
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json)
Hash identifier: BOkStA4tjk/MJx0CfuM7e6iESDs2hlFGyfzoF6DYBDU=
Subject key identifier: 67:BB:CE:1C:C4:BB:35:E8:EF:2A:FE:10:17:F6:06:F5:21:F7:EF:DC
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial: 0D11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
Manifest number: 0D08
Signing time: Fri 12 Jun 2026 18:10:51 +0000
Manifest this update: Fri 12 Jun 2026 18:10:51 +0000
Manifest next update: Fri 19 Jun 2026 18:10:51 +0000
Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: z69b2BgIRQqfx1g8c3BZmTfNGPhhniso8OuHx8AY6Gg=)
2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3345 (0xd11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Validity
Not Before: Jun 12 18:10:51 2026 GMT
Not After : Jun 19 18:10:51 2026 GMT
Subject: CN=6a2c4bab-c3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:17:b4:5a:b3:25:9e:73:8e:eb:9c:de:13:
64:5d:a6:78:19:a7:1d:96:21:f9:68:8f:c1:2d:8e:
87:79:89:e4:8c:40:44:7c:52:e2:54:db:b5:26:60:
fc:d8:60:17:60:4a:c2:9f:a3:3b:1e:53:dc:36:08:
ed:6c:8e:05:65:7f:a1:02:9f:d3:05:b7:46:a5:db:
9a:f8:e3:02:62:27:60:ae:2a:42:e1:f6:5f:93:a5:
10:c2:0b:32:02:d0:97:ae:0c:0c:b7:02:8c:06:0c:
9a:6a:48:c1:10:14:bd:fa:f1:e7:04:f9:bc:40:db:
07:ca:17:2d:09:aa:af:ab:b4:58:c5:26:0d:66:7d:
01:51:7d:c1:e5:5c:1e:2d:8c:6f:a4:a3:f6:31:9e:
56:a7:d8:db:80:74:ba:1c:a4:0b:e6:d3:fe:27:4c:
f2:55:b2:02:06:7d:f6:e8:fd:52:88:3c:1d:0c:97:
93:41:69:8f:e4:4e:b8:a1:81:af:1b:52:c8:64:fd:
68:40:77:b3:26:44:bd:6c:05:70:c3:fd:56:a1:df:
d8:3f:10:58:d8:f5:38:69:c3:d0:f1:64:12:5b:fa:
97:69:3e:83:81:f7:b9:a6:bb:af:1d:a1:ed:31:25:
6b:8b:a9:58:e0:73:f9:1e:e1:8e:ce:6f:1a:96:b5:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BB:CE:1C:C4:BB:35:E8:EF:2A:FE:10:17:F6:06:F5:21:F7:EF:DC
X509v3 Authority Key Identifier:
keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:19:68:75:f4:6d:7a:82:4a:26:c0:3b:fa:a5:ae:7d:7f:d6:
57:58:a0:15:66:a2:11:c2:11:b0:92:eb:ab:c7:ee:b8:ac:4a:
d3:15:2e:8d:a8:40:a3:aa:38:bb:c7:8c:c9:b1:77:10:dc:0b:
34:f8:78:ec:87:a1:61:1c:a4:0a:58:08:91:4a:9f:34:d5:9a:
fc:e3:a1:3c:b0:a2:d1:e9:2a:43:ba:48:5d:05:43:85:da:7b:
5f:ff:8e:df:be:c3:ef:3f:35:0b:a6:ee:74:d1:79:f4:3d:f4:
95:81:6f:a6:67:fa:ca:e5:aa:0a:4b:34:d3:f4:fe:d2:ae:1b:
5b:84:06:b7:08:9b:05:bb:f3:51:70:b7:45:47:de:af:f0:3a:
64:96:9c:ff:2c:47:67:db:85:4c:9a:15:57:df:c6:28:a8:e1:
ed:1b:dc:3e:ff:ca:a0:2f:e4:cd:58:47:f7:26:a8:5b:1e:da:
b3:d8:8f:3b:17:aa:88:a7:b0:c9:f2:3a:d7:fd:e9:c3:c9:06:
3b:11:96:c9:03:c7:6e:71:86:d0:0d:ce:54:2d:0b:f3:0d:d6:
59:49:60:ce:27:1e:c7:f3:3d:81:e2:48:50:f9:7a:22:6d:b4:
e1:ab:3d:a6:d4:62:91:62:9c:1b:75:2c:bc:1c:e4:25:e6:43:
5f:c1:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:08:52 2026 by rpki-client