
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier: zoTeJXGsp4B0rUfnSset2T5KelcGRVWV0dzDbMNeeOY=
Subject key identifier: A8:93:B5:F8:CA:F7:52:AE:89:E1:8A:03:83:1E:55:69:2A:DC:39:CD
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number: 015C
Signing time: Sun 05 Apr 2026 04:26:24 +0000
Manifest this update: Sun 05 Apr 2026 04:26:23 +0000
Manifest next update: Sun 12 Apr 2026 04:26:23 +0000
Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: aptCXEDKl8SOhCqEJ0Nh2MyUiHZnicLdD4FkKmABxjY=)
2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: E315WW0WaEtv5nqU/xmLAkhLxUnKQm864OEvRTAgO9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Validity
Not Before: Apr 5 04:26:23 2026 GMT
Not After : Apr 12 04:26:23 2026 GMT
Subject: CN=69d1e46f-01c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:1b:ca:08:97:0b:15:91:be:1a:6e:90:b3:
b3:89:8a:e1:53:ee:e5:7e:0d:78:0c:0f:e6:e1:98:
68:22:52:f7:e8:8d:27:c8:89:fe:a1:90:1c:c9:91:
fa:99:49:5d:66:1e:2d:7f:d4:98:51:da:9b:c8:e3:
9a:0a:cf:4b:e7:60:23:e3:26:8e:dc:09:57:55:12:
39:12:87:50:ae:b7:bb:fe:a4:76:ed:c8:75:1b:6e:
c8:c8:ec:8f:44:79:f0:d4:ed:c4:67:9d:93:84:8d:
23:2a:c8:7e:c1:db:41:f2:be:60:02:c1:05:ec:83:
96:4e:ac:f2:7b:57:63:a8:91:d4:ac:e8:62:e3:50:
63:71:c6:77:70:97:1e:fc:07:88:a0:3a:a2:90:13:
d7:43:d8:b7:e7:06:e5:c9:dd:cd:19:1d:01:c6:39:
c9:36:20:dd:6f:80:81:6e:58:45:a2:41:40:ac:7a:
1b:e9:a8:1b:21:b3:e1:60:1a:f1:fc:5f:9a:ed:94:
91:e3:75:58:d7:0e:03:40:a3:36:1e:3e:cf:a0:13:
02:e1:b7:3f:ad:17:8e:32:64:a3:a6:61:73:44:11:
77:93:c9:d0:86:d2:ae:70:be:1c:47:94:76:aa:cc:
55:1d:7b:d5:15:c5:c1:71:02:0e:ed:88:58:13:8c:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:93:B5:F8:CA:F7:52:AE:89:E1:8A:03:83:1E:55:69:2A:DC:39:CD
X509v3 Authority Key Identifier:
keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:a7:a7:71:2f:90:a9:e1:6a:43:04:b4:b1:b7:59:f3:0f:de:
fc:04:d0:e7:f0:74:5f:0e:58:2a:90:55:32:47:00:44:21:97:
02:18:6a:07:f1:9a:e2:9c:26:24:be:59:2d:b2:d6:d2:88:a7:
4b:a9:27:81:34:53:06:f5:4c:e1:02:49:b6:12:f7:eb:f7:ca:
32:9b:17:9c:f2:69:ae:1c:b8:a5:fd:1e:6c:5a:68:30:6f:65:
bb:7f:2e:07:0e:81:d4:73:0c:7b:fc:c8:bd:37:76:94:9f:3e:
a1:48:78:c8:b7:05:ce:95:6e:e8:d9:1d:11:e2:2b:b0:27:a3:
78:4f:a2:76:71:2d:1f:ed:18:0f:e0:90:ee:32:53:eb:5d:98:
ec:59:4c:c1:c0:3c:59:bc:cb:ea:85:07:01:aa:61:1e:73:9b:
91:bc:ff:3d:fb:da:33:bb:f1:37:a0:4b:47:7a:40:8d:68:7b:
e9:5f:15:4e:3d:65:63:58:6d:9a:0b:27:f0:dd:3f:b2:88:58:
5b:4e:3f:89:46:a5:d6:17:eb:d2:f3:a9:b5:91:fc:e6:ce:7d:
af:36:03:98:81:cf:68:a5:4b:ba:75:88:8f:99:7b:bf:b6:0c:
b2:ee:c2:21:de:05:e5:26:46:ed:44:c0:62:38:21:a1:51:b4:
12:66:68:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC
NkE2NTkzQUEwHhcNMjYwNDA1MDQyNjIzWhcNMjYwNDEyMDQyNjIzWjAYMRYwFAYD
VQQDEw02OWQxZTQ2Zi0wMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6awbygiXCxWRvhpukLOziYrhU+7lfg14DA/m4ZhoIlL36I0nyIn+oZAcyZH6
mUldZh4tf9SYUdqbyOOaCs9L52Aj4yaO3AlXVRI5EodQrre7/qR27ch1G27IyOyP
RHnw1O3EZ52ThI0jKsh+wdtB8r5gAsEF7IOWTqzye1djqJHUrOhi41BjccZ3cJce
/AeIoDqikBPXQ9i35wblyd3NGR0BxjnJNiDdb4CBblhFokFArHob6agbIbPhYBrx
/F+a7ZSR43VY1w4DQKM2Hj7PoBMC4bc/rReOMmSjpmFzRBF3k8nQhtKucL4cR5R2
qsxVHXvVFcXBcQIO7YhYE4x2uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKiTtfjK
91KuieGKA4MeVWkq3DnNMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz
QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3
MVhJdEpQekJwbHUycGxrNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUKencS+QqeFqQwS0sbdZ8w/e/ATQ5/B0Xw5YKpBVMkcARCGXAhhqB/Ga4pwm
JL5ZLbLW0oinS6kngTRTBvVM4QJJthL36/fKMpsXnPJprhy4pf0ebFpoMG9lu38u
Bw6B1HMMe/zIvTd2lJ8+oUh4yLcFzpVu6NkdEeIrsCejeE+idnEtH+0YD+CQ7jJT
612Y7FlMwcA8WbzL6oUHAaphHnObkbz/PfvaM7vxN6BLR3pAjWh76V8VTj1lY1ht
mgsn8N0/sohYW04/iUal1hfr0vOptZH85s59rzYDmIHPaKVLunWIj5l7v7YMsu7C
Id4F5SZG7UTAYjghoVG0EmZo8g==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:57:29 2026 by rpki-client