
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier: rxrj1M8MZugVctD13OAp/IhtG/UDAaHCQyR2Vl/6ibc=
Subject key identifier: 21:8E:FB:34:90:70:5B:1E:A2:82:A9:89:2B:02:02:96:41:00:8E:F1
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial: 0535
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number: 0522
Signing time: Thu 08 Oct 2026 23:47:22 +0000
Manifest this update: Thu 08 Oct 2026 23:47:21 +0000
Manifest next update: Thu 15 Oct 2026 23:47:21 +0000
Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: QwJj9fhkNk1ShSCgoTpoIy3BwyGviTs4GHa4B/gZT64=)
2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: L0YUjWVE6ClQnbjkSz7YliWfDv2+LcOW4hK3DI2GwKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 23:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1333 (0x535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Validity
Not Before: Oct 8 23:47:21 2026 GMT
Not After : Oct 15 23:47:21 2026 GMT
Subject: CN=6ac82b89-272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a9:81:23:d3:6c:c0:66:40:33:b3:de:d9:59:
b8:87:2d:25:9d:b9:11:67:bf:3c:4c:c3:ca:d9:d0:
c1:35:64:09:9c:e7:be:56:2f:7d:92:8f:99:7d:4a:
e1:e4:41:ce:6a:53:93:5b:7f:ec:49:0c:3d:06:c1:
31:f3:c3:1d:57:7a:ee:ae:1d:34:60:3f:ef:0a:af:
eb:49:ea:72:37:c0:81:43:94:5b:4c:46:3e:0a:99:
24:4a:47:be:4a:e0:a7:87:10:07:fd:73:c7:cf:34:
c3:95:53:68:1e:55:25:52:87:de:12:d5:ae:df:8a:
6f:a8:2d:d8:68:a0:ba:7b:53:dd:99:ec:66:8f:a6:
08:65:bf:0f:bf:59:33:1c:9b:ac:66:6c:4b:49:c3:
27:88:ee:08:be:ce:77:76:be:9e:30:51:16:5a:87:
43:4b:2e:84:3e:b2:95:d7:77:4d:26:24:8b:a7:aa:
ad:5b:e1:c3:34:2b:26:cc:cc:d3:48:35:17:75:7c:
2e:86:bf:65:23:11:0b:08:b5:d6:d0:f0:fa:1d:52:
8e:45:c7:08:e2:b7:b7:c7:3a:57:45:e7:20:0f:43:
87:06:22:e7:3e:71:20:4b:c5:e3:c4:c2:26:f4:c8:
f2:bd:11:68:2b:5d:3f:08:ea:53:83:57:29:92:ba:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:FB:34:90:70:5B:1E:A2:82:A9:89:2B:02:02:96:41:00:8E:F1
X509v3 Authority Key Identifier:
keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:52:b2:0f:4c:24:f7:47:ee:8b:19:cf:cd:dc:ef:c9:05:81:
f7:3a:0f:c2:c9:e8:1f:61:b5:8e:8a:f4:fa:7c:bb:2f:fc:7c:
0f:59:cd:20:30:af:c9:a7:23:ab:86:99:32:ed:b5:f3:66:2c:
bb:c9:69:89:fe:9b:ef:e5:0d:0e:b6:0a:31:3e:85:b7:0c:b0:
74:ec:13:33:b0:d3:50:37:4d:1a:cb:ed:02:3c:f2:ed:1c:83:
62:dc:cd:1a:a1:d2:d1:9b:04:9b:6b:d6:d9:a8:f2:31:0c:6c:
17:a2:41:ba:c1:4c:48:33:eb:f8:c9:4f:d6:28:07:9b:2e:94:
ff:0c:ef:df:59:e1:50:46:c4:3e:3d:25:17:3e:30:46:45:3a:
a3:87:b9:97:3f:5a:b7:0a:b4:9a:8f:81:96:de:df:05:73:29:
68:ac:e9:d2:2e:c3:c7:66:16:6f:4b:85:fa:b3:b0:8d:9a:58:
83:0a:26:88:2c:a8:51:1b:f2:b8:03:c7:66:6c:33:18:ca:6c:
8c:99:a5:53:be:05:1f:e6:62:82:e0:b5:f9:c9:e2:3f:36:81:
de:13:56:37:09:8f:2b:14:3b:1a:1f:b8:92:15:08:f0:7d:fa:
5d:7e:cb:23:20:39:ea:6d:e2:94:41:5d:c3:dc:07:4c:a7:fd:
01:68:1a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:26:32 2026 by rpki-client