
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json)
Hash identifier: tU7vSyiauA+dCutBbECnDDRjhPb/0RkTenI3+xFAzXo=
Subject key identifier: EA:8C:6E:14:93:91:5A:FD:CC:7B:56:90:74:61:41:10:75:49:F3:91
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial: 0D01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
Manifest number: 0CF8
Signing time: Tue 12 May 2026 18:15:26 +0000
Manifest this update: Tue 12 May 2026 18:15:26 +0000
Manifest next update: Tue 19 May 2026 18:15:26 +0000
Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: NtEReEBpFOiMSlr1HIn1s//lD2dN5vWoC8xuPvHKx6k=)
2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3329 (0xd01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Validity
Not Before: May 12 18:15:26 2026 GMT
Not After : May 19 18:15:26 2026 GMT
Subject: CN=6a036e3e-508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:17:ef:a9:d2:b7:6b:bd:40:4a:34:e2:dc:
83:48:ab:64:12:49:14:8f:4b:d2:43:45:d9:ad:5a:
4d:93:df:bb:f9:c8:60:c9:bb:e1:5c:03:b7:25:b4:
2e:51:c5:73:0e:f9:07:6d:2c:55:d7:a2:ce:92:96:
d8:89:40:31:32:cf:c3:0d:c8:71:ef:f2:18:f4:88:
7c:3b:1f:9e:84:2a:9c:d8:26:28:22:bc:15:4a:c8:
e8:8f:2b:21:71:10:71:4c:68:6c:56:51:57:b4:e4:
bc:b3:76:ed:de:b0:ee:8d:9b:c7:bf:a0:a2:d1:72:
f2:93:81:11:28:3d:68:db:9e:14:95:f8:cb:e2:55:
82:55:0a:81:ec:24:2b:ea:55:20:ff:25:d1:54:f8:
8d:0a:da:9c:ef:6e:2b:4d:80:b1:70:1e:31:5d:c8:
48:ae:b8:1e:ec:28:10:a0:1e:c8:eb:73:50:cd:88:
00:30:b6:d3:3c:49:87:e5:79:c8:99:cf:d5:76:78:
17:b1:1c:7c:a0:ad:56:da:b8:17:d2:d4:4a:75:0c:
36:6e:5b:e1:b9:93:16:db:a6:90:08:ed:0e:ed:43:
fd:6d:17:9b:87:9c:fe:04:69:57:09:e9:44:c2:ec:
b4:58:50:b1:78:cc:89:60:fe:24:44:32:7b:fe:a5:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8C:6E:14:93:91:5A:FD:CC:7B:56:90:74:61:41:10:75:49:F3:91
X509v3 Authority Key Identifier:
keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:3a:3d:d1:42:e4:df:0e:a7:e4:b1:86:11:c9:b8:c8:40:95:
de:b3:8b:5c:2e:96:17:e6:d0:5d:c4:ee:93:35:68:fb:0d:62:
02:de:96:f3:98:05:63:69:e7:7e:4f:72:48:b2:fb:e8:c3:f4:
23:b2:b7:4d:56:9f:2a:d1:35:09:d6:8b:53:f6:11:13:3c:e6:
da:3f:a7:41:5c:11:0c:e2:a9:f9:2c:86:ef:3b:70:14:11:0b:
e0:62:8a:f0:7a:20:be:5a:87:8e:45:16:29:d2:67:c1:45:74:
a1:8a:af:27:87:64:c8:3e:72:e1:54:79:51:f7:1c:ec:d5:5f:
51:dd:b4:34:63:d8:d2:e9:01:52:5d:e4:03:21:30:a8:58:61:
0b:0f:3b:82:02:fb:40:4d:e5:b3:95:fe:77:6d:e2:a6:57:98:
74:8e:22:72:72:b6:4d:5d:42:33:e6:ff:12:35:a8:4a:2e:e1:
03:b7:e2:b9:dc:54:e2:11:3d:a7:16:31:bc:61:1e:71:46:82:
84:ad:b7:28:8b:cf:33:1e:06:eb:dd:e2:48:9c:35:c0:a1:33:
1f:fb:b4:62:d8:61:0f:96:da:3a:af:d6:40:d6:7c:70:c7:d3:
46:98:e2:dd:d9:c9:40:84:d2:08:f7:64:d9:c8:c5:e6:73:ca:
0a:03:db:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw
NENDMDkxMzUwHhcNMjYwNTEyMTgxNTI2WhcNMjYwNTE5MTgxNTI2WjAYMRYwFAYD
VQQDEw02YTAzNmUzZS01MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx6wX76nSt2u9QEo04tyDSKtkEkkUj0vSQ0XZrVpNk9+7+chgybvhXAO3JbQu
UcVzDvkHbSxV16LOkpbYiUAxMs/DDchx7/IY9Ih8Ox+ehCqc2CYoIrwVSsjojysh
cRBxTGhsVlFXtOS8s3bt3rDujZvHv6Ci0XLyk4ERKD1o254UlfjL4lWCVQqB7CQr
6lUg/yXRVPiNCtqc724rTYCxcB4xXchIrrge7CgQoB7I63NQzYgAMLbTPEmH5XnI
mc/VdngXsRx8oK1W2rgX0tRKdQw2blvhuZMW26aQCO0O7UP9bRebh5z+BGlXCelE
wuy0WFCxeMyJYP4kRDJ7/qWXCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqMbhST
kVr9zHtWkHRhQRB1SfORMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0
RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4
UHlmVlBaanF4TUVFekFrVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVDo90ULk3w6n5LGGEcm4yECV3rOLXC6WF+bQXcTukzVo+w1iAt6W85gFY2nn
fk9ySLL76MP0I7K3TVafKtE1CdaLU/YREzzm2j+nQVwRDOKp+SyG7ztwFBEL4GKK
8HogvlqHjkUWKdJnwUV0oYqvJ4dkyD5y4VR5Ufcc7NVfUd20NGPY0ukBUl3kAyEw
qFhhCw87ggL7QE3ls5X+d23ipleYdI4icnK2TV1CM+b/EjWoSi7hA7fiudxU4hE9
pxYxvGEecUaChK23KIvPMx4G693iSJw1wKEzH/u0YthhD5baOq/WQNZ8cMfTRpji
3dnJQITSCPdk2cjF5nPKCgPbeg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:49:40 2026 by rpki-client