
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json)
Hash identifier: qT63jhsepJExz6VL3EYjOFmBpPx4fkRXx0e/wFlXKzw=
Subject key identifier: FB:04:82:46:76:F9:1E:4A:C6:B6:7B:3E:15:5B:3F:55:4C:79:9F:E7
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial: 03B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
Manifest number: 03A7
Signing time: Fri 17 Apr 2026 00:40:21 +0000
Manifest this update: Fri 17 Apr 2026 00:40:21 +0000
Manifest next update: Fri 24 Apr 2026 00:40:21 +0000
Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: xuc9K4ARTYNF6Zf9upBFEFhjQJG6OQolbfvItoRUO2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 946 (0x3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Validity
Not Before: Apr 17 00:40:21 2026 GMT
Not After : Apr 24 00:40:21 2026 GMT
Subject: CN=69e18175-5a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:1b:16:32:3a:56:a4:a0:54:a0:9b:4b:0a:
51:9e:35:43:1b:4a:c8:6a:c7:27:91:3f:fb:ca:97:
60:37:04:63:bd:9f:84:60:b8:af:64:22:62:08:dd:
5a:72:3b:48:0a:ab:05:48:99:00:44:15:e8:28:26:
7c:53:48:3a:bf:8b:67:2d:54:8f:10:4a:f9:46:15:
b0:54:ef:90:81:fd:ca:b0:fe:f8:8d:79:ca:4d:d7:
b8:3f:0a:55:83:2e:f8:c1:ca:3f:e6:5f:c9:32:71:
4d:e3:a4:4b:b4:00:b5:9b:21:36:97:9f:c7:02:16:
94:e3:b3:57:40:51:64:63:6f:9a:1c:5d:ba:ee:90:
c9:3c:0f:bc:ef:58:03:4f:ff:b0:13:9c:40:57:e3:
90:01:a9:53:ba:ac:21:7f:bb:46:68:e6:96:f1:19:
f7:2b:69:23:0d:02:08:69:8f:ec:47:3a:aa:5b:50:
89:72:7c:62:12:1a:99:82:73:36:7d:30:d5:a4:75:
98:46:e3:22:8b:c7:c4:06:3f:49:bd:4a:5b:4c:05:
34:2c:89:1f:6c:ca:94:99:99:77:dc:9a:17:f2:44:
08:93:07:04:5c:9b:c2:c3:4b:c2:01:9e:ea:b5:ea:
d5:d4:d3:0f:5e:03:24:89:6a:1f:7d:b2:7a:31:57:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:04:82:46:76:F9:1E:4A:C6:B6:7B:3E:15:5B:3F:55:4C:79:9F:E7
X509v3 Authority Key Identifier:
keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e0:b0:56:f8:96:37:0c:c8:b2:19:0a:9a:1d:9c:8d:43:32:
0a:1d:8d:90:b1:85:27:9d:21:8f:bc:33:d6:c1:83:7c:17:b5:
7b:23:41:cd:88:3f:21:e0:79:47:0b:1b:be:9e:86:e8:6d:24:
97:ec:4f:6e:03:15:c4:ed:03:15:48:ff:85:bc:28:e9:03:da:
b8:ec:57:91:5b:43:ce:6d:7e:14:8f:5d:53:ce:77:f6:a6:7b:
1a:e8:9f:08:7b:84:16:51:83:50:93:e0:3a:a6:9a:e9:c1:3d:
58:60:4f:88:82:61:9a:1d:9c:df:43:e4:5b:ac:95:4b:c2:c9:
a7:1e:57:fb:4d:6a:c5:0d:1c:3a:c6:64:5e:4c:56:35:ce:ba:
e1:7c:94:30:76:44:04:40:88:dd:0d:ba:c4:27:e7:df:8e:06:
1b:6d:94:8a:89:36:95:f3:2e:82:10:bf:13:ce:97:e7:23:bc:
30:a7:9f:38:1e:37:5f:1a:5c:69:6f:ac:06:6c:f3:c8:0a:12:
73:25:79:e1:57:09:03:46:f9:12:0b:9f:dd:70:22:c4:22:75:
67:47:04:98:74:e1:eb:9b:46:ce:23:c1:46:00:4b:72:41:bf:
4f:a1:5e:bb:21:02:4f:25:3b:85:08:e7:67:1a:2b:ff:fe:f9:
bd:2f:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:54 2026 by rpki-client