
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
File: ZGscQagf9-WCtezcHO9UzmEVJWM.mft (raw, json)
Hash identifier: eNLPgUSUDnmYr89JuIcP4hkPbB6TkqAQ+ivORQzRRB4=
Subject key identifier: B9:F4:DF:86:A2:D7:4E:E9:8E:8B:AD:08:2C:62:67:85:7E:ED:8A:C8
Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63
Certificate issuer: /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563
Certificate serial: 1E06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
Manifest number: 1DFA
Signing time: Sat 18 Apr 2026 16:01:36 +0000
Manifest this update: Sat 18 Apr 2026 16:01:36 +0000
Manifest next update: Sat 25 Apr 2026 16:01:36 +0000
Files and hashes: 1: ZGscQagf9-WCtezcHO9UzmEVJWM.crl (hash: yFD5WJFMZIcvAppuaDTtZyL+0PdlQXCkv+APPpf+4aY=)
2: 810AF2B0AC9611E6A37EC415C4F9AE02.roa (hash: 3geyNyHlLt4m67I8XY+XLIc0Dfd7U5LMWFn+gd8QVdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl
rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7686 (0x1e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129D4A, serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563
Validity
Not Before: Apr 18 16:01:36 2026 GMT
Not After : Apr 25 16:01:36 2026 GMT
Subject: CN=69e3aae0-97c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:44:3f:5f:53:fb:6a:90:58:c3:3a:a8:27:
80:59:f0:78:4c:0f:7c:38:b5:df:16:bc:33:c4:b3:
a4:8c:71:52:a3:ff:d5:7c:28:df:bc:3a:52:b6:23:
17:f5:66:66:41:69:b7:ea:6b:4f:5c:15:b9:27:7f:
77:64:88:59:66:e1:44:5c:92:8f:22:f6:95:bf:31:
26:d1:59:92:57:9a:b7:2b:65:9f:77:f0:3b:04:1e:
28:6c:93:17:b3:8a:32:ba:6e:60:9c:0e:59:83:4c:
f0:a3:5b:c5:07:63:6d:32:e2:55:4d:28:4b:80:f9:
6a:c3:1e:3c:45:6c:18:09:3b:79:2d:87:ff:73:36:
b5:ca:9a:7a:15:f1:d1:d8:d5:2c:9b:f1:de:10:8f:
c3:49:a7:31:a5:b5:06:89:13:69:ad:16:b7:26:92:
39:56:a9:1c:9b:7f:a3:7b:7c:00:98:53:49:7d:6f:
cd:5b:19:86:b2:de:1a:98:bc:ed:b2:58:1c:c9:4a:
14:9e:56:21:57:d8:bb:32:72:2a:31:4e:36:6c:13:
51:98:22:5f:2d:3d:41:6c:1b:52:4d:83:ee:35:af:
65:ee:5c:b9:79:8c:14:92:f0:ec:75:85:d8:2f:bd:
cd:7b:34:5b:00:b8:db:c2:ba:a6:40:47:32:62:4c:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F4:DF:86:A2:D7:4E:E9:8E:8B:AD:08:2C:62:67:85:7E:ED:8A:C8
X509v3 Authority Key Identifier:
keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0b:46:65:e5:15:f6:6d:e9:6b:36:51:2f:0a:e5:49:22:e6:
4d:4f:ee:55:ec:39:04:e0:4e:20:24:d6:7b:11:12:bb:89:e6:
45:ba:0e:08:76:79:a9:b0:43:6b:70:fd:42:fb:bb:f5:1e:31:
fe:9d:cf:95:3f:35:d5:42:2f:28:f0:94:60:59:23:91:a2:51:
9e:49:de:04:da:16:fd:fb:f4:d5:be:c1:92:5d:26:aa:76:c3:
bc:b0:a5:79:c9:9a:cb:91:6d:70:6e:23:72:8b:0f:0b:e1:e4:
9c:08:ea:dc:4f:d2:d2:e1:1a:51:9f:a7:0b:a7:a5:ad:24:c5:
62:7e:93:31:30:cc:e9:ab:bf:6f:d3:04:51:e7:67:e6:07:12:
0d:5b:9e:a1:39:55:1a:37:b7:b3:57:74:cc:fc:44:46:60:e6:
84:08:e6:e0:45:1a:28:b9:16:e1:62:3d:8f:e9:e6:67:b0:7c:
d3:66:9e:6d:13:c5:ac:78:e6:a1:06:f5:8d:c7:04:5d:34:53:
97:4d:bc:6a:eb:a8:c4:2e:cf:c9:ea:ef:ea:ee:4a:b2:16:d0:
23:4b:66:17:f7:e6:cd:c5:4e:f6:69:41:60:91:88:26:79:83:
33:9f:df:44:af:a2:45:bd:78:62:ec:f7:42:26:c2:39:92:ae:
fb:c8:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:54:17 2026 by rpki-client