
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier: LoaffLPO+VV/ADK7DZfi6OiRhq5FWtb40VK7I4C7b2c=
Subject key identifier: 11:2D:F8:A5:9E:9E:C0:C4:8F:0B:DA:12:63:EE:BC:64:18:EC:80:62
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial: 0536
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number: 0523
Signing time: Sat 10 Oct 2026 23:40:19 +0000
Manifest this update: Sat 10 Oct 2026 23:40:19 +0000
Manifest next update: Sat 17 Oct 2026 23:40:19 +0000
Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: Dto1uzICmiAZ5w9vc5/IZcqK4pt4kUl5rR6N3gJBf2U=)
2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: L0YUjWVE6ClQnbjkSz7YliWfDv2+LcOW4hK3DI2GwKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Validity
Not Before: Oct 10 23:40:19 2026 GMT
Not After : Oct 17 23:40:19 2026 GMT
Subject: CN=6acacce3-a523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:d3:03:58:2c:03:a7:d3:af:c7:cf:cf:51:
81:c9:b6:01:38:38:1c:08:5d:44:42:5d:42:39:48:
3a:03:f6:23:19:44:0d:85:09:ba:fc:31:c9:0a:9b:
ec:01:f7:53:1e:d7:1d:70:42:24:d9:1a:af:41:67:
02:69:25:7c:57:d8:57:bc:57:c0:7c:c8:f5:cb:d4:
e5:69:0b:59:73:78:34:fb:3f:06:13:b0:f0:a8:5d:
15:5b:e2:29:18:a6:37:ed:fa:53:2e:f6:91:7f:d6:
23:90:d2:8c:b6:14:49:4a:e0:01:fe:48:d6:d5:4d:
7e:54:8e:b8:83:80:f4:4f:f2:4c:3f:eb:da:2b:59:
bd:24:bf:d5:d1:9b:3c:81:4c:bc:15:53:32:e5:bb:
5f:ff:bd:2f:45:11:0b:a0:b9:49:aa:dd:9c:33:78:
bc:f8:64:34:19:90:bb:44:2e:19:58:75:f9:b7:99:
cf:d9:46:4c:09:ee:4a:75:74:dd:b7:12:ca:54:2a:
47:b2:f4:56:9d:ff:3e:3e:29:6b:9a:8a:81:2a:f8:
d0:19:47:96:16:a9:81:88:1b:03:9a:91:60:e9:11:
52:bc:74:27:ad:93:f9:b1:a7:43:24:ba:f1:03:1b:
a2:81:9f:64:a5:cb:f7:63:bf:48:b3:04:4a:8a:3a:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2D:F8:A5:9E:9E:C0:C4:8F:0B:DA:12:63:EE:BC:64:18:EC:80:62
X509v3 Authority Key Identifier:
keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:e5:44:ab:b4:b2:3d:f5:78:25:f6:d8:56:dd:c6:5b:7b:be:
0a:d8:19:1a:fe:79:9f:e7:99:cb:86:7c:a1:06:be:0a:6b:b4:
6e:f7:97:1a:50:af:d4:1a:a8:87:0a:8d:29:cb:60:20:87:84:
77:ac:0f:96:db:f9:5f:da:51:b5:ff:cf:4e:0a:ff:70:8f:95:
43:f6:16:21:1c:e1:bd:22:3a:64:9b:86:ad:c9:a6:e1:3f:fb:
eb:5f:45:49:5a:20:68:bb:7e:4c:5a:67:25:03:04:06:57:a3:
38:fc:f6:0d:fe:b0:1b:8a:03:fb:77:30:e5:a9:7c:05:01:5c:
e8:ab:8b:ef:54:eb:21:f1:16:1b:44:3a:7e:44:6a:d4:c7:d5:
e3:76:d3:40:71:10:6c:a5:e1:b4:58:8e:03:bb:4f:bb:b9:bc:
dc:75:4a:c9:8f:4e:98:f6:c0:f5:94:94:72:e6:c5:10:63:86:
ad:f1:0d:c4:14:e2:a8:9c:ac:97:7b:da:b6:91:2a:c7:ea:10:
a4:97:a0:aa:0c:91:38:d3:48:b4:c0:11:45:51:a0:c5:eb:88:
24:9c:a7:29:00:a1:ff:8d:4f:c6:b6:c7:0b:72:84:cb:f3:65:
1d:cd:ba:cd:9e:f8:3d:61:51:c5:ce:94:20:0d:8c:f4:9c:0f:
ae:a7:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:39:18 2026 by rpki-client