
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
File: zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json)
Hash identifier: Ibzc79uvsK9jw2fcXlQgbex8TNKbr5nBZabnntx/Tn0=
Subject key identifier: 33:CF:20:5F:B2:5B:B5:5A:1C:90:0E:4F:87:EB:ED:16:40:DB:3F:0B
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
Manifest number: 9F
Signing time: Thu 29 Oct 2026 08:07:18 +0000
Manifest this update: Thu 29 Oct 2026 08:07:17 +0000
Manifest next update: Thu 05 Nov 2026 08:07:17 +0000
Files and hashes: 1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: 6LgMf8fIjsxRSaJ389yS8A3XCQQzYkpd7KSK+ly/HPs=)
2: 5B7F78E0948A11F193C8715B6511F970.roa (hash: p83LjNke8Ymi6mycmLDbyA/QmdOPAdeSckRGwIMfBdg=)
3: F48C677A94A611F18AF960C06E11F970.roa (hash: RiTXH+oE8/EvAfBAsrOw7LlQy+djoD6hDUue74QmBm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 08:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Validity
Not Before: Oct 29 08:07:17 2026 GMT
Not After : Nov 5 08:07:17 2026 GMT
Subject: CN=6ae2feb6-cb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:82:5d:cc:6e:17:05:84:dc:9c:3a:54:2b:
bd:38:8f:5d:e6:24:ed:0e:93:d5:53:82:59:f4:56:
68:9b:9e:87:5f:5a:1b:84:4a:e5:30:86:d3:28:79:
5d:31:5d:b6:c3:51:dc:ab:5d:43:2d:e7:d5:af:d7:
d1:5e:24:4a:99:ee:7b:ae:9a:de:2a:2c:60:4f:a4:
a8:35:42:18:9d:ad:d2:7b:4b:0f:1d:3d:f9:92:04:
cc:1e:84:57:43:6b:90:e2:df:20:24:2b:3d:7f:d9:
f0:4a:5e:c5:39:75:c5:6c:aa:bb:3e:87:b0:07:70:
03:53:47:33:43:e1:94:7a:ab:dd:38:a3:65:ce:1a:
03:e6:64:e1:ee:76:ca:b9:e1:d7:b4:98:22:04:75:
7c:e0:a9:1d:d2:e0:ae:aa:2b:1f:f5:f8:57:5f:ad:
1a:8e:c4:90:dc:6d:62:2d:3e:a0:0e:33:85:bc:05:
dc:4c:5e:22:87:94:9d:43:29:47:4e:8c:93:ba:5f:
80:24:d7:06:bb:d9:be:b2:fb:64:56:86:68:f3:67:
6f:86:4a:a6:42:08:b5:f5:44:67:a6:e7:b7:3c:41:
5c:42:81:69:5b:c6:48:d6:03:4d:e1:17:ed:24:01:
01:79:e5:c5:e3:96:8f:83:45:9c:7e:a2:78:90:af:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CF:20:5F:B2:5B:B5:5A:1C:90:0E:4F:87:EB:ED:16:40:DB:3F:0B
X509v3 Authority Key Identifier:
keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b1:22:1c:9a:6f:12:3e:09:be:74:9d:23:64:bf:20:f3:58:
e1:ac:22:11:fd:a2:6c:30:9e:8b:64:e8:22:ae:54:73:5c:e4:
cf:84:2d:57:a3:fa:30:0b:07:47:01:b5:2a:37:6e:a7:67:b8:
07:19:a5:b8:77:90:59:4b:b6:db:e8:48:34:0c:1c:4c:a6:7a:
8d:f5:2e:25:d4:fa:b1:d4:57:a2:43:53:f4:90:19:a1:5d:28:
a9:d1:f6:09:03:d9:b5:25:b0:5f:48:73:fb:0d:96:05:48:03:
56:6f:ac:4d:19:e7:57:07:67:31:9a:7f:39:ec:e6:8f:b5:ae:
0f:b9:03:b5:f7:80:b4:a0:b7:52:26:db:30:b4:06:34:5a:5c:
c4:bf:c9:76:30:d7:3b:15:e6:1b:62:7b:26:55:bd:af:94:84:
85:30:a5:1e:c0:de:c5:4a:bc:a6:1f:03:83:9f:7f:69:c9:11:
ea:23:eb:9f:97:4f:88:03:18:8a:61:c9:34:30:c9:d6:40:41:
0d:f9:a9:f3:e2:aa:cd:48:cb:24:f1:b2:49:6e:d6:9c:a1:61:
73:19:3d:5f:94:88:53:92:84:c8:e4:77:f5:6c:80:81:68:49:
67:f7:fd:28:98:57:f8:c9:16:4c:cc:02:11:58:94:79:0e:91:
24:56:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:54:47 2026 by rpki-client