
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
File: zcaQgy8tEjXavx7zF_EbaV7r2k8.mft (raw, json)
Hash identifier: 7Wj5dzyCVYQAFW3woxdYOa02mCwWf6nNhQ2Yc/fyjLk=
Subject key identifier: E4:B8:8E:A1:FE:EC:00:87:83:E2:50:B1:9A:D6:67:DE:3F:24:42:28
Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
Manifest number: 2E
Signing time: Sun 19 Apr 2026 08:21:27 +0000
Manifest this update: Sun 19 Apr 2026 08:21:26 +0000
Manifest next update: Sun 26 Apr 2026 08:21:26 +0000
Files and hashes: 1: zcaQgy8tEjXavx7zF_EbaV7r2k8.crl (hash: kQQpc1MbJjGiS+K5g52IvH4zMMZ9DzZcCCie5UPINrI=)
2: 01AB053800E611F1BE6C33EC376F56BC.roa (hash: kmY0qRrvIDIK9Tv6KUtstC/wtlPYaFhtrXRSIWFN1NU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl
rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Validity
Not Before: Apr 19 08:21:26 2026 GMT
Not After : Apr 26 08:21:26 2026 GMT
Subject: CN=69e49086-ec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:e0:32:0d:d6:61:5b:9f:d5:69:e9:25:10:
74:6a:b0:6d:c6:20:0a:f7:e9:e9:67:5b:e4:cd:19:
da:fa:3f:53:68:38:e9:bd:f3:df:57:83:11:49:b4:
82:21:3c:6e:86:bf:f9:b0:b0:d0:32:91:6d:67:28:
e6:6d:28:13:4f:24:cc:95:bb:ec:90:7a:2c:ab:00:
f9:7c:b1:73:40:7f:3f:46:d8:ba:a6:3c:94:bf:ad:
b1:3f:f1:f9:d8:10:69:51:02:4d:0a:42:33:5e:87:
ed:c8:25:49:d1:90:ea:4c:e5:91:ca:7e:58:b6:0d:
b8:1b:cc:84:c5:db:53:97:4d:4a:e4:fb:32:2c:64:
ab:b9:75:92:94:17:b8:5c:be:53:d7:66:11:c4:6f:
ed:3e:93:3f:fc:7c:77:d0:36:b7:a3:3f:0f:e5:b9:
cd:bc:d2:8c:08:92:8d:b3:63:8f:40:4b:b0:33:67:
e4:7f:07:3e:2f:5b:40:c6:fd:cb:77:b1:70:d2:5b:
6a:4d:cb:27:b6:0f:84:e4:40:6f:e8:e2:6d:2b:4a:
93:be:9a:4f:ca:0c:19:7a:c3:b5:de:de:16:0a:d8:
d2:88:1f:79:56:eb:b7:a0:7f:e6:f6:57:bf:da:f3:
18:71:34:3c:11:28:08:5d:bf:a0:66:7b:a1:36:28:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B8:8E:A1:FE:EC:00:87:83:E2:50:B1:9A:D6:67:DE:3F:24:42:28
X509v3 Authority Key Identifier:
keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:b4:4e:90:c9:a0:87:30:50:d6:29:5c:30:e8:4a:e4:4b:b8:
bc:3a:9c:9b:8f:0d:af:2c:2f:6a:53:06:ee:47:29:c4:ea:14:
6b:cc:88:36:90:3a:fa:d1:9f:68:a1:2d:3c:81:25:dc:aa:f9:
de:b3:cc:d8:0e:46:17:bd:ab:0b:f5:f6:e2:a3:7c:8f:82:32:
2b:ba:7c:7e:59:9e:ed:d4:5b:fb:8c:c4:b5:f3:ab:de:45:73:
69:fe:80:c6:6f:f1:57:58:87:07:f0:5b:ba:d8:bf:32:09:6e:
95:3b:b8:11:62:d1:9a:97:5a:bf:1f:68:bb:d0:2d:c5:16:41:
51:83:05:36:52:80:f4:8a:f2:25:99:7e:59:24:32:e4:29:bf:
da:1f:4f:ea:b4:ec:01:5d:bd:4e:ed:fa:53:55:9d:ba:ea:b6:
b3:57:0b:b7:b8:2b:19:db:7c:16:36:43:5f:b7:07:98:8e:bc:
d7:48:7a:da:af:d2:aa:02:21:c5:f8:a2:89:f4:59:f3:7d:8a:
87:7d:ea:81:50:22:0e:31:cd:55:b0:2a:bf:3a:e1:fb:68:88:
92:65:55:49:7c:12:32:00:bb:e2:a3:e8:ca:e5:53:59:c7:91:
54:9b:af:3d:8c:c3:75:5d:45:c2:27:08:7a:e0:65:1b:cd:35:
26:25:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:24:41 2026 by rpki-client