
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json)
Hash identifier: /x47EvzvY0XhJhjOih5pl/9PaFl0Wi9j3rxEo5qMLqw=
Subject key identifier: 3E:32:DB:29:EF:3D:3B:8D:44:41:45:87:9F:07:C1:14:BA:4B:B7:DD
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
Manifest number: FA
Signing time: Fri 17 Apr 2026 05:57:51 +0000
Manifest this update: Fri 17 Apr 2026 05:57:50 +0000
Manifest next update: Fri 24 Apr 2026 05:57:50 +0000
Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: CTFkHKvdGAFvAnzeFJwNB2KFrKuUL+3NDfz7tiTscR4=)
2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: gk55dQC8eTI12/UHwkyE0xAYw726BD8sevAqReEeCXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Validity
Not Before: Apr 17 05:57:50 2026 GMT
Not After : Apr 24 05:57:50 2026 GMT
Subject: CN=69e1cbdf-d78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:6b:2e:a1:20:75:11:49:fb:06:dd:88:d6:
0c:2b:f8:bc:e5:19:b2:d8:a4:37:94:0b:d3:91:6a:
7f:fc:71:5c:d9:87:cc:8a:de:7e:3d:d1:d2:6b:d8:
62:5f:8f:47:dd:45:a1:73:cb:b1:5f:1a:6c:0a:3a:
e3:6b:99:2e:7c:52:5a:5c:07:89:a3:6d:64:2f:94:
51:bf:3a:ab:2f:67:40:3a:d9:0e:08:71:be:a5:ec:
0e:ff:a3:4f:d2:18:10:55:bb:e7:1f:f0:89:cd:70:
f5:8a:a5:41:fb:78:db:0f:18:99:4f:d4:97:bd:71:
0c:58:a1:c4:a8:a6:31:26:32:c3:94:82:b1:2b:25:
99:8e:22:a0:ee:25:90:5d:9b:6d:2e:6c:77:85:9b:
94:a5:48:87:9a:65:55:90:d7:65:99:0c:c9:59:0a:
fa:26:f7:43:a9:f0:d7:26:10:dd:73:d4:14:50:3b:
cc:de:5b:0a:b5:c7:05:02:7e:2b:8e:f7:41:4c:27:
05:88:56:27:42:32:95:f6:ea:1d:5b:6c:91:7e:3f:
5f:af:42:ff:ea:ea:9c:a1:f8:41:f1:c5:32:4b:b1:
8c:e8:6d:ee:a5:db:cc:a6:79:5f:09:36:6c:21:3b:
ff:68:ad:3c:c1:57:c4:f5:31:ca:33:20:c7:34:3b:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:32:DB:29:EF:3D:3B:8D:44:41:45:87:9F:07:C1:14:BA:4B:B7:DD
X509v3 Authority Key Identifier:
keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e9:30:ba:d1:bb:ac:60:b6:ab:9a:a5:e4:a4:24:9a:43:c5:
3b:50:ea:8a:90:a8:5d:ca:ce:6a:43:0b:8d:e2:d9:18:c5:67:
9d:78:fc:a9:aa:07:a4:7e:b0:88:2e:5a:b2:b7:bb:e8:8d:62:
ee:56:7e:10:49:f2:4c:df:19:40:20:6e:50:3d:c7:b3:66:07:
c2:ec:b5:ea:43:94:79:28:ec:26:56:19:c9:17:fb:34:7a:5b:
2c:7e:d2:af:df:ec:17:d7:20:9f:bc:27:d1:84:b2:e6:1a:8b:
13:a5:6a:59:ec:9d:f9:bf:d7:0f:ac:4a:7e:b2:10:72:8e:39:
3f:3e:6b:4c:f5:9f:99:c7:16:64:2b:7d:9d:82:1d:d2:96:85:
eb:17:f6:1d:e6:97:73:c1:66:97:6b:8a:8a:33:e5:a3:80:40:
1d:fd:59:ff:96:81:aa:0a:45:a9:ed:2d:37:e6:c1:69:1b:d0:
59:53:2f:15:9b:cf:72:78:f7:19:df:63:b2:e2:5d:3c:88:af:
1c:de:04:98:b1:a7:dc:6b:b4:2e:37:56:93:12:db:4c:57:cd:
9c:99:14:6f:51:de:dd:3c:7e:94:6b:28:b2:45:f7:50:df:db:
36:7d:4a:f6:e4:c8:7b:f4:c4:2d:27:f6:7b:28:e8:c5:85:07:
ee:b9:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:23:57 2026 by rpki-client