
$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
File: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json)
Hash identifier: qFG89I3+bOSYm2231Y8PNprVUAjkQp6SqsEsJUkxIqg=
Subject key identifier: A8:50:FD:DF:3D:96:96:2D:05:F8:93:DD:4B:64:EA:28:77:6D:A3:A3
Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
Manifest number: A5
Signing time: Sun 05 Jul 2026 07:56:57 +0000
Manifest this update: Sun 05 Jul 2026 07:56:57 +0000
Manifest next update: Sun 12 Jul 2026 07:56:57 +0000
Files and hashes: 1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: 1uYc8q+ebMTth0lD68eLwGOZEtq2zomfd6krvgxwD88=)
2: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: /8I8Zl9zABqU4+Q0lEicmvA/CfmxVOpsQeYe0vDKQbg=)
3: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: jrSaLDXaVnrCw36ElXQQUz6hClTnDoHk+UBFzoNoFW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 07:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Validity
Not Before: Jul 5 07:56:57 2026 GMT
Not After : Jul 12 07:56:57 2026 GMT
Subject: CN=6a4a0e49-4dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:d4:ce:59:26:da:af:67:90:fa:a9:7a:32:
d6:d8:75:fe:47:6a:b5:ab:be:9a:ad:ae:c0:4f:87:
4d:8a:09:af:99:e9:91:33:92:e2:8f:77:b4:67:42:
8f:37:2e:3e:6d:13:4f:0a:a5:f8:ac:c6:3d:af:21:
a8:b6:d9:ca:da:7a:b1:2a:a9:80:2f:5c:ca:74:a1:
5b:a2:11:28:ca:e7:b9:9f:da:49:41:34:07:32:54:
87:ee:fc:90:38:c7:df:03:ff:63:15:a0:ed:7d:bc:
19:d6:96:69:79:dc:44:b9:1e:a2:53:ce:77:82:4d:
b2:c6:cc:ef:65:92:80:d6:09:0b:dd:ac:93:e2:12:
1a:14:1a:1d:b8:14:49:a5:c5:6b:ff:d0:43:9e:33:
07:eb:6d:6d:ef:74:90:49:33:cb:b5:d6:ce:85:73:
3a:c6:72:10:da:b6:79:1e:97:19:d3:af:05:4c:5a:
71:3a:9f:de:3e:5e:5d:da:a7:fc:c8:97:81:47:70:
5f:bf:66:5a:12:a6:c9:3b:b4:99:23:22:d7:b3:ba:
96:91:70:57:33:1b:fa:cc:a7:a0:72:f1:74:03:2c:
79:39:16:53:9f:23:96:0c:7d:11:6f:07:71:16:5d:
38:06:72:b0:dd:45:57:65:69:59:39:a0:6e:93:e7:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:50:FD:DF:3D:96:96:2D:05:F8:93:DD:4B:64:EA:28:77:6D:A3:A3
X509v3 Authority Key Identifier:
keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:77:2f:a7:c3:53:d4:0a:63:a0:e9:38:1d:60:42:8e:e4:e4:
dc:40:69:f7:4c:1b:f9:65:cd:70:4b:55:30:8d:44:23:4d:97:
2b:47:02:5d:40:58:4a:fd:84:23:78:66:1a:e5:1f:f8:31:b7:
17:72:a6:10:86:c0:37:b1:2b:b8:9c:c1:78:26:45:f2:ba:5a:
41:89:15:65:8a:16:13:d2:1b:4b:d3:fe:a7:3c:70:cb:56:d8:
23:7d:64:13:ba:46:aa:ed:49:8f:a3:f6:7d:26:c2:fe:2a:07:
43:90:88:8f:59:09:ec:e4:6b:cc:c1:6f:80:9d:80:64:4c:db:
6d:1b:13:9b:0c:b9:11:b2:e6:dd:46:be:1f:7a:aa:71:a1:f8:
b1:5b:73:22:8b:3f:2e:b8:09:af:72:79:1c:ba:65:51:dd:03:
36:4c:5f:e6:3f:5c:b3:17:60:77:ce:9b:57:b7:88:b8:34:a4:
5c:54:14:5f:cd:9f:95:3c:27:b0:bc:32:b9:a9:07:cd:11:cc:
28:5d:f1:77:9f:11:4d:3e:88:28:92:3b:7b:6b:f0:16:b3:35:
69:84:07:c0:71:40:61:9f:89:89:b1:a1:6c:9f:00:82:a7:35:
86:6c:aa:30:39:08:05:9c:a6:0c:ab:d1:f0:26:96:23:71:15:
8f:42:d7:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk2OUMxMTAvBgNVBAUTKDY2QUI0RUI5NjI5RDI2Rjk3RTI0OEE4QzMyNDQ1ODcz
QjdFM0MwRjgwHhcNMjYwNzA1MDc1NjU3WhcNMjYwNzEyMDc1NjU3WjAYMRYwFAYD
VQQDEw02YTRhMGU0OS00ZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxnfUzlkm2q9nkPqpejLW2HX+R2q1q76ara7AT4dNigmvmemRM5Lij3e0Z0KP
Ny4+bRNPCqX4rMY9ryGottnK2nqxKqmAL1zKdKFbohEoyue5n9pJQTQHMlSH7vyQ
OMffA/9jFaDtfbwZ1pZpedxEuR6iU853gk2yxszvZZKA1gkL3ayT4hIaFBoduBRJ
pcVr/9BDnjMH621t73SQSTPLtdbOhXM6xnIQ2rZ5HpcZ068FTFpxOp/ePl5d2qf8
yJeBR3Bfv2ZaEqbJO7SZIyLXs7qWkXBXMxv6zKegcvF0Ayx5ORZTnyOWDH0Rbwdx
Fl04BnKw3UVXZWlZOaBuk+dkuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhQ/d89
lpYtBfiT3Utk6ih3baOjMB8GA1UdIwQYMBaAFGarTrlinSb5fiSKjDJEWHO348D4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTY5Qy85QThGQjU0RTgy
NkMxMUYwQjkzQTBFN0JDNEY5QUUwMi9acXRPdVdLZEp2bC1KSXFNTWtSWWM3Zmp3
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pxdE91V0tkSnZsLUpJcU1Na1JZYzdmandQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTY5Qy85QThGQjU0RTgyNkMxMUYwQjkzQTBFN0JDNEY5QUUwMi9acXRPdVdLZEp2
bC1KSXFNTWtSWWM3Zmp3UGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnXcvp8NT1ApjoOk4HWBCjuTk3EBp90wb+WXNcEtVMI1EI02XK0cCXUBYSv2E
I3hmGuUf+DG3F3KmEIbAN7EruJzBeCZF8rpaQYkVZYoWE9IbS9P+pzxwy1bYI31k
E7pGqu1Jj6P2fSbC/ioHQ5CIj1kJ7ORrzMFvgJ2AZEzbbRsTmwy5EbLm3Ua+H3qq
caH4sVtzIos/LrgJr3J5HLplUd0DNkxf5j9csxdgd86bV7eIuDSkXFQUX82flTwn
sLwyuakHzRHMKF3xd58RTT6IKJI7e2vwFrM1aYQHwHFAYZ+JibGhbJ8Agqc1hmyq
MDkIBZymDKvR8CaWI3EVj0LXTA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:02 2026 by rpki-client