
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier: mblabMtUyEMLWssiw/BPHxWO/PBtHlUeBxxVY3/rG8g=
Subject key identifier: 74:8E:5B:7B:DD:E1:5D:D1:52:B1:F7:BB:94:DD:88:9F:4A:C5:7C:5B
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial: 04DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number: 04C9
Signing time: Thu 16 Apr 2026 23:48:41 +0000
Manifest this update: Thu 16 Apr 2026 23:48:41 +0000
Manifest next update: Thu 23 Apr 2026 23:48:41 +0000
Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: YkfRx9/KJpKeA8Y6I2qlJpDi9e/egZHKTas4Uot10n8=)
2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: L0YUjWVE6ClQnbjkSz7YliWfDv2+LcOW4hK3DI2GwKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Validity
Not Before: Apr 16 23:48:41 2026 GMT
Not After : Apr 23 23:48:41 2026 GMT
Subject: CN=69e17559-6517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8f:b8:a2:0f:92:47:77:2a:d5:2a:39:87:e4:
f3:5d:d2:b9:5e:00:13:ac:4e:d7:d6:bd:7c:1a:45:
3c:ad:35:5b:47:cc:1f:c2:1b:26:92:cb:cc:fb:02:
d1:f5:51:2d:f2:9f:da:0c:57:a7:fd:d3:9d:eb:70:
5f:76:fa:3e:ad:52:a1:cc:ba:dd:6d:6f:45:5c:37:
dc:ac:9e:d5:3f:74:9e:04:8b:c8:90:ef:64:60:cd:
d3:54:4f:13:21:e6:04:36:fc:63:fb:4c:51:85:31:
7e:5a:38:02:8b:45:e3:45:1b:7e:05:f9:b0:1b:38:
68:79:66:93:7d:9e:10:b0:24:de:e7:b6:b5:f3:73:
24:29:3c:45:6d:19:36:d8:aa:d1:70:75:22:6f:71:
e7:03:c9:bb:14:80:4c:71:27:1c:51:0c:ad:2c:0f:
1b:80:d8:c4:3a:d0:9a:87:59:30:5f:c1:21:0e:9d:
b5:0c:dd:d9:c0:e0:77:72:18:52:a3:64:00:38:1e:
79:de:f6:69:8d:33:39:e6:a5:ad:e3:88:50:0b:86:
43:13:a1:df:1f:7e:1e:96:c5:6d:2d:bb:54:5c:92:
1f:ff:26:59:28:a4:21:44:cf:39:02:bf:a8:57:b8:
2e:22:e4:c9:7e:92:76:20:cc:0e:66:ee:05:3d:fb:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8E:5B:7B:DD:E1:5D:D1:52:B1:F7:BB:94:DD:88:9F:4A:C5:7C:5B
X509v3 Authority Key Identifier:
keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:ee:80:90:bc:0a:f2:c8:84:9b:5a:8a:93:40:c6:62:77:8b:
ed:c2:f2:ca:5a:7f:d4:67:5e:ea:34:ff:f7:f2:e3:82:50:82:
f4:b2:83:90:1b:f7:82:6f:9d:fb:92:d0:85:c0:2c:55:c0:08:
9a:07:dc:98:45:a7:3a:d1:5e:3b:92:d8:07:6b:ac:7a:33:ca:
f4:43:e8:e0:03:7c:be:4c:31:2b:98:d4:ff:7b:48:73:95:81:
bb:02:c0:85:cc:3e:2a:9a:3f:dc:44:e8:d5:f9:af:2e:c5:0a:
5d:ac:43:87:17:8f:d5:0f:51:7a:9e:8c:7b:0d:72:22:6f:aa:
c3:94:5e:d2:7f:56:40:ed:86:eb:96:d8:36:45:d9:16:36:c2:
6e:bc:d6:fc:33:82:2f:26:19:7a:8c:e7:ef:e5:0e:06:53:24:
e4:ae:9a:f9:c7:87:bb:13:66:ca:49:c0:46:ab:4d:31:f4:09:
56:da:0c:78:44:2b:32:c1:eb:5b:9a:02:60:e2:e0:72:05:7c:
f8:c7:7e:ea:6b:fc:75:fe:7e:a8:ce:5f:6b:3c:d1:f0:a2:a1:
9d:54:44:a3:ec:ae:98:91:ec:41:1b:d6:31:3e:3b:14:98:2f:
14:9a:47:fa:89:20:d2:0b:25:05:c8:65:99:99:be:8e:17:d2:
f0:9d:d9:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx
MkE1NTFDMzgwHhcNMjYwNDE2MjM0ODQxWhcNMjYwNDIzMjM0ODQxWjAYMRYwFAYD
VQQDEw02OWUxNzU1OS02NTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5I+4og+SR3cq1So5h+TzXdK5XgATrE7X1r18GkU8rTVbR8wfwhsmksvM+wLR
9VEt8p/aDFen/dOd63Bfdvo+rVKhzLrdbW9FXDfcrJ7VP3SeBIvIkO9kYM3TVE8T
IeYENvxj+0xRhTF+WjgCi0XjRRt+BfmwGzhoeWaTfZ4QsCTe57a183MkKTxFbRk2
2KrRcHUib3HnA8m7FIBMcSccUQytLA8bgNjEOtCah1kwX8EhDp21DN3ZwOB3chhS
o2QAOB553vZpjTM55qWt44hQC4ZDE6HfH34elsVtLbtUXJIf/yZZKKQhRM85Ar+o
V7guIuTJfpJ2IMwOZu4FPfvCAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSOW3vd
4V3RUrH3u5TdiJ9KxXxbMB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF
MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjA0Ny8zM0FEQjNFNjZFMDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhy
bnFzd05HOWlTMk1TcFZIRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgu6AkLwK8siEm1qKk0DGYneL7cLyylp/1Gde6jT/9/LjglCC9LKDkBv3gm+d
+5LQhcAsVcAImgfcmEWnOtFeO5LYB2usejPK9EPo4AN8vkwxK5jU/3tIc5WBuwLA
hcw+Kpo/3ETo1fmvLsUKXaxDhxeP1Q9Rep6Mew1yIm+qw5Re0n9WQO2G65bYNkXZ
FjbCbrzW/DOCLyYZeozn7+UOBlMk5K6a+ceHuxNmyknARqtNMfQJVtoMeEQrMsHr
W5oCYOLgcgV8+Md+6mv8df5+qM5fazzR8KKhnVREo+yumJHsQRvWMT47FJgvFJpH
+okg0gslBchlmZm+jhfS8J3ZPQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:24 2026 by rpki-client