
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json)
Hash identifier: hoa7jtvmzRWBvCoN70r0nUOTRp7ASXTvdN732u5NFug=
Subject key identifier: 27:08:F7:4E:C3:A5:FF:61:F6:69:7A:C9:02:F0:D7:8E:14:2B:96:82
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
Manifest number: 0162
Signing time: Wed 13 May 2026 04:59:56 +0000
Manifest this update: Wed 13 May 2026 04:59:55 +0000
Manifest next update: Wed 20 May 2026 04:59:55 +0000
Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: VrbN4GWcFor4QcT/iMktCIqPFN3WuLbSZ2gPSCH4B2o=)
2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: KxQFpzpoosNuGePL0OCDu0Wnx4bnznIe59MLAgWCeJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Validity
Not Before: May 13 04:59:55 2026 GMT
Not After : May 20 04:59:55 2026 GMT
Subject: CN=6a04054b-bdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:97:8c:58:61:6d:72:71:5b:23:6e:40:92:
5a:46:68:88:96:db:ed:c4:a8:01:4a:27:83:99:b5:
9d:f5:c6:17:e0:a0:ea:08:61:1c:44:e1:0e:01:0f:
6a:be:09:bc:6a:b2:90:c4:b8:65:d4:33:df:01:53:
8c:10:a8:24:e7:13:49:c5:16:47:e5:bd:50:0f:76:
1d:be:dc:4b:88:1e:89:bb:67:29:04:69:b8:bc:9f:
45:ba:84:6c:fa:45:c6:c4:eb:44:2f:a1:aa:a9:8e:
9c:3f:74:d8:3e:ec:24:24:0f:ec:c6:5b:03:5c:df:
df:eb:3b:17:9f:5e:fa:e4:5a:0d:d3:f3:14:ab:48:
c6:6d:a1:e7:16:b4:87:90:6b:e5:cf:d1:80:41:99:
00:7d:45:48:47:16:bc:0d:dd:23:3c:8e:9f:f3:99:
6d:0d:6d:88:14:2f:a5:5d:87:54:ea:a7:8c:2b:d8:
f3:8c:0a:c2:39:f5:58:24:23:de:57:4d:5f:c4:93:
c0:da:26:8a:66:57:65:6e:bf:62:37:81:f9:7a:7f:
67:9c:7d:d7:c3:0f:03:ad:ee:b3:9c:1d:b8:1b:3b:
a4:f3:73:a8:d1:d7:e2:2d:c4:37:5b:b3:72:05:6d:
af:f7:c1:d3:3c:31:e5:44:6d:b0:d6:cf:08:49:49:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:08:F7:4E:C3:A5:FF:61:F6:69:7A:C9:02:F0:D7:8E:14:2B:96:82
X509v3 Authority Key Identifier:
keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b2:89:75:29:76:2b:45:85:d6:c0:21:5f:2b:54:a1:9c:3b:
db:f5:4a:2a:91:d5:51:75:3b:9c:f0:74:d1:86:13:1c:57:98:
38:2a:f5:7c:d8:51:65:3f:42:e4:bb:77:90:ef:60:41:72:3c:
90:f9:d1:0b:b5:2f:a5:c2:ad:18:c0:79:08:d7:ba:82:09:fd:
22:8b:80:0a:96:66:77:04:c7:89:4f:cb:f4:c8:70:39:43:ae:
aa:2e:88:11:c2:4b:c0:85:ac:7f:de:7f:f4:68:60:1c:2b:d8:
37:b6:96:1d:02:43:e0:b7:72:1c:79:5d:df:b6:fa:17:7b:0e:
df:cb:8b:66:2c:d0:77:3f:e0:40:4f:91:06:7c:9a:23:0b:cd:
96:1d:56:2f:b8:6c:58:60:e8:84:68:09:db:06:6e:31:ac:7b:
eb:5d:53:73:04:bf:38:76:60:b3:e4:98:30:53:f9:aa:9b:1c:
42:ac:c7:e5:42:cc:83:8e:be:59:c7:18:54:54:b2:07:81:56:
94:47:5d:5f:df:bb:49:57:5c:52:21:a7:96:1d:17:28:36:86:
7d:d0:95:29:6b:21:07:ce:36:fd:b3:01:94:fd:85:06:21:ef:
94:1a:d2:fa:ab:1e:5a:03:40:67:d3:66:e0:ff:d1:7d:f9:6b:
d2:0a:87:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:49:02 2026 by rpki-client