
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
File: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json)
Hash identifier: 5dIaEKXlWJxjd4ncNgJbTQ/GRLuYY1gvLZcH+x9p61c=
Subject key identifier: F4:23:A2:4C:2B:3E:60:D4:84:8C:FC:9D:36:F2:C4:1E:4F:F0:DD:8C
Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
Manifest number: D1
Signing time: Tue 29 Sep 2026 07:14:56 +0000
Manifest this update: Tue 29 Sep 2026 07:14:56 +0000
Manifest next update: Tue 06 Oct 2026 07:14:56 +0000
Files and hashes: 1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: omtBsfnz5Vgg1yy8/WW++1HPFhK1s034Izd1rLQk4h0=)
2: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: jrSaLDXaVnrCw36ElXQQUz6hClTnDoHk+UBFzoNoFW4=)
3: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: /8I8Zl9zABqU4+Q0lEicmvA/CfmxVOpsQeYe0vDKQbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 07:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Validity
Not Before: Sep 29 07:14:56 2026 GMT
Not After : Oct 6 07:14:56 2026 GMT
Subject: CN=6abb6570-fabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:fa:ee:5a:fe:6d:bc:50:00:a7:5e:9a:f1:
55:83:68:df:9f:2a:d8:1c:f6:31:38:28:f1:aa:01:
37:99:0d:de:69:f9:1e:1f:17:56:e8:c5:2b:08:00:
21:eb:41:1c:f2:50:95:96:97:e1:fd:87:a2:76:9f:
66:45:cc:77:b0:fd:fa:64:87:cb:2e:c2:7d:4f:d5:
84:f1:e7:a7:6e:27:c5:85:a8:53:90:e5:b8:66:4c:
f8:7a:ff:21:6e:80:48:4d:c5:90:f4:5b:87:4c:04:
b2:b4:3c:aa:af:4b:26:12:6e:cf:8c:f7:ed:f0:85:
44:a0:0d:81:ec:47:6e:f7:d0:26:18:1e:84:1c:4a:
5f:35:99:a4:0f:b8:c6:c0:fd:38:79:6e:24:6a:38:
b7:9b:7e:b1:fb:4b:ac:c6:d9:0f:73:73:62:4a:af:
13:bc:6e:d0:d8:5c:46:31:e5:9a:be:7a:f3:27:5b:
a8:08:ff:01:17:bd:59:36:1f:6a:44:53:9e:e1:4b:
c3:ce:0d:c6:6c:b6:e8:10:75:f6:15:6b:07:20:0f:
bf:7e:e3:eb:87:36:fb:4a:e8:fc:4c:8b:6c:3e:1b:
5e:c7:58:3e:b2:fb:3b:0a:ed:28:d4:52:4f:7a:b8:
57:46:0a:19:11:14:77:9b:18:e3:b0:ca:87:6f:99:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:23:A2:4C:2B:3E:60:D4:84:8C:FC:9D:36:F2:C4:1E:4F:F0:DD:8C
X509v3 Authority Key Identifier:
keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:da:06:60:71:f2:90:60:df:da:a5:fa:06:fa:92:ac:b6:1f:
2f:04:3d:e8:3b:89:9a:ab:b1:27:9c:fa:3d:81:65:a1:0f:5c:
d7:10:15:46:81:94:de:64:41:39:9b:f3:eb:0e:09:2f:47:c6:
55:98:e0:28:74:dd:1a:d0:a9:c7:84:53:dc:29:ea:ab:c2:bb:
81:59:9a:02:fe:1b:79:a1:cf:0c:b0:ab:bc:f3:24:43:ed:a5:
9b:1a:26:46:40:82:a9:c2:ce:65:9c:9d:ef:43:a9:f8:18:75:
37:17:1c:a0:0c:92:ff:4f:26:0b:45:98:da:27:1f:ed:03:12:
ba:9f:29:99:1f:18:78:fd:ff:13:27:3e:c5:47:40:33:b9:47:
ea:93:7d:89:d7:e0:f1:f1:05:35:21:5b:2c:60:b7:fc:10:ca:
a5:66:f6:82:16:b0:64:a4:79:2d:df:5e:da:76:04:5c:1e:67:
10:7d:03:65:b5:96:d3:57:be:9f:46:5a:93:64:ea:1a:a6:9b:
b5:22:75:69:fb:59:ce:76:a9:e3:15:8d:70:5e:ec:4f:36:8b:
11:c2:95:44:1b:b6:f8:73:c7:7c:d3:5e:18:8b:a4:fd:cc:0c:
7f:d8:b2:dc:ce:37:fc:96:10:bf:c3:6e:38:0f:47:48:e2:e8:
a4:80:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:44:35 2026 by rpki-client