
$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
File: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json)
Hash identifier: qxXtmtIhjU87SrpvJztECTh+2req4SX+QRz87svksZg=
Subject key identifier: F1:88:D8:9F:E4:3C:25:B2:2F:5E:7C:45:C7:B7:2B:89:C4:F9:FC:EB
Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
Manifest number: 8B
Signing time: Wed 13 May 2026 07:42:29 +0000
Manifest this update: Wed 13 May 2026 07:42:28 +0000
Manifest next update: Wed 20 May 2026 07:42:28 +0000
Files and hashes: 1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: pGMTpxYuiPna8wM76H7nY/P9ZoRq+cZyxhEIe8QPVm0=)
2: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: jrSaLDXaVnrCw36ElXQQUz6hClTnDoHk+UBFzoNoFW4=)
3: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: /8I8Zl9zABqU4+Q0lEicmvA/CfmxVOpsQeYe0vDKQbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Validity
Not Before: May 13 07:42:28 2026 GMT
Not After : May 20 07:42:28 2026 GMT
Subject: CN=6a042b65-8a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:ed:5f:3d:60:8f:05:17:4e:7e:76:0d:b0:
c8:82:f5:68:22:ae:d5:f0:fc:a5:b8:e2:67:48:ef:
01:6c:3a:a7:83:d8:e6:51:26:1d:69:22:f1:a5:76:
46:07:72:69:f7:98:ae:49:cc:6c:99:ae:7a:75:8d:
99:50:d6:3d:47:9c:7f:d4:58:4e:64:1e:05:17:53:
de:05:4e:39:08:91:14:5d:6b:ac:e2:cb:ec:51:95:
97:73:24:06:90:26:d5:ae:64:c3:5f:2b:b9:ea:ca:
a0:93:94:71:7f:db:80:e2:8d:4f:24:17:63:0b:c8:
62:0d:c0:09:d3:e0:ba:36:4f:8c:9b:3e:02:8b:ac:
c0:7f:a6:ff:24:3c:26:34:52:73:34:d1:be:f7:17:
78:22:93:81:5a:e5:f2:81:83:98:a5:4d:81:ea:6e:
2c:38:45:47:05:85:69:04:bb:83:ca:19:9a:83:da:
11:4c:45:6a:f8:cf:88:39:1e:77:41:1e:90:a6:76:
22:e5:19:b7:9f:4f:ef:7c:6d:45:59:5b:bd:99:c7:
14:20:11:13:2c:47:e7:ff:1b:49:b6:81:43:62:8a:
a6:02:29:0e:4d:01:b1:7e:9a:11:a0:89:3b:2c:e9:
38:38:a1:1b:a4:1e:66:b7:c9:8f:b9:33:50:d8:e1:
e6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:88:D8:9F:E4:3C:25:B2:2F:5E:7C:45:C7:B7:2B:89:C4:F9:FC:EB
X509v3 Authority Key Identifier:
keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:86:e7:a3:2e:a9:63:87:00:df:2a:cd:3f:99:21:79:6e:57:
e4:ad:5b:25:a6:31:2a:90:cc:eb:d0:0a:e1:d1:89:d2:ea:69:
88:5d:f7:92:19:0d:6e:f0:9e:49:14:ab:93:f1:e0:a3:ae:a7:
92:ac:23:15:5c:f9:03:2c:25:fb:73:3f:76:5a:4e:63:aa:cd:
e5:38:8a:aa:db:ef:04:be:29:db:0d:31:2c:a3:7f:43:22:0d:
80:06:db:8f:41:5c:56:80:56:0c:58:e7:40:6c:12:25:f3:11:
fa:08:d7:3a:c5:a3:6a:4d:2e:31:44:dc:92:5b:90:8f:99:f7:
6d:d8:15:5e:36:15:33:a7:46:0e:be:51:5c:bb:20:bd:cb:fe:
65:d6:15:0a:28:54:eb:87:08:59:14:aa:79:52:bd:a2:f2:73:
df:96:26:b7:df:e4:78:dd:57:34:ec:05:6f:ef:b3:2a:11:a9:
d9:cb:9c:5d:92:4e:e2:91:d8:54:7f:e8:42:52:9c:35:72:7f:
2f:87:ba:e2:41:29:68:98:04:f7:60:1e:b8:01:30:dd:14:09:
63:ec:a9:ea:0a:02:fa:25:4f:ec:a0:05:95:b0:f5:fb:a2:0b:
bb:22:b3:dd:a8:ae:dd:0d:b8:e1:eb:31:fc:78:3f:77:4f:f7:
69:6a:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:23:01 2026 by rpki-client