
$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
File: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json)
Hash identifier: 6WZbWogI0Xfe7q0yNGRYaDuYmRhlehvm09w+loZJz6Y=
Subject key identifier: E8:76:A1:84:03:20:C0:4E:82:C1:71:A7:8F:20:33:20:F4:BD:B2:38
Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
Manifest number: BC
Signing time: Wed 19 Aug 2026 07:40:59 +0000
Manifest this update: Wed 19 Aug 2026 07:40:58 +0000
Manifest next update: Wed 26 Aug 2026 07:40:58 +0000
Files and hashes: 1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: 8tOIMzJlHdSl247E9ENVe+VE1mXwd22Pc5FaUmzcamo=)
2: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: /8I8Zl9zABqU4+Q0lEicmvA/CfmxVOpsQeYe0vDKQbg=)
3: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: jrSaLDXaVnrCw36ElXQQUz6hClTnDoHk+UBFzoNoFW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Validity
Not Before: Aug 19 07:40:58 2026 GMT
Not After : Aug 26 07:40:58 2026 GMT
Subject: CN=6a855e0a-0db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:33:ad:f6:fb:ac:26:ea:b3:13:b1:11:33:
28:7c:e5:24:da:18:3f:f4:83:3b:63:a2:9e:2f:88:
83:4d:1e:46:fd:c6:a8:67:38:e6:80:cc:62:1d:2d:
81:e7:8e:37:34:2b:85:86:1f:21:4c:5b:d2:e7:ff:
10:28:37:5d:0f:f5:2d:d4:0b:ab:14:ee:bd:fe:f1:
01:6a:41:e2:f4:31:24:66:e8:ee:6a:9d:2b:4f:a0:
6f:59:01:ca:fa:e6:98:a7:d7:5c:0a:71:31:78:19:
77:d1:11:a0:1b:37:13:ff:89:be:37:95:56:e9:8c:
de:73:c0:b8:08:5d:d5:b5:a8:6a:f6:31:04:b5:65:
ea:63:48:f9:8e:42:10:6a:a3:6f:e9:b9:07:f3:8e:
3b:25:72:f0:a8:10:3f:3b:9b:25:9d:be:65:c2:66:
a9:68:9c:a5:be:49:82:05:e4:81:88:d3:cf:02:55:
bb:cb:ed:37:a7:c6:80:ae:b3:c1:26:94:99:3d:ee:
1f:d0:b2:59:88:75:1e:2e:06:8d:06:42:af:c3:ec:
13:9a:0d:78:fc:2b:b6:4c:90:68:85:04:5b:f7:68:
0c:fb:3e:98:b6:c9:79:5e:4a:ed:e9:aa:d9:54:bd:
3a:f8:2c:f2:f1:35:a2:4f:ce:8b:d5:7c:59:0e:b5:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:76:A1:84:03:20:C0:4E:82:C1:71:A7:8F:20:33:20:F4:BD:B2:38
X509v3 Authority Key Identifier:
keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:68:28:6d:8a:53:08:cb:af:81:9d:0a:80:1b:22:4d:74:b5:
a3:66:17:3d:8c:bf:12:68:b4:56:1e:3f:cc:ce:32:9c:85:29:
13:4e:4f:be:5c:2c:3c:48:34:b0:03:df:fa:32:a4:47:68:9f:
f3:fb:dd:f9:38:83:e3:84:06:a8:bb:b8:32:d4:fa:2f:45:a7:
e2:0c:21:dc:92:52:f6:d0:97:ea:94:8e:d7:01:a5:19:b6:8d:
f3:a0:5f:71:82:e4:d0:8e:ce:d6:be:a3:2a:56:b8:10:fb:8c:
70:41:1e:c6:62:06:72:a5:0c:76:a5:17:df:59:05:3b:91:2b:
7f:78:05:69:3b:78:28:b8:3b:5b:66:d7:94:ed:b8:aa:7e:ae:
72:98:94:03:e1:93:a0:a7:9e:6d:69:7e:b8:11:59:84:e1:48:
f4:73:74:4c:52:27:bf:b2:84:02:4a:4d:69:78:ab:5b:5a:c3:
67:fe:cb:71:61:61:4e:3c:31:ce:f2:37:04:e2:32:f3:8d:71:
c3:95:44:d7:3c:16:50:74:59:49:2f:76:09:97:06:d7:fb:a3:
4b:cf:27:81:a7:28:84:7e:b9:cf:b3:02:e6:a5:25:62:4e:69:
b3:92:f7:0f:cb:bc:8b:87:b1:84:78:db:e9:cb:f8:81:de:68:
c5:ad:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:43 2026 by rpki-client