 2026 by rpki-client