
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json)
Hash identifier: OC7IuXwUP22fEjoDscZaPUS7vrfs6y0Q7Oj/J11bYIQ=
Subject key identifier: B5:C7:2E:48:7B:2F:34:FF:D6:31:B8:58:C9:96:A5:D7:AB:EC:62:14
Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Certificate serial: 079E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
Manifest number: 0795
Signing time: Sat 04 Apr 2026 21:19:10 +0000
Manifest this update: Sat 04 Apr 2026 21:19:09 +0000
Manifest next update: Sat 11 Apr 2026 21:19:09 +0000
Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: bGPcKcVCoo7SMvV2lu4/iEEAuHBKMBmNShKDhMCiOlc=)
2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: zBDrIrM5ZNmyGZZJoQehnFsEZgI4D/QOvG+mRLYkJ1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Validity
Not Before: Apr 4 21:19:09 2026 GMT
Not After : Apr 11 21:19:09 2026 GMT
Subject: CN=69d1804d-ac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:69:c8:14:16:b0:60:2a:53:e7:7a:45:7b:
be:96:18:74:0b:5d:f9:0a:fd:48:8b:16:2b:23:e9:
50:3f:b3:2a:34:f1:81:f8:5f:af:e4:15:54:ab:1e:
45:cb:87:17:b6:fa:e1:f8:5a:35:39:27:d6:49:78:
01:2a:7e:93:80:b4:12:af:c7:40:a6:3b:ed:26:b1:
43:63:0d:27:17:ab:0f:b8:20:3b:43:6c:bb:93:94:
52:0e:68:dc:48:d2:c4:31:7a:a7:83:83:58:20:de:
48:da:8a:8e:a3:c6:54:50:35:12:52:5f:e8:be:29:
bf:93:a9:b6:13:28:93:1f:9b:2d:49:0b:1e:64:fe:
a7:a3:3a:c5:72:3f:88:0c:0b:b9:7e:ee:7c:be:8d:
0e:77:dc:45:1f:69:56:68:3e:9e:06:6c:8d:02:63:
30:47:a0:8d:13:9b:f3:28:2b:d1:05:2d:5b:99:f6:
66:b3:5a:b7:3c:c5:c4:68:aa:26:80:28:0e:96:0e:
84:2a:2e:26:eb:47:6c:e8:3d:ef:62:a8:6d:5a:fd:
9d:c0:10:e8:35:2f:09:f1:5b:57:c8:f7:fe:df:2b:
43:a2:fe:ff:62:93:be:01:2c:1c:f8:5b:d9:38:ab:
f8:6c:50:33:c1:a5:e9:11:08:da:40:e8:6c:39:9b:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C7:2E:48:7B:2F:34:FF:D6:31:B8:58:C9:96:A5:D7:AB:EC:62:14
X509v3 Authority Key Identifier:
keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:22:f3:15:3d:8c:fe:e5:5b:49:60:10:15:8b:a4:3d:65:68:
67:e7:9e:af:47:81:c8:6e:82:d1:6a:3b:82:ea:ce:06:97:3c:
7f:16:ca:da:0c:2e:78:b9:4f:60:56:e2:45:bf:ee:cf:c6:3e:
a3:fe:5a:28:f7:ec:89:8a:97:ee:84:d9:e0:b1:6c:de:86:18:
6b:e1:5d:69:98:89:b0:a2:6f:c4:35:37:8e:7a:97:6c:f9:05:
b7:45:14:72:3f:ba:ab:ff:ca:b5:dd:e0:ef:2e:83:16:4c:84:
58:a7:86:7c:d3:2b:58:6f:39:4a:9c:07:0a:26:7c:94:5e:e9:
6b:53:42:4e:c1:aa:f7:76:41:79:77:94:5d:1b:28:a2:e8:b2:
4b:96:8d:23:bb:fd:6d:52:01:ac:e7:1d:6b:14:66:6e:4d:bc:
a0:58:5a:0d:3c:7a:11:95:9b:54:f7:80:b0:87:3f:b4:c1:5b:
2d:0b:49:cf:97:33:d5:41:e8:98:26:0c:55:f3:12:a3:4d:11:
bf:61:8b:07:82:0c:8f:2c:3b:af:e7:56:38:c2:ef:1b:b3:52:
0d:d3:9a:46:84:02:79:cc:94:1f:c8:7c:cc:3c:96:d5:97:30:
04:87:00:92:06:3e:4f:7a:1c:b8:1a:b0:07:1c:57:9e:c9:c2:
7b:41:76:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:01 2026 by rpki-client