
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
File: zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json)
Hash identifier: E/IAgmlNoV/3idAIDbGY0hBLh1JySPfdAdjqfNWWKtA=
Subject key identifier: 0A:3E:34:06:CE:A3:50:6F:4B:C5:B8:75:26:5A:8C:3E:1F:2D:D7:04
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
Manifest number: 51
Signing time: Mon 01 Jun 2026 09:05:16 +0000
Manifest this update: Mon 01 Jun 2026 09:05:15 +0000
Manifest next update: Mon 08 Jun 2026 09:05:15 +0000
Files and hashes: 1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: DYl5Grirum6/OirE1h3r/VoInI/26y7mFW04SYAWq5Y=)
2: 81B5D9F8440511F1AB7B95FDB3833773.roa (hash: vn//9j6htUmeMHzJ/Tep4NLTfUBbskiXsWzwXG8Uy9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Validity
Not Before: Jun 1 09:05:15 2026 GMT
Not After : Jun 8 09:05:15 2026 GMT
Subject: CN=6a1d4b4c-f9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d9:e8:cd:8e:53:f9:27:2a:11:28:a0:c3:ee:
86:2a:60:1c:3b:fa:af:36:24:6c:0a:f6:e5:99:9e:
31:d2:bc:6c:8f:95:37:fa:f9:db:57:35:83:77:65:
70:37:b0:e0:86:8f:71:30:40:fc:8b:9d:db:74:0b:
09:dd:a9:bc:f5:45:0b:dd:50:d9:1b:67:40:a1:26:
30:ad:ac:dc:56:d7:6d:ae:2e:2e:70:0c:f2:a0:98:
e7:80:02:70:00:4e:ab:f5:8b:3e:71:aa:c0:a2:df:
d1:d5:94:ea:ff:c8:2b:86:8f:4e:30:33:f5:43:d7:
83:6f:21:e0:1e:fd:5e:a2:51:a1:ce:9d:2c:9b:4a:
49:d4:d4:b6:85:15:7f:76:3b:d3:eb:09:ee:70:1a:
b2:9e:b4:23:9f:4b:4c:2f:3f:d9:9c:90:92:cb:3e:
dd:dd:dd:42:7a:4f:06:07:a5:b9:44:cc:5a:8b:96:
3b:ed:44:b9:40:97:a4:87:6b:34:99:c1:3c:d9:be:
da:38:d1:7b:18:1e:f1:13:32:55:e4:42:1b:58:9b:
92:4a:30:b3:77:f1:2d:53:2d:37:8c:b9:f1:cd:81:
95:e6:a1:dd:f9:3a:63:83:28:b6:c6:d0:67:81:5b:
28:97:ea:82:7b:da:c2:2b:f5:e7:39:97:bf:f6:73:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:34:06:CE:A3:50:6F:4B:C5:B8:75:26:5A:8C:3E:1F:2D:D7:04
X509v3 Authority Key Identifier:
keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:c4:54:4c:67:fb:8a:9b:0b:fd:5f:2f:86:2b:28:12:ee:9f:
12:03:48:7e:1d:b0:8c:31:2f:e1:65:20:14:ea:1c:07:28:1d:
b7:42:1a:d4:ab:9a:65:aa:7d:1d:e6:33:9b:99:b1:e9:d2:44:
bf:cd:b7:37:2f:3a:cf:cb:78:10:0d:84:1d:3c:9a:51:2a:4f:
14:76:8e:2a:f2:c3:e8:45:c3:4b:22:05:11:0f:21:c7:fe:f1:
6a:5b:34:27:52:fd:15:42:95:c4:34:c5:37:65:c4:20:c2:da:
c2:3d:63:cf:bd:8c:29:8e:a1:26:4f:d3:3e:a3:c9:0c:59:c1:
f0:54:28:ad:95:e3:99:d9:a8:28:a8:ae:52:3d:fb:97:c9:3c:
cb:1a:da:70:e1:f9:ad:43:32:5d:37:a0:fd:ca:e3:c4:14:d5:
15:68:f8:47:eb:fc:16:af:8a:c4:2e:2d:cc:7f:51:98:c7:fc:
4a:8b:f4:c4:1e:04:1a:4a:ca:52:0a:4e:47:ed:f1:b7:08:5d:
c6:f7:89:72:0e:07:24:53:8c:6d:24:e8:9c:e5:80:8d:a7:6e:
2a:b6:75:72:e3:f0:8d:36:6e:1d:5e:53:6c:af:8b:50:f0:a3:
19:c1:9d:21:3f:35:5c:3c:45:bb:e0:99:52:17:36:3b:7e:b2:
3d:b3:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:04 2026 by rpki-client