
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json)
Hash identifier: TFLd5lrix0fOhgrKDs/E2Oe+2ElC1g4JObQiAkG0l9A=
Subject key identifier: 7D:9F:00:AF:05:7E:52:6D:93:F2:C6:9A:82:A0:8B:BA:89:06:C5:E5
Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF
Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
Manifest number: 015B
Signing time: Sat 13 Jun 2026 04:58:37 +0000
Manifest this update: Sat 13 Jun 2026 04:58:37 +0000
Manifest next update: Sat 20 Jun 2026 04:58:37 +0000
Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: T6EhawYQGXt857L2nXLwIH8cDeV/GVg4bwJ9fdG2yrU=)
2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: KClykHKChBZ5Bx9B5+rZuGfT1EY+y0O+dL2jNFzbRSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl
rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF
Validity
Not Before: Jun 13 04:58:37 2026 GMT
Not After : Jun 20 04:58:37 2026 GMT
Subject: CN=6a2ce37d-0b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:d9:50:ed:42:da:69:f6:c8:8d:e1:ac:43:
ec:e9:7f:3f:4d:90:5e:04:14:97:54:7b:90:99:9b:
c5:1c:0c:77:00:53:26:82:bf:4d:5c:d8:80:52:87:
b2:63:9a:78:52:8a:c1:b6:3f:51:55:1f:fb:db:f4:
ab:0b:fd:38:c5:ce:9e:e8:72:ce:5e:d7:c5:02:ab:
6d:a9:a8:29:2f:d2:39:e7:3f:16:a0:b5:8a:fd:ae:
5b:3d:d5:fd:01:67:b2:b9:b7:c1:23:1e:3f:c9:a9:
77:ef:e1:87:59:1d:35:32:db:6f:2c:d9:61:91:c0:
1c:d6:25:0e:ca:a6:bb:bf:68:b3:dc:9a:ac:4e:be:
5a:9e:48:e5:08:12:cb:4e:4b:69:65:3b:5b:e6:89:
bb:1d:c5:b7:66:05:e1:38:51:3a:e6:c6:e6:0d:ed:
e3:bd:50:07:e6:ff:a5:65:6b:51:47:e9:e1:92:cf:
30:63:7b:fa:a6:70:1d:8f:e6:51:f0:77:9c:1b:c4:
9d:83:d7:64:d6:9d:9c:67:e0:eb:4c:dd:1c:08:5c:
47:ba:a6:b0:31:bf:16:55:de:07:b8:fb:7c:5a:35:
2d:2a:d3:36:85:da:06:ab:d0:6e:c5:b6:96:27:7b:
e7:9c:5c:ae:b5:bf:38:4a:b7:55:f3:46:f4:b6:1b:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9F:00:AF:05:7E:52:6D:93:F2:C6:9A:82:A0:8B:BA:89:06:C5:E5
X509v3 Authority Key Identifier:
keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:5c:f9:6a:3c:30:ea:20:1b:89:8a:57:16:65:32:b3:b4:f3:
b7:c0:80:89:75:af:b5:2a:8f:89:a6:ae:4b:0c:79:ae:f0:fb:
22:5f:f7:73:7d:b9:cf:8b:f4:0a:4e:02:4a:0e:a2:f0:be:9e:
fa:53:ef:87:c3:69:bf:68:62:2e:0c:4e:09:15:e5:c8:f1:15:
86:c3:4a:24:96:b6:43:30:85:76:14:4b:7e:ce:05:96:f9:c2:
e6:4d:56:87:e7:4e:06:45:0e:bb:e0:aa:83:cc:1b:89:be:7f:
12:f0:99:dd:e6:a1:6e:a2:18:28:a4:8e:10:d0:f5:41:e3:a8:
a3:91:cc:2e:49:41:59:6e:9e:21:52:e0:d2:0e:0c:f8:3f:50:
11:72:30:58:43:58:20:ab:f8:07:f5:70:63:6e:b3:d0:f6:bb:
81:ee:0b:d6:85:ce:7d:9c:42:f0:a6:79:4b:8b:8f:ca:1c:93:
5d:49:a7:e8:6b:26:dd:78:38:ab:a0:93:63:0f:04:50:af:b3:
f3:02:1f:f9:5d:5c:22:e7:05:74:f6:de:3c:92:2e:fc:eb:02:
36:07:1c:a3:cf:67:d7:d4:03:1d:b9:a3:df:1d:dd:ce:df:d4:
20:cf:50:d2:5e:f1:31:c5:5a:1a:17:eb:9d:02:cb:f1:f2:ec:
57:d0:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:20:59 2026 by rpki-client