
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier: LZIuR35r6W0UW+EoMm27YPDj549coFgTMqocucHANtI=
Subject key identifier: B4:47:AE:F2:E1:4E:52:E4:6A:3A:4D:51:89:75:DA:9C:4A:A7:AA:AC
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial: 088F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number: 086F
Signing time: Fri 02 Oct 2026 21:11:00 +0000
Manifest this update: Fri 02 Oct 2026 21:10:59 +0000
Manifest next update: Fri 09 Oct 2026 21:10:59 +0000
Files and hashes: 1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: RXRqaQgIhn23VO+JZS5W6ARsEfADxP67L4IxlYT1fMk=)
2: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: QlgAUCXmC3Vf8gn3/9F5D2vvghvKK1U9Va+wORc0M0U=)
3: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: 4/IcjjLj330SqD/Q7AAdU1kh1KBOFfWc4SaKg7w4SQI=)
4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: kswNh4oQmVLSKCpaizjtywziRkakPGEMk3+r2p83GRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Validity
Not Before: Oct 2 21:10:59 2026 GMT
Not After : Oct 9 21:10:59 2026 GMT
Subject: CN=6ac01de4-0e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:80:cd:b2:78:f2:ca:e6:fd:ba:25:60:fd:
c0:38:3e:3b:c2:5d:ba:00:f5:45:2c:fa:ad:c8:e5:
99:31:f3:99:8b:46:e4:ff:32:07:bb:27:c4:06:d2:
ab:3d:a9:dd:dd:9c:c8:67:95:75:ca:4f:6a:d7:ce:
cc:17:65:39:be:dd:f9:d7:83:b4:7a:69:55:ee:b8:
c5:8c:97:4b:bf:99:81:02:4b:4b:b9:b7:38:2d:c1:
78:39:54:80:ba:bf:67:77:12:07:14:e8:1a:25:a9:
71:97:b1:a4:53:d2:c9:76:16:1d:f8:2b:57:09:c2:
ac:aa:da:42:fa:68:a1:ef:1c:63:46:9e:ed:a4:ee:
de:64:f2:43:d2:44:65:42:42:18:31:ed:74:6a:6b:
fd:49:07:3d:2b:01:a6:2a:fe:da:f9:c5:bd:34:4c:
b7:97:0d:a3:4f:37:ae:48:20:26:42:74:c4:d7:79:
69:79:43:84:f8:a2:65:62:b5:6d:f1:c5:18:ec:3b:
bc:2f:31:39:59:0a:c2:7f:a8:0f:30:ee:3d:c8:9b:
c4:13:35:28:ed:b7:02:ad:f5:67:e1:5b:ab:fd:9e:
ce:00:68:cd:ee:b4:50:8c:ab:39:1d:f3:70:be:44:
c5:da:1f:a3:95:b7:61:45:38:3d:42:b2:0b:49:2e:
23:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:47:AE:F2:E1:4E:52:E4:6A:3A:4D:51:89:75:DA:9C:4A:A7:AA:AC
X509v3 Authority Key Identifier:
keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d4:48:64:a0:da:aa:8e:5e:ea:d7:14:ff:c2:a7:82:9a:45:
b5:6d:c7:50:09:d1:14:be:e2:f7:78:c6:2c:dc:89:b3:c4:8d:
36:50:1d:ce:1c:2f:15:5d:ee:c4:c3:23:6d:8b:7b:84:d1:5e:
ad:c0:0d:32:2c:11:c6:98:5c:ee:01:d9:c4:85:06:32:10:af:
84:ec:87:08:42:b1:8f:a5:bd:e5:04:42:43:e1:a3:7d:07:d6:
fb:0a:1c:ab:94:b4:ec:b5:bb:c0:69:f4:1a:4a:aa:61:8b:ab:
23:b2:32:61:41:a8:bd:81:17:1b:3f:8c:84:7c:bf:67:83:7b:
f9:df:82:90:58:11:d1:b0:0d:31:28:b6:33:fb:46:fa:8e:8e:
a7:cf:6f:83:7f:17:56:c1:53:b8:79:46:2f:b2:e6:62:af:7e:
56:4b:4a:17:5f:4d:9a:59:37:21:63:0a:d1:48:0e:20:f0:41:
93:8f:c8:16:19:fb:95:1a:47:9b:13:a7:61:65:96:cc:d8:ad:
9e:07:1c:29:6e:40:06:4d:f3:49:0c:10:f7:58:a2:cb:f4:4e:
2f:64:46:d3:a1:5e:0b:c9:ac:2e:ba:f7:62:23:38:67:1b:96:
0a:7f:70:b1:34:ce:8b:f8:61:99:0b:99:25:3f:6a:7b:06:e7:
33:7a:4b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:46:09 2026 by rpki-client