
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json)
Hash identifier: 6WD43bkdNTf34P8nAxSbwiz7Y/jHJeA1VLZwyKT5P2E=
Subject key identifier: CF:5B:8C:13:94:34:95:ED:BF:28:34:FD:B8:9D:30:4B:A0:EA:B2:12
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial: 040C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
Manifest number: 0401
Signing time: Sun 11 Oct 2026 00:30:56 +0000
Manifest this update: Sun 11 Oct 2026 00:30:55 +0000
Manifest next update: Sun 18 Oct 2026 00:30:55 +0000
Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: 8DfUXVE5+UUUQOFHM3Q8rUPNOJp/Mu/4X8ABI2emJv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 00:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Validity
Not Before: Oct 11 00:30:55 2026 GMT
Not After : Oct 18 00:30:55 2026 GMT
Subject: CN=6acad8bf-d9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:b6:41:39:47:79:88:3a:f3:0e:68:e9:fd:
63:a6:77:ee:13:ea:1f:85:a1:d9:2f:2e:56:56:4e:
86:e9:a8:a9:f9:28:7c:99:a3:0e:c7:77:2d:fa:7f:
47:37:f1:8c:3b:30:e4:b2:26:02:16:c4:66:21:8a:
82:98:04:79:d0:72:b6:c6:66:7d:14:f9:3d:f1:f6:
2e:7f:bd:e7:7b:12:50:d7:8b:3e:b3:97:f1:af:43:
59:d0:54:28:db:3d:5e:3e:c1:39:5e:e2:97:2e:3e:
f2:03:65:a5:16:78:a9:a3:4b:dd:17:c8:39:53:8f:
75:eb:18:d3:28:96:2a:42:d6:d0:57:ab:9e:d2:16:
25:9b:a3:68:f9:d1:fa:23:cb:a7:1e:37:e4:aa:85:
e3:d5:4f:a1:78:0e:4a:69:55:ec:f5:40:81:f5:0c:
0a:91:83:df:14:ba:c4:cd:d6:79:1e:58:b3:b0:05:
cb:60:ee:76:60:bf:ae:8e:f0:30:ea:dd:bd:55:cd:
81:ce:48:cf:25:e8:1e:b7:a1:e2:7c:f8:6b:2b:0b:
35:85:0e:52:40:e6:ea:8c:49:64:c8:24:14:8e:23:
5a:03:e1:fa:6e:ad:f0:0e:3a:a0:19:a1:b8:3b:2c:
78:1f:4b:67:70:e6:25:33:31:a6:35:6b:7a:58:f2:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5B:8C:13:94:34:95:ED:BF:28:34:FD:B8:9D:30:4B:A0:EA:B2:12
X509v3 Authority Key Identifier:
keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:d6:bf:7e:88:fa:69:5e:d7:1f:78:03:4f:cc:29:df:f5:58:
bd:d3:b7:62:88:9a:ab:2e:06:30:e9:2e:3c:16:77:b8:08:47:
5c:20:d1:4d:94:a7:07:48:b2:80:de:25:3d:bc:63:87:b4:bb:
fc:b0:a0:ed:b7:dd:c9:d8:28:12:51:51:49:2d:a4:22:4e:c4:
e6:54:9e:22:f3:9b:a8:29:2f:83:de:84:bd:20:a1:5f:ca:4a:
e7:03:ff:25:42:d1:78:a5:bd:48:cd:17:24:b6:8d:36:10:8a:
79:8e:f9:6b:9c:79:aa:8e:8a:91:7c:ac:62:fc:88:32:d9:77:
34:b5:fe:be:a1:43:2b:ad:e6:18:3a:44:d8:de:31:3a:4a:3b:
38:26:83:3c:71:fe:4b:10:aa:0a:fe:01:a2:04:e3:f8:0a:77:
6c:26:2b:fc:37:bf:a2:17:1f:d8:a5:de:66:34:3f:57:03:07:
30:74:51:a3:0b:1b:fb:1a:3e:94:91:a8:97:29:b8:d4:04:ba:
82:65:06:f2:a9:9b:e0:c6:6b:76:ce:a8:03:85:a0:6a:db:49:
db:0e:8d:84:29:e8:56:ce:dd:89:9a:fc:96:e3:24:d2:9d:a7:
63:6f:bb:33:4b:8e:63:00:77:79:cc:b0:6f:20:c0:a2:52:6f:
9b:22:b1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:33:38 2026 by rpki-client