
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier: d0MmW3/Z7TwohSAThFnZ9nlVOWjbW5MUDI7C+WkreXU=
Subject key identifier: 71:79:88:DB:2B:A3:1E:D5:DF:71:F3:4D:75:CD:4D:67:1F:E3:55:EB
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number: 01BA
Signing time: Wed 25 Mar 2026 03:17:55 +0000
Manifest this update: Wed 25 Mar 2026 03:17:55 +0000
Manifest next update: Wed 01 Apr 2026 03:17:55 +0000
Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: dDCXaqBV5ieFgaC7DYpQ5fUrHA9PRNZJbRk5BglQZX0=)
2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=)
3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: KXFtRkkFX0jxsfltHXamlZ+jG+IhfgzkLv0dS+9a8To=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Validity
Not Before: Mar 25 03:17:55 2026 GMT
Not After : Apr 1 03:17:55 2026 GMT
Subject: CN=69c353e3-1a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:44:1b:69:d8:41:ab:2b:7f:6a:80:9f:fe:
73:68:27:12:a9:28:aa:e2:62:b6:8a:9a:a0:7d:fc:
3d:b7:c0:4a:b4:44:16:7f:01:43:fd:b1:c3:a5:7e:
0d:fe:cb:01:cd:39:9d:17:5d:b0:c0:cc:4f:9c:2b:
87:2e:29:2d:8c:95:43:41:9c:71:f8:85:57:60:6c:
ff:ee:f6:08:c1:36:ed:97:54:cd:73:9c:45:e1:e6:
de:28:b9:7c:48:1e:da:c5:9c:2e:23:a3:7d:96:63:
41:4c:eb:b5:bb:f4:3a:df:ef:80:9f:94:5e:73:19:
b4:4c:ea:62:00:aa:17:d1:99:21:fe:bc:ff:99:de:
15:54:94:52:23:ea:22:71:df:bd:ae:0a:24:93:39:
42:6e:8a:18:d9:21:05:99:37:79:3c:76:e4:f8:a0:
82:fb:e3:4d:56:bb:90:da:d0:39:47:eb:4a:a3:2f:
5c:17:e3:a3:43:e2:3f:11:51:1f:34:6c:b7:19:91:
11:40:33:aa:40:7d:6a:5b:6a:98:f5:f2:47:42:a7:
64:d0:c3:aa:09:1e:b0:0c:d5:ac:86:58:82:11:c9:
b7:22:e8:13:9b:fe:6a:56:5c:a9:66:56:4b:48:c3:
e2:9d:2e:9c:25:72:02:b5:c0:27:0d:44:2a:27:a2:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:79:88:DB:2B:A3:1E:D5:DF:71:F3:4D:75:CD:4D:67:1F:E3:55:EB
X509v3 Authority Key Identifier:
keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bb:4a:c5:fc:36:46:94:ad:87:40:bc:ca:96:2e:a0:27:d0:
53:7c:73:ba:04:de:b9:4e:15:44:95:08:9d:93:49:95:2c:74:
3c:a2:33:58:d6:4b:31:93:d9:99:03:3f:e7:3e:08:a9:6a:35:
5d:4c:89:39:19:f6:9c:1b:ac:8f:9e:c1:26:86:a7:15:e0:28:
10:a1:82:6c:b9:00:cf:05:52:fe:85:a9:1d:fe:5b:49:40:53:
05:16:ae:32:ee:ad:ea:c8:35:a0:cb:06:b7:77:44:b7:56:61:
f3:72:e7:b4:c7:88:5a:1f:54:94:34:c3:5d:df:d2:d3:b8:dc:
3e:de:c4:d6:93:11:fa:04:c8:b9:57:65:b8:ff:76:d4:a3:0f:
33:b9:b6:89:03:e7:4e:01:58:f3:fa:47:da:54:ca:3e:62:0c:
7a:f6:b5:5a:7f:9e:5a:f6:18:74:67:a3:ab:4e:ea:82:9e:89:
a9:ad:87:d3:c3:64:a1:28:28:05:76:09:04:cf:63:5f:73:0d:
32:36:1f:f6:81:ea:1a:3c:46:1f:fc:a9:1b:59:f1:de:27:22:
90:d4:79:24:8e:98:a2:72:59:aa:29:6f:37:49:85:8c:c2:10:
e1:91:33:58:30:70:5e:ec:2f:4f:de:00:70:20:3c:ae:1e:cc:
17:3d:37:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz
MjVDNUE2MEIwHhcNMjYwMzI1MDMxNzU1WhcNMjYwNDAxMDMxNzU1WjAYMRYwFAYD
VQQDEw02OWMzNTNlMy0xYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAloJEG2nYQasrf2qAn/5zaCcSqSiq4mK2ipqgffw9t8BKtEQWfwFD/bHDpX4N
/ssBzTmdF12wwMxPnCuHLiktjJVDQZxx+IVXYGz/7vYIwTbtl1TNc5xF4ebeKLl8
SB7axZwuI6N9lmNBTOu1u/Q63++An5Recxm0TOpiAKoX0Zkh/rz/md4VVJRSI+oi
cd+9rgokkzlCbooY2SEFmTd5PHbk+KCC++NNVruQ2tA5R+tKoy9cF+OjQ+I/EVEf
NGy3GZERQDOqQH1qW2qY9fJHQqdk0MOqCR6wDNWshliCEcm3IugTm/5qVlypZlZL
SMPinS6cJXICtcAnDUQqJ6LRxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHF5iNsr
ox7V33HzTXXNTWcf41XrMB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz
NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDI2MS9EMDY1QkM0QzkzNDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhq
TVB2VVRBU0hJTkV5WEZwZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnbtKxfw2RpSth0C8ypYuoCfQU3xzugTeuU4VRJUInZNJlSx0PKIzWNZLMZPZ
mQM/5z4IqWo1XUyJORn2nBusj57BJoanFeAoEKGCbLkAzwVS/oWpHf5bSUBTBRau
Mu6t6sg1oMsGt3dEt1Zh83LntMeIWh9UlDTDXd/S07jcPt7E1pMR+gTIuVdluP92
1KMPM7m2iQPnTgFY8/pH2lTKPmIMeva1Wn+eWvYYdGejq07qgp6Jqa2H08NkoSgo
BXYJBM9jX3MNMjYf9oHqGjxGH/ypG1nx3icikNR5JI6YonJZqilvN0mFjMIQ4ZEz
WDBwXuwvT94AcCA8rh7MFz03Vw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:40 2026 by rpki-client