
$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
File: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json)
Hash identifier: fpJVAmroNE9ySy8EqsEksbadaRseknIxQfnhmzj36mE=
Subject key identifier: 41:52:67:CD:7D:60:92:DF:41:93:8F:2B:8C:24:AC:41:6C:7F:3E:32
Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
Manifest number: 78
Signing time: Sun 05 Apr 2026 07:09:50 +0000
Manifest this update: Sun 05 Apr 2026 07:09:50 +0000
Manifest next update: Sun 12 Apr 2026 07:09:50 +0000
Files and hashes: 1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: oymsGRVByLf1cO5VcrGdJPV8v9q8pg8R2+ZC8SVKSW4=)
2: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: jrSaLDXaVnrCw36ElXQQUz6hClTnDoHk+UBFzoNoFW4=)
3: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: /8I8Zl9zABqU4+Q0lEicmvA/CfmxVOpsQeYe0vDKQbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Validity
Not Before: Apr 5 07:09:50 2026 GMT
Not After : Apr 12 07:09:50 2026 GMT
Subject: CN=69d20abe-de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:e6:ba:c4:69:df:76:af:bd:65:7a:1d:12:
eb:d6:9a:e3:ba:3d:c9:a7:cc:b4:e0:bd:61:9e:9d:
2d:95:f8:d5:82:8f:cb:86:d0:83:ad:73:25:b6:d0:
28:d4:2c:ef:00:39:5c:39:8f:c1:c4:01:c4:59:6a:
57:dc:aa:eb:87:ef:af:c3:2b:b9:16:b1:28:95:40:
75:4b:df:c2:a9:9c:5e:53:4e:b3:dd:be:d6:c5:d7:
3f:d2:57:d2:ad:19:9f:f6:a9:3e:a5:c0:d8:7d:39:
a9:5f:98:25:c1:f6:54:4a:e8:01:d8:41:46:6c:e7:
6f:73:d3:0a:f7:5f:97:d1:20:ed:32:7a:76:90:bd:
df:c7:96:30:34:b6:c4:24:c8:5b:6e:12:66:00:13:
1f:44:75:ab:72:cd:15:77:47:ab:6f:ff:c6:47:37:
4c:4e:53:0c:9b:87:8a:7d:32:3b:01:2c:fe:38:f8:
9b:0e:12:66:36:53:29:93:67:50:8c:4d:62:4a:36:
4f:8e:5e:bd:c7:f0:35:d7:69:ec:03:51:46:fd:af:
80:3a:2d:5e:1f:33:1a:44:51:78:a5:9f:e8:30:c0:
f3:33:dc:a3:fe:da:e7:37:5f:5c:24:29:81:a4:d7:
d6:26:28:67:fa:6b:6a:fd:66:b0:c1:f3:86:1f:34:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:52:67:CD:7D:60:92:DF:41:93:8F:2B:8C:24:AC:41:6C:7F:3E:32
X509v3 Authority Key Identifier:
keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:07:b2:cc:49:43:21:2e:2c:f2:f3:1c:36:63:d8:6d:b5:0b:
a4:0a:2b:10:68:b8:52:4c:24:5a:7c:fb:fc:c4:d2:b1:76:70:
43:3e:00:fb:5f:ac:3a:77:2e:5f:c0:ed:cc:59:82:03:4e:b3:
0f:51:12:62:6e:ae:f9:9c:d1:11:c1:d3:5a:53:2a:d3:cc:ab:
03:32:4d:43:59:eb:26:65:22:c6:29:c8:40:f0:18:1a:fa:e2:
85:6c:4d:98:ff:b7:3c:1e:1c:3b:cd:64:e2:ef:f9:b7:9f:ab:
15:71:40:1f:d5:52:51:49:93:58:d3:b1:a0:6d:5b:73:cc:75:
d4:01:6e:53:c9:89:fb:a6:6e:7b:11:8a:5a:12:8f:3e:05:c4:
5d:97:61:46:5c:33:b3:b6:8a:43:0f:27:da:5e:78:15:a0:ea:
03:68:bb:15:5d:d9:e2:a9:0c:b0:13:61:4b:b6:78:cb:11:ab:
b2:39:1f:17:e5:65:55:73:00:0b:a5:71:05:c6:bd:4e:ba:b5:
dc:25:de:a1:f6:a1:b2:f4:e3:3e:fd:60:1b:7e:c1:5e:27:24:
00:45:ff:66:3c:ef:b0:f6:03:5a:20:7e:d1:db:4e:6f:47:6b:
5e:c3:53:d1:ca:49:73:17:de:8e:6f:1b:60:3b:c8:dd:aa:f7:
1f:42:d5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:46 2026 by rpki-client