
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json)
Hash identifier: M9D7tPPec+kZreQNhBPeve71q+5PsHlef6adYrdNcQs=
Subject key identifier: 6A:C0:CF:F3:C0:BA:A1:51:B9:E9:3B:B1:3D:A4:C6:B9:39:04:D6:40
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
Manifest number: 0127
Signing time: Fri 17 Jul 2026 06:52:38 +0000
Manifest this update: Fri 17 Jul 2026 06:52:37 +0000
Manifest next update: Fri 24 Jul 2026 06:52:37 +0000
Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: zNQO4pOXOX4mM5ge0ejBgYguvbGGLmj0GIjiJcvdhes=)
2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: gk55dQC8eTI12/UHwkyE0xAYw726BD8sevAqReEeCXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Validity
Not Before: Jul 17 06:52:37 2026 GMT
Not After : Jul 24 06:52:37 2026 GMT
Subject: CN=6a59d136-f441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:a1:a9:96:04:74:16:c5:ec:7d:12:0d:99:
34:a9:7a:87:05:bb:c9:94:03:78:4f:dd:b9:80:ef:
a0:d8:10:45:38:74:2a:92:0f:64:bd:d9:27:0b:22:
15:d1:3b:ae:26:28:9c:b0:1e:41:6e:a7:14:32:8b:
70:87:fc:46:11:1c:d0:75:fe:9a:b0:ee:82:82:63:
ae:e3:9b:c1:73:a5:ea:50:5e:91:88:6b:05:a7:ac:
a6:29:76:2e:b8:c7:b2:b5:ca:f9:3f:e0:ae:88:2e:
89:f9:8c:cf:91:64:e5:29:ff:5b:e2:d4:d1:f5:e5:
0d:d9:00:a7:de:b7:5f:e8:bf:db:cc:49:fc:3c:b8:
86:e1:2e:ba:c6:fb:07:ab:a7:3b:56:63:1a:a9:28:
2c:91:a7:66:c4:01:ff:f9:05:05:8b:d7:67:8d:92:
f3:c8:d7:81:75:9a:48:b9:16:4c:5d:3e:1a:d8:55:
4f:c0:8e:8a:48:61:5c:dd:99:09:c6:43:4c:ed:9b:
85:0c:95:ad:31:2c:e6:74:3b:1f:d3:5d:67:1a:c8:
03:be:f8:5c:78:23:36:87:58:a1:42:10:37:61:9f:
11:0d:29:23:46:60:fb:20:70:d2:67:81:d1:dc:6d:
18:f7:6f:1a:8a:33:97:92:94:a0:bf:1f:2f:66:44:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:CF:F3:C0:BA:A1:51:B9:E9:3B:B1:3D:A4:C6:B9:39:04:D6:40
X509v3 Authority Key Identifier:
keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:68:0e:f0:52:f9:90:a8:20:26:6d:f4:7d:c7:6f:b0:cf:06:
3d:5d:b9:3e:d7:9f:11:11:7c:17:fb:ad:5e:42:8d:69:dd:74:
15:31:fc:f8:50:71:4e:c0:6e:97:e8:35:41:45:80:42:9d:f6:
aa:5f:0b:b1:b9:e1:ee:be:27:8d:cb:16:0c:71:ae:b5:42:22:
87:c9:17:06:5f:c2:73:6d:b0:13:d6:b2:62:06:8a:b5:3f:39:
1a:ba:1d:42:be:21:35:f4:eb:39:4e:a5:b3:3f:34:1d:9e:23:
97:fa:42:1c:f6:c2:57:41:e1:df:03:e9:d5:68:c6:ee:7c:78:
86:8c:c5:1a:e5:06:ed:c4:95:bf:68:42:d7:46:15:31:69:f6:
b5:5a:80:56:cd:cc:05:49:e3:19:a5:1f:43:75:93:5a:c8:2e:
f1:5e:99:c9:04:67:b1:57:70:7b:60:de:1c:d2:37:9e:1c:26:
3b:d6:29:22:dd:be:7b:40:56:e9:ee:72:48:7f:aa:90:79:7b:
9d:da:28:66:e9:e6:e2:0d:60:41:6d:1a:c1:3e:11:a7:9e:1b:
f9:bc:e1:a5:31:1a:f1:6a:bc:6a:02:92:c9:66:26:be:3b:ff:
00:fb:24:be:4f:02:f1:40:2c:b8:f1:04:2c:83:d8:7a:60:e5:
49:4d:b3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:12 2026 by rpki-client