
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json)
Hash identifier: HUdY35Kr0yIGgIBY1YLcS/suCa1XQy111enhYcU79VI=
Subject key identifier: 7F:FD:2F:FB:7B:BF:63:6A:C9:AB:70:61:B9:20:64:B2:8F:C4:E3:5F
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial: 0CEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
Manifest number: 0CE5
Signing time: Sat 04 Apr 2026 18:05:06 +0000
Manifest this update: Sat 04 Apr 2026 18:05:05 +0000
Manifest next update: Sat 11 Apr 2026 18:05:05 +0000
Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: b8nZYJHVLMxOcpj5OHzjbf/PhSxoeQ3higEa6RGqzXI=)
2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3310 (0xcee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Validity
Not Before: Apr 4 18:05:05 2026 GMT
Not After : Apr 11 18:05:05 2026 GMT
Subject: CN=69d152d1-4c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:29:dd:84:50:f4:22:ae:d4:ab:3d:2f:eb:32:
30:c2:f3:2e:6e:48:ef:12:de:be:1d:f4:c8:ca:62:
aa:2c:db:e4:3a:b6:c3:e0:f4:2f:e6:11:23:42:21:
f1:3d:91:86:19:62:18:f8:0d:c9:6e:3f:93:24:10:
cd:5a:24:4c:f5:c9:db:4e:94:4c:ee:55:26:41:86:
9e:28:4b:e9:8b:bf:de:94:bb:b5:17:99:44:a6:64:
17:6c:60:5e:5c:c2:e7:9d:f7:c3:de:52:cb:c4:68:
17:2c:0d:73:03:57:77:e8:c2:56:ed:1f:67:13:f0:
a7:88:2c:53:60:16:37:94:ac:3e:1b:91:a4:09:50:
b4:5d:73:ea:d9:82:78:d9:eb:36:1a:94:c6:00:f2:
d1:14:49:be:fb:3e:dd:1d:87:36:17:ab:23:5c:10:
34:38:c4:42:57:85:81:d2:39:24:da:e0:12:02:03:
e6:10:66:25:ec:1f:e4:e6:f7:90:6e:76:5d:dd:1f:
11:7a:92:ca:fd:70:dc:00:57:ad:59:27:4d:fe:13:
e0:e6:9c:f6:58:5c:3f:d2:e2:35:b9:2a:fa:e7:32:
38:ec:a2:a9:ca:3f:c3:c9:6c:ad:12:21:b9:ac:1f:
87:19:49:1b:0b:65:e5:48:45:69:38:81:f7:06:aa:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:2F:FB:7B:BF:63:6A:C9:AB:70:61:B9:20:64:B2:8F:C4:E3:5F
X509v3 Authority Key Identifier:
keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:00:f0:21:13:59:2d:29:21:17:5a:84:5a:c9:73:7b:d7:9f:
36:50:f3:1a:4c:4d:b2:a0:c3:26:4b:6d:51:f0:ef:b8:0a:88:
7f:7b:3f:87:14:66:44:08:5e:a0:19:2f:c9:50:ce:c7:f3:36:
f7:6b:7c:5e:c6:3b:ae:56:23:ae:d9:c0:1d:db:51:74:b9:de:
ca:07:3a:d8:0d:6a:a3:3d:8e:eb:d4:ed:a1:4f:6d:c6:5e:9f:
27:ed:6d:a2:e4:94:7e:34:1e:9a:24:04:0e:8c:87:08:48:a5:
7a:24:e6:95:f7:87:da:04:bc:87:52:c1:f5:62:16:17:b8:0c:
50:6d:3a:8e:1f:bf:0a:ac:d9:be:93:1b:0e:bb:57:6a:3a:87:
42:ed:d2:63:b5:6b:1a:4c:06:5f:fb:b1:dc:b6:83:ca:76:b9:
56:6e:e5:96:93:34:50:30:8d:bd:25:62:67:3e:3a:29:29:ca:
7b:d6:69:90:56:f7:6e:78:ff:7b:f5:8c:14:a3:9d:7b:cc:8e:
c4:f8:36:d1:c6:e8:29:86:4a:00:f0:d9:c1:1c:53:df:c2:05:
cc:fc:8d:fb:7b:c2:11:ab:35:b0:c7:09:b7:85:43:9a:3f:dd:
6c:ab:05:5c:ac:62:16:f7:81:28:6a:9e:7b:91:b2:95:3d:b8:
58:d7:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:56 2026 by rpki-client