
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json)
Hash identifier: 6AGjOCyB/QKSCLyupzBfWkR5NviPFw6fS6gGkePS85I=
Subject key identifier: 14:43:4F:47:EB:89:19:3D:63:9A:49:26:73:52:7A:90:29:75:D7:D8
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial: 0D24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
Manifest number: 0D1B
Signing time: Mon 20 Jul 2026 18:25:25 +0000
Manifest this update: Mon 20 Jul 2026 18:25:24 +0000
Manifest next update: Mon 27 Jul 2026 18:25:24 +0000
Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: RofTLCPWj1FM+AC3mKZV1vZtxJjSmEf+xdyiOyLmTmE=)
2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 18:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3364 (0xd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Validity
Not Before: Jul 20 18:25:24 2026 GMT
Not After : Jul 27 18:25:24 2026 GMT
Subject: CN=6a5e6815-a022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:e4:c9:c1:5e:13:2a:de:8e:52:41:b6:a9:
86:ec:c9:37:2d:a3:c0:4e:41:31:ca:6b:6a:95:1e:
8b:68:04:3c:fc:c2:b2:90:ad:5c:7b:ad:5d:c2:ff:
72:b3:95:71:5a:6d:19:d8:fb:f4:63:25:fa:c5:3a:
ca:7e:f9:8b:c5:a5:c4:39:e6:53:f9:3f:1c:4a:92:
7e:6c:9b:38:30:9a:eb:b5:06:a2:67:8c:64:e4:2d:
7a:f4:90:96:35:85:41:f4:b5:f5:65:17:85:4a:90:
37:68:5c:05:b5:b9:b6:13:1c:97:77:0f:6a:31:ad:
c2:5f:ca:2a:50:79:c0:42:72:73:8c:2a:45:23:f4:
0b:26:95:be:be:f1:7c:81:f0:24:53:1d:94:f8:a4:
1d:36:40:af:ff:d7:3a:a9:b3:71:2f:d4:cb:69:c4:
64:d5:3a:71:d6:18:d3:b9:30:d3:c2:36:87:77:b5:
0a:31:c2:43:a0:b3:9b:f8:a4:1f:af:99:fb:65:c0:
a3:c8:4a:c5:3a:58:f6:34:68:98:5f:d2:1d:a6:39:
35:22:4f:d7:0b:c9:80:e9:4c:0b:92:b0:e5:c4:e6:
73:8e:98:6a:5e:d9:de:4a:fe:4b:2f:75:fa:f9:3a:
f8:7c:4b:12:9c:83:76:c7:4d:72:0b:d7:43:af:77:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:4F:47:EB:89:19:3D:63:9A:49:26:73:52:7A:90:29:75:D7:D8
X509v3 Authority Key Identifier:
keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:2c:b2:ce:3a:b7:5a:38:7f:2a:6a:f6:63:68:3c:09:61:9f:
bf:db:b2:bd:ef:03:0b:3f:5e:f6:f1:84:46:77:d6:3c:58:1f:
8e:df:51:da:e1:20:30:d0:60:0f:22:9e:00:e2:f1:f8:4a:dd:
c0:45:78:61:8c:e1:de:a2:16:6e:36:b6:76:84:80:ae:28:ff:
dd:15:10:86:c3:40:f0:4f:d3:05:fd:a4:21:65:73:a6:38:83:
6f:dc:17:a4:8c:0d:1b:2f:4d:81:84:db:8e:5b:4d:72:de:32:
a6:29:1d:de:25:9e:4e:6b:f8:fd:fc:98:8d:69:ce:bd:da:a1:
72:35:c3:f1:d3:2e:00:70:d1:04:d0:82:04:f8:00:98:4d:0f:
08:eb:b7:9b:c0:6f:e8:dd:00:8c:c9:10:5c:28:d7:6d:16:c8:
04:f5:81:6f:16:e7:21:04:6a:f1:18:31:fb:bc:dc:07:0b:e8:
91:b4:71:3c:95:59:a2:a2:18:f6:15:62:36:02:4c:c7:25:5a:
d3:07:41:04:4c:47:d4:13:bb:fe:e1:f1:0c:fa:e8:6c:27:8c:
e7:66:4a:13:2a:79:d4:bc:38:1c:b0:b6:5f:91:fa:98:5e:0a:
8d:b7:cd:bb:2d:24:a0:fa:ea:ed:bc:8e:f2:2a:b7:d4:52:ad:
f4:fb:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:10:55 2026 by rpki-client