
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
File: zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json)
Hash identifier: JBRi5+hrSjEvZZblFdEX0bbFD2Y5GiLKIbJzcP7xyrU=
Subject key identifier: EE:A9:46:59:69:4A:F1:8E:00:41:30:C5:48:9A:1F:79:57:59:84:52
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
Manifest number: 47
Signing time: Wed 13 May 2026 08:32:29 +0000
Manifest this update: Wed 13 May 2026 08:32:29 +0000
Manifest next update: Wed 20 May 2026 08:32:29 +0000
Files and hashes: 1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: vDNigjH7enEQlFC98FtN7jBgz/zoQkuxnRs7IXhSFpo=)
2: 81B5D9F8440511F1AB7B95FDB3833773.roa (hash: vn//9j6htUmeMHzJ/Tep4NLTfUBbskiXsWzwXG8Uy9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Validity
Not Before: May 13 08:32:29 2026 GMT
Not After : May 20 08:32:29 2026 GMT
Subject: CN=6a04371d-283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:bf:3d:d6:37:54:81:87:3d:38:d1:98:eb:
50:73:26:9c:93:fc:74:e0:0a:96:93:43:d4:3a:dc:
b8:71:c7:5d:5a:5f:59:99:a2:97:ee:76:ff:f4:98:
86:f8:ea:a0:ae:d4:04:9e:4e:51:95:01:4e:8a:bf:
82:4e:a5:ef:08:86:d5:bb:6c:e3:12:6e:90:ca:1d:
57:ab:f9:d2:23:ec:aa:32:bc:0d:80:be:c0:5e:7c:
55:19:a1:cd:86:b2:39:6f:56:c7:4e:f6:fe:58:b8:
5f:a8:59:10:aa:a2:ed:2e:2e:55:a1:3b:3d:fe:bb:
fb:fd:d3:f3:6a:5f:ec:82:01:6a:a1:90:cf:54:c0:
74:bf:30:91:d3:2f:72:87:20:38:49:f2:95:5b:00:
5e:5c:d5:7d:b7:20:ec:f3:ae:44:41:ee:09:2d:cc:
fd:96:48:b0:23:87:c2:87:d6:8d:54:00:a1:75:3c:
c1:62:2f:71:28:cd:2e:24:15:83:51:cc:8b:fb:d2:
65:6d:d0:b2:44:0f:ab:db:ca:22:d2:21:b6:bc:22:
ba:0c:56:c8:96:91:56:99:1c:fe:18:df:8c:a4:7c:
b0:2a:1e:e1:1a:2e:2a:16:bb:9a:0e:bb:be:4b:02:
8c:53:07:bc:d9:9d:80:38:69:46:4f:78:a4:a3:54:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A9:46:59:69:4A:F1:8E:00:41:30:C5:48:9A:1F:79:57:59:84:52
X509v3 Authority Key Identifier:
keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:b6:f3:8e:72:ec:21:5e:4d:18:05:79:83:d7:fc:69:96:4c:
50:db:6e:e1:43:53:0d:e6:ff:4a:c0:5c:02:cf:a3:6b:96:f8:
e7:fb:28:eb:0b:ac:4f:a4:ee:91:6d:f4:e5:f3:91:84:57:6b:
8c:26:55:b9:6b:22:f1:68:97:0a:ce:31:a1:9b:1e:c4:4c:cc:
9d:27:7c:d7:be:d7:d6:99:1e:ad:89:da:be:9b:47:60:86:c5:
24:12:aa:a5:fc:d3:a7:b1:6b:f5:a0:8a:19:1e:69:4e:80:a9:
24:de:72:64:5a:bb:21:45:51:00:2e:fd:c0:d6:d3:f2:c5:68:
66:db:e5:94:a7:df:ca:f3:ae:48:ba:4a:50:d8:76:ba:88:56:
e8:d0:57:b0:a1:70:c9:88:5f:25:98:bd:64:93:fd:a0:f3:93:
d2:77:72:a7:6f:63:32:b6:3b:4f:2c:e3:b4:e4:ca:76:73:23:
ec:e5:8b:91:34:be:ce:d8:5a:34:61:85:ba:d3:6e:a3:98:49:
82:74:bb:75:1f:82:59:ee:e1:6e:96:2a:ba:68:dd:23:fc:65:
dc:ae:94:cc:7d:fd:f9:c6:79:a1:90:b7:53:d0:a4:20:c3:9b:
83:44:31:0d:2c:1f:3b:62:89:bb:b8:53:4a:e0:76:64:ae:34:
31:73:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:22:40 2026 by rpki-client