
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json)
Hash identifier: KVdEwKN9NobEYAdfDVceDlgYsE8GwCehk6jkxCVd9w0=
Subject key identifier: 1D:ED:12:0B:0C:4C:55:1C:E9:04:1A:B0:44:04:17:6B:02:46:7E:87
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial: 0D28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
Manifest number: 0D1F
Signing time: Tue 28 Jul 2026 18:18:58 +0000
Manifest this update: Tue 28 Jul 2026 18:18:57 +0000
Manifest next update: Tue 04 Aug 2026 18:18:57 +0000
Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: 5T9CsOnpxt4E2o5qbTO9es2kuIhEKryK/WCVB6PJtCA=)
2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3368 (0xd28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Validity
Not Before: Jul 28 18:18:57 2026 GMT
Not After : Aug 4 18:18:57 2026 GMT
Subject: CN=6a68f292-dced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:29:a5:e9:bf:a9:16:7c:e7:1d:35:f9:a0:
12:5e:1c:b8:89:08:62:d1:a5:e7:83:8e:84:82:2c:
b5:89:05:4a:0c:f0:41:7c:2e:cb:4b:a5:a3:3c:85:
3c:8b:7b:1d:b3:cd:f3:90:fe:88:29:41:3d:9f:3e:
b8:9c:60:fa:e9:04:b3:8d:3c:ce:37:19:95:11:21:
4f:50:0e:92:1b:13:6e:b2:34:3b:de:25:b4:f1:60:
bc:dc:97:01:08:96:1b:10:d3:3c:dc:8d:39:7e:ec:
61:18:c6:90:35:bf:90:6c:ef:d7:7d:69:e5:a4:97:
9b:08:42:82:b3:ff:c3:70:60:37:18:b1:04:50:80:
93:27:f6:5a:b8:b2:42:54:fe:6d:d7:d7:dd:a1:58:
0f:28:ce:bd:24:6f:62:83:64:6e:9a:35:6e:2a:cd:
31:8e:e0:01:51:ba:ef:3e:6f:50:9c:b3:60:4f:49:
3d:90:b6:4f:07:70:27:fd:91:ed:36:1c:86:ff:12:
08:73:22:07:cd:1b:6d:48:5a:e3:bb:af:ab:80:33:
b3:ac:02:01:dc:03:d5:ee:4b:b9:80:0b:e8:60:51:
7b:1d:b4:dc:ae:8a:df:1d:96:5e:bc:cd:8d:32:a3:
0f:12:1d:dc:09:72:31:5e:e5:26:f5:e6:25:88:c2:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:ED:12:0B:0C:4C:55:1C:E9:04:1A:B0:44:04:17:6B:02:46:7E:87
X509v3 Authority Key Identifier:
keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:88:a1:2a:5b:a6:ee:5d:65:d9:aa:66:9c:98:f4:06:72:ae:
f5:f8:5f:36:d9:ea:ca:1f:f4:0c:bd:83:4d:3a:df:e0:e5:24:
43:54:a3:75:70:7b:b0:83:7c:f5:5d:cd:bb:dd:7a:e9:66:0f:
07:05:c6:a1:7f:33:d6:4c:23:d8:59:2f:78:4d:da:2f:67:3c:
d1:98:b7:00:45:e8:16:7e:0e:09:8a:26:a7:dc:cf:72:5c:ef:
e5:9c:95:cd:05:27:f1:6f:ec:2b:f2:a5:a8:46:36:8a:44:64:
55:8b:bc:a0:85:3b:57:d4:7c:cd:d9:f0:42:b2:e7:4e:70:9d:
37:b4:79:94:d6:46:8b:f0:9a:9f:77:8d:cc:63:98:0c:65:02:
d1:e0:38:84:2a:ec:c4:4d:37:1f:c3:5b:e7:4f:45:0e:fb:1b:
e8:47:31:06:76:6d:c9:61:2c:1c:a8:0a:a0:2a:e5:6d:49:58:
38:91:a9:5b:99:8b:37:d3:01:1d:ec:df:df:9d:7e:d7:37:9e:
88:0b:c2:a2:fe:eb:ee:f0:13:6b:e1:46:09:69:72:0b:bf:7b:
da:22:5d:53:88:ce:8d:b4:6f:c7:8b:14:83:6e:9d:33:c7:57:
c2:b7:07:96:54:7c:d3:ce:dd:50:d5:11:1c:a8:5c:0a:c6:db:
d2:7d:8a:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw
NENDMDkxMzUwHhcNMjYwNzI4MTgxODU3WhcNMjYwODA0MTgxODU3WjAYMRYwFAYD
VQQDEw02YTY4ZjI5Mi1kY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumMppem/qRZ85x01+aASXhy4iQhi0aXng46Egiy1iQVKDPBBfC7LS6WjPIU8
i3sds83zkP6IKUE9nz64nGD66QSzjTzONxmVESFPUA6SGxNusjQ73iW08WC83JcB
CJYbENM83I05fuxhGMaQNb+QbO/XfWnlpJebCEKCs//DcGA3GLEEUICTJ/ZauLJC
VP5t19fdoVgPKM69JG9ig2RumjVuKs0xjuABUbrvPm9QnLNgT0k9kLZPB3An/ZHt
NhyG/xIIcyIHzRttSFrju6+rgDOzrAIB3APV7ku5gAvoYFF7HbTcrorfHZZevM2N
MqMPEh3cCXIxXuUm9eYliMIg3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3tEgsM
TFUc6QQasEQEF2sCRn6HMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0
RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4
UHlmVlBaanF4TUVFekFrVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsIihKlum7l1l2apmnJj0BnKu9fhfNtnqyh/0DL2DTTrf4OUkQ1SjdXB7sIN8
9V3Nu9166WYPBwXGoX8z1kwj2FkveE3aL2c80Zi3AEXoFn4OCYomp9zPclzv5ZyV
zQUn8W/sK/KlqEY2ikRkVYu8oIU7V9R8zdnwQrLnTnCdN7R5lNZGi/Can3eNzGOY
DGUC0eA4hCrsxE03H8Nb509FDvsb6EcxBnZtyWEsHKgKoCrlbUlYOJGpW5mLN9MB
Hezf351+1zeeiAvCov7r7vATa+FGCWlyC7972iJdU4jOjbRvx4sUg26dM8dXwrcH
llR8087dUNURHKhcCsbb0n2KLQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:12:47 2026 by rpki-client