
$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier: H1dFGhu1ZUDL6SYiRtKvn1Z4pazNrTYsvVJH11qcN1o=
Subject key identifier: 6B:38:7E:71:F8:CE:85:B5:2E:E7:6C:22:B6:51:E5:98:BF:0A:9B:69
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial: 0841
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number: 0824
Signing time: Tue 12 May 2026 21:08:48 +0000
Manifest this update: Tue 12 May 2026 21:08:48 +0000
Manifest next update: Tue 19 May 2026 21:08:48 +0000
Files and hashes: 1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: NXcxGSnRp9JbMSmjwixlcP7rdZcUflnMAb5ov4BMkYI=)
2: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: mvrD5QWvYKdwFr7tS3PDXY6y+EhDGbDH0RckK+Dej1Q=)
3: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: NBqcYaP1mLGHLtPIUim7xHYRFSA/kjEWSIQ+kAnV1V0=)
4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: GobLIlYBkGNU9uPWpdV+qAlmLQ7h40rrOVM904qVtaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Validity
Not Before: May 12 21:08:48 2026 GMT
Not After : May 19 21:08:48 2026 GMT
Subject: CN=6a0396e0-a659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:95:03:3e:34:e6:ff:5b:c1:b4:5a:0f:32:
dd:fe:a3:bc:fd:3b:01:1e:5d:f7:c6:34:38:2d:ea:
2a:5f:bf:5c:a1:75:66:61:42:a1:e2:ad:a3:e5:d6:
84:37:26:21:6b:ce:5b:36:81:7d:cd:aa:e4:61:47:
f0:2e:9f:ca:6f:d4:52:68:a7:b7:8f:f6:c2:01:00:
12:fa:a2:1e:33:09:4f:d6:0a:e2:6b:1e:70:ff:9f:
48:05:21:2e:f6:39:bc:1b:12:53:87:b9:e4:49:79:
e5:9c:ad:62:32:2a:e7:cf:0b:68:2d:b9:17:f0:0a:
f7:e6:be:7c:d9:e6:63:a3:4a:e0:2b:b7:4c:ea:b8:
64:3b:59:4e:b6:83:c3:31:db:27:f0:85:54:5d:b4:
0b:b1:8c:59:00:1f:11:82:94:95:a7:04:62:25:a1:
44:c4:43:38:c6:31:a5:75:23:2f:13:b5:f5:8a:62:
4c:13:78:fe:95:1a:dc:07:b6:b0:ad:09:70:02:dc:
08:2f:c9:45:23:ee:1e:06:77:b4:d3:55:7a:2d:4e:
7c:29:fc:7a:89:bd:09:32:e6:1d:ba:85:02:c3:6f:
d7:d4:48:e6:d9:a9:94:ac:60:28:d9:0a:1a:d5:71:
fe:c7:16:ab:3c:cd:0c:2b:fc:d2:b0:13:aa:ed:e2:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:7E:71:F8:CE:85:B5:2E:E7:6C:22:B6:51:E5:98:BF:0A:9B:69
X509v3 Authority Key Identifier:
keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:15:45:e3:55:0b:cf:e0:d1:05:01:41:67:e8:3e:2d:21:d5:
8b:e9:40:bf:23:a4:3c:b5:e9:91:ef:11:06:04:3d:39:67:25:
78:33:2a:6d:bf:18:bd:db:db:a1:89:2a:e9:1e:13:99:06:f7:
4b:12:93:9a:44:5a:b7:69:60:64:69:69:00:55:d1:b8:65:ab:
6f:02:43:6a:6c:30:e7:5e:b9:4c:6f:61:71:23:15:34:af:29:
44:ac:fb:5e:d8:44:cb:4e:af:e1:14:49:b7:f2:82:79:de:da:
94:e2:5f:f8:89:b1:a5:b1:b7:09:9e:32:8d:05:06:f3:55:30:
1e:b1:60:2e:e6:25:89:89:77:58:74:5a:74:43:8d:f4:61:42:
c1:6d:31:a3:01:7c:90:63:61:be:8a:62:51:ce:85:59:99:c7:
b8:c7:86:83:d0:3f:b4:28:b9:b0:69:2a:77:47:71:99:44:94:
ad:77:15:95:18:41:50:67:8a:5c:3e:33:a6:dc:ee:dd:7b:b6:
2d:1b:2a:5e:e9:8d:43:fe:91:a6:71:bc:b2:d1:6a:bd:bd:9d:
7f:fe:b8:e0:8f:17:bf:66:e1:21:74:5b:d1:c2:ff:d0:ae:d8:
4a:2b:10:16:44:68:44:4f:81:ab:c7:40:49:f0:b5:c6:32:a3:
b7:8a:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:12 2026 by rpki-client