
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json)
Hash identifier: 8viXoA551w4JJZ+1xHVJ3KXRBu669ctrodA4/EpLW3s=
Subject key identifier: B6:8C:87:6F:E4:69:F2:3B:F3:0F:BE:DB:94:E3:B1:F6:C6:B2:ED:7B
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
Manifest number: F9
Signing time: Wed 15 Apr 2026 05:51:24 +0000
Manifest this update: Wed 15 Apr 2026 05:51:23 +0000
Manifest next update: Wed 22 Apr 2026 05:51:23 +0000
Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: NsIjGLNRvwGU2ceyKWq/VgAp6LNb4LOSz/FHlkZuAQs=)
2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: gk55dQC8eTI12/UHwkyE0xAYw726BD8sevAqReEeCXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Validity
Not Before: Apr 15 05:51:23 2026 GMT
Not After : Apr 22 05:51:23 2026 GMT
Subject: CN=69df275c-bc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:9d:cc:84:5e:a5:99:e7:d6:4a:25:79:52:
16:bc:9e:6d:c8:4e:9b:f0:4c:8d:f8:fc:30:41:a0:
5c:0c:9e:f1:f2:bc:fb:00:50:07:dc:b3:1f:27:20:
76:22:8d:c8:96:60:f2:b0:f6:a8:98:f2:1c:67:28:
72:48:e0:8b:83:44:9d:3b:e1:0c:bb:25:cf:7a:ab:
9b:f3:cc:9e:42:91:46:c3:0b:57:0e:32:1c:56:4c:
37:8b:51:85:d4:09:a0:de:64:ed:18:85:6c:f8:14:
03:e7:8d:0c:9c:d7:3d:98:7c:69:bb:96:f3:cc:c0:
5c:36:e1:56:a0:eb:60:f5:c1:13:7d:a5:8b:55:00:
ae:8e:20:a2:e4:e4:7c:b6:e2:05:53:d7:35:f2:9c:
1d:52:e3:e8:4a:85:0c:a6:d9:be:0c:f0:3c:38:d7:
a5:4d:8c:51:68:8c:4e:df:9e:cb:0e:6a:46:27:88:
35:67:42:cc:ce:25:c8:fc:8c:be:f6:98:e2:65:b9:
79:5a:b6:4d:56:20:60:16:d9:da:98:77:1c:21:3d:
90:63:7b:85:ef:ee:c3:0d:eb:45:9a:e5:a9:6b:6d:
16:cc:b9:39:06:7b:a5:f6:fe:b1:05:b3:8a:3c:1b:
4d:25:71:5f:28:83:b3:cb:c5:72:12:cb:78:2a:93:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:87:6F:E4:69:F2:3B:F3:0F:BE:DB:94:E3:B1:F6:C6:B2:ED:7B
X509v3 Authority Key Identifier:
keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:85:c2:d1:d5:de:96:5b:43:d0:bb:70:a2:58:b5:cf:25:88:
a2:b7:80:11:c1:92:da:63:64:30:53:5c:45:0b:94:65:e7:17:
6a:02:d7:99:38:97:26:b8:4e:7f:de:c6:b4:c8:83:f1:aa:fb:
d5:7e:83:bd:5b:2f:ff:52:06:0b:e2:e3:2f:8c:ec:ed:95:e7:
d5:5e:77:f1:31:15:f9:1e:ca:95:54:60:be:88:cc:d6:97:68:
a8:4c:db:19:b8:70:34:2a:7a:2f:c0:95:cf:01:2c:a4:16:6e:
f3:0b:3d:6e:49:eb:b5:80:e1:d0:bb:9e:41:26:a2:fb:04:4c:
b5:b9:42:33:f4:3c:8d:c0:0c:36:de:7b:8a:a8:79:c6:3b:da:
f0:d7:3f:ce:7a:11:37:ca:f3:da:11:47:dc:39:65:3c:95:b7:
cb:36:e6:e8:84:4d:2c:8f:be:3d:70:0b:be:06:56:d2:8b:55:
69:68:79:51:30:96:25:83:87:1d:ab:61:5f:0d:6b:3d:d5:ee:
45:d3:48:d4:4f:22:1d:07:4f:ce:66:70:9c:f2:64:fc:6d:9d:
7b:30:d4:78:9d:4e:96:24:a1:47:88:7b:b2:98:14:b6:e9:3a:
3b:db:8d:66:33:a8:43:d7:17:a7:04:5d:b6:52:21:f6:8b:f8:
15:7e:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:05 2026 by rpki-client