
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier: ZLy8pq8XWCg+dquhE7EsHtq8V1Dn+t4ei5gryd7+hqY=
Subject key identifier: 4B:28:A6:DF:7E:2A:98:32:EE:33:26:EE:D3:01:08:4F:49:BC:CC:D1
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number: 0162
Signing time: Fri 17 Apr 2026 04:37:53 +0000
Manifest this update: Fri 17 Apr 2026 04:37:52 +0000
Manifest next update: Fri 24 Apr 2026 04:37:52 +0000
Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: 9GWtiS4C0/i0ZNczRWYuYaetKE/eozR1DX9dwlvlqa0=)
2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: E315WW0WaEtv5nqU/xmLAkhLxUnKQm864OEvRTAgO9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Validity
Not Before: Apr 17 04:37:52 2026 GMT
Not After : Apr 24 04:37:52 2026 GMT
Subject: CN=69e1b920-7913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:23:59:ea:a6:1a:05:2d:1a:f3:f3:41:ee:
16:93:79:1a:e8:7b:71:ed:86:2e:31:26:c6:fc:43:
39:d2:2d:37:ef:ca:53:61:9b:dd:a4:0e:1c:ca:c7:
ee:8c:88:e3:06:6f:2a:61:3c:57:de:4b:8c:88:08:
83:81:5e:d6:67:37:66:32:5e:18:d1:47:d4:d1:fb:
34:7b:21:f9:c8:37:ec:97:ec:62:77:46:6d:e8:6e:
5b:cd:8c:44:7d:16:8c:86:d4:91:05:63:4a:6b:2c:
64:d1:6c:8c:a2:1a:85:44:9f:db:70:6d:70:50:c5:
8e:22:07:2c:ed:29:14:2c:c3:a1:c4:bf:9c:f2:cf:
69:9b:02:f0:37:e9:3f:31:bc:86:97:a5:b2:25:ce:
da:79:63:6f:86:fe:a0:6b:9d:96:d1:96:de:6a:53:
e3:89:14:8d:28:25:88:46:84:9c:32:4f:ed:7a:23:
e1:dd:de:ba:f7:35:5b:51:e0:ae:a7:1c:7f:b1:8b:
19:b9:f0:d8:e1:0f:14:13:7a:e0:b0:44:6b:af:63:
d4:67:e9:fb:f2:49:f9:4d:29:56:d4:a3:a6:38:fb:
18:a8:6e:69:5c:80:df:08:cd:08:fa:bf:be:03:b3:
18:65:c5:e6:5a:94:30:ab:75:55:49:ef:93:9f:d1:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:28:A6:DF:7E:2A:98:32:EE:33:26:EE:D3:01:08:4F:49:BC:CC:D1
X509v3 Authority Key Identifier:
keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ca:32:c1:bc:c2:a2:b1:4c:8b:ca:88:e0:d9:f1:b0:0c:cd:
79:a2:3e:c9:f0:21:59:83:46:5e:6e:6b:e3:4b:67:24:63:e4:
ae:fd:41:f7:78:09:42:69:ef:a0:e8:14:9c:a5:91:7d:c4:c8:
aa:45:a9:1f:03:47:bf:0d:14:2d:74:45:d4:54:e1:7d:69:00:
3d:ce:a0:a0:41:9c:9a:ae:dd:8d:a5:3b:16:8a:84:19:5b:e4:
e8:d0:fd:4b:dc:48:d4:bc:47:e7:48:66:3f:e2:e8:ba:48:16:
d7:5b:6a:6b:be:e5:24:5e:64:00:aa:c4:1d:fd:d3:e1:64:f9:
58:ff:3c:38:03:52:1b:21:30:4d:9c:b2:d2:25:53:59:77:e5:
95:32:e7:23:b4:1c:49:d2:93:82:6f:cb:51:bd:84:48:4a:ab:
5c:8c:4e:26:e2:7c:f1:d1:f7:06:31:3e:3f:6e:0b:86:63:4b:
0d:74:42:28:63:e0:b8:f1:f4:88:af:08:ca:94:39:22:84:c0:
fc:d2:be:e7:16:fc:fd:57:d6:6c:d6:d0:35:4a:c0:7f:0a:fc:
f5:ea:7b:38:49:6f:0c:a8:03:38:0a:d7:ab:33:b2:15:e0:05:
b2:4c:d8:db:42:08:f8:70:85:a8:69:ea:cb:a2:08:49:3f:18:
af:89:3a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:12 2026 by rpki-client