
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier: UdG97j8/0sKN3WaGCM7NxFQ8MCOU7zbpDNCVT0AFoik=
Subject key identifier: E6:90:B6:75:78:9E:49:92:E0:B6:04:C9:37:7A:06:A1:0E:B5:10:4E
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial: 04D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number: 04BD
Signing time: Tue 24 Mar 2026 23:37:18 +0000
Manifest this update: Tue 24 Mar 2026 23:37:18 +0000
Manifest next update: Tue 31 Mar 2026 23:37:18 +0000
Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: Mvgbydbq8NxN+eQ0uWNAFk8imlwKaKbX64ZPiypMFvI=)
2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: L0YUjWVE6ClQnbjkSz7YliWfDv2+LcOW4hK3DI2GwKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1232 (0x4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Validity
Not Before: Mar 24 23:37:18 2026 GMT
Not After : Mar 31 23:37:18 2026 GMT
Subject: CN=69c3202e-32e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:a1:0c:89:72:28:8d:53:a6:0f:db:23:67:
20:91:e5:f7:66:5a:23:c5:9f:53:cb:89:e5:ba:4a:
ac:0d:66:b5:29:e4:ba:5c:29:69:2e:95:3e:b0:bc:
1b:1f:b4:bb:16:51:28:90:c6:f5:f1:76:1c:2c:5c:
63:44:53:ef:ca:c8:68:f3:cb:8f:0d:ca:49:f5:90:
15:6c:8b:42:75:a0:ed:f8:90:0c:16:2e:77:3d:7b:
a7:03:54:d3:23:a5:76:6d:87:de:a5:a6:88:dc:64:
23:23:ff:5f:42:13:0c:c5:38:44:73:39:87:4b:01:
26:27:05:db:8b:db:41:dc:d7:32:27:8b:3a:cc:f3:
84:ea:df:fd:0c:3c:21:d4:44:49:76:44:93:84:77:
c2:e7:70:71:8e:3f:14:ee:7e:42:ab:c3:92:0f:96:
93:5b:a2:8b:22:a4:07:d3:22:f1:5d:3a:d1:04:b2:
5c:e7:c0:50:7d:ad:f9:5c:e4:d9:78:79:84:e6:cf:
5a:c2:85:be:7b:c7:a8:ab:fb:99:84:34:af:ea:d7:
bd:6d:e9:8e:56:51:06:bd:5b:cb:cc:2d:63:6a:f8:
cf:a6:5b:96:a0:37:93:3e:ba:53:6e:20:25:84:f7:
87:06:f0:f7:45:7c:68:d7:92:1b:87:9b:d6:c6:68:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:90:B6:75:78:9E:49:92:E0:B6:04:C9:37:7A:06:A1:0E:B5:10:4E
X509v3 Authority Key Identifier:
keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:6b:70:f2:d2:0a:f0:e5:68:c9:10:64:e7:38:8d:cf:2c:
ba:1f:f9:34:dd:d2:e6:d0:70:8c:25:e3:9b:67:d0:96:25:bd:
1f:79:d8:3a:5a:15:0b:9a:e8:14:04:32:bf:5c:d0:1f:a3:45:
ca:76:88:9d:08:1b:b9:cc:a4:e1:f9:35:84:ef:c4:23:e3:51:
76:14:c8:32:30:b4:d1:1f:c9:71:aa:2f:43:e2:07:0f:28:b2:
4b:88:b2:05:e0:dd:b7:7f:fa:17:e7:77:ae:4c:4a:c0:39:b9:
91:54:ed:dc:5f:dc:67:41:d2:0f:ac:a6:06:f0:3d:f8:50:d0:
99:b6:a9:4f:01:cd:23:bf:19:ec:82:ea:b9:e8:b6:8c:d5:fb:
18:7f:c8:25:2b:76:ec:09:ce:3f:d7:07:6f:5e:3b:bd:a6:73:
4e:b0:17:f0:b0:03:70:c5:91:6a:1f:f0:b2:49:54:a3:4c:0a:
86:3d:1f:03:55:c1:4b:e8:3d:ef:8d:c7:eb:3a:24:6c:eb:cc:
9a:01:c3:7f:ed:b8:11:5a:c5:69:a7:2e:f4:ec:ca:d8:0c:0f:
f4:e6:b5:7c:ef:08:d7:4f:a0:89:8f:0b:6d:e7:12:c6:73:90:
1c:05:8e:3e:b9:d4:22:de:83:6f:a6:25:67:8b:36:f8:53:59:
a3:6d:ec:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:29 2026 by rpki-client