
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json)
Hash identifier: JAQjOCjeMa+G376cW0KLQrw8oGjamSJKHMvIQ2MQXtw=
Subject key identifier: 49:EB:06:53:46:76:E0:9D:DD:39:79:3F:CC:13:BF:A6:ED:73:AE:0A
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial: 03C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
Manifest number: 03B8
Signing time: Thu 21 May 2026 00:48:23 +0000
Manifest this update: Thu 21 May 2026 00:48:22 +0000
Manifest next update: Thu 28 May 2026 00:48:22 +0000
Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: Qi+qrghRj72Pnghuaa4PR76BXt25P+Bn3FQXL7qOyjc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Validity
Not Before: May 21 00:48:22 2026 GMT
Not After : May 28 00:48:22 2026 GMT
Subject: CN=6a0e5657-e97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:82:9f:3b:c9:88:0a:9c:18:44:15:a0:5a:
88:4b:0e:b2:13:3c:53:7f:30:b4:b7:54:4f:e4:5f:
4c:c7:6f:89:c4:d7:d7:8b:4b:ff:ec:7b:d3:f3:be:
af:b4:af:3f:08:51:17:fd:fb:c8:53:ab:70:1e:76:
fa:41:5e:cf:08:cf:bf:e6:98:b0:a9:06:22:7d:fb:
d4:24:84:f2:ab:aa:5e:0a:f8:d1:26:a0:c1:2a:65:
17:c3:93:0b:96:aa:97:28:e5:12:8a:38:7d:77:a1:
59:e0:e7:5a:e5:c2:c3:4e:fd:9d:c2:a9:55:4e:3f:
1c:14:d9:94:c9:cf:05:57:a1:90:a9:26:65:a7:94:
52:52:47:48:e2:f5:8a:31:07:cc:93:fa:9d:00:21:
ed:54:94:3b:ec:07:ac:45:2a:47:ee:74:07:4c:6c:
9b:13:24:fd:fe:59:8a:82:a2:d7:e1:c4:f9:69:92:
0e:40:93:2e:02:f1:10:16:05:24:a0:c7:76:6a:ad:
1a:2c:a1:21:55:b6:75:25:1f:64:5d:a3:cc:6e:e5:
a7:b6:1f:db:8c:11:f8:14:91:8c:f7:c5:e5:40:56:
25:d7:46:17:52:50:9f:e6:b2:20:dd:b7:8d:1b:b1:
d1:00:aa:20:73:fd:f9:fd:96:b6:59:ad:05:dd:7c:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EB:06:53:46:76:E0:9D:DD:39:79:3F:CC:13:BF:A6:ED:73:AE:0A
X509v3 Authority Key Identifier:
keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fa:9f:c1:f0:83:e3:7e:39:75:34:4c:8e:ed:c2:67:e9:d0:
2e:3c:0d:11:29:ff:8f:ef:5e:0d:a8:a7:ab:35:2e:86:75:80:
6d:06:4e:af:ba:7e:41:f9:fa:35:4a:19:4c:9c:ab:18:bf:76:
d0:7f:77:c1:71:48:35:00:9d:b6:15:fa:aa:7a:7c:6f:50:23:
fe:48:fb:34:0b:24:14:0b:eb:b9:93:15:fc:a1:3d:12:98:54:
cd:40:16:ad:d9:87:7b:d2:d2:79:20:d8:d5:aa:05:1b:30:63:
a4:fa:d9:fd:61:a7:d5:ca:4b:85:d0:c7:74:6b:ce:2d:f8:1a:
bf:52:5e:d1:83:44:e2:97:3a:5d:c2:8d:4f:8d:65:d2:c8:a1:
f8:16:70:70:72:31:1f:bf:df:01:a5:b4:e0:f3:44:c5:4e:89:
13:de:45:15:bc:b7:71:f0:1a:fe:d0:1f:76:a9:f6:48:dd:30:
08:29:88:24:c1:b7:0a:91:66:a7:54:66:b6:79:e7:95:a7:58:
d3:2e:9d:79:c7:9f:e7:ae:1f:5d:e5:32:81:6d:61:93:73:e0:
65:9d:5c:69:0b:2d:db:83:10:de:71:2e:00:5c:f8:d1:7d:e3:
15:9f:cc:68:89:c7:ea:3d:59:b4:a0:12:1b:ce:4d:17:06:4c:
4f:d1:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:55 2026 by rpki-client