
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File: Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier: gCY/MlDtGfUGtbxX/B6fEyn4Bk+nNBZaTare5CFk/4g=
Subject key identifier: 62:0A:82:D0:B6:57:1C:DF:41:C1:90:8E:B8:40:95:91:70:7D:DF:E1
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer: /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial: 083A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number: 082A
Signing time: Tue 12 May 2026 21:06:52 +0000
Manifest this update: Tue 12 May 2026 21:06:52 +0000
Manifest next update: Tue 19 May 2026 21:06:52 +0000
Files and hashes: 1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: MdBJgcnLawNq/CuOOvCubKA0o1c8GImpE2x9wAo8Zwc=)
2: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: c2NbvzRPb3OX8yUH2vwhzYHB05TOx09RU6yJUt7vO/Q=)
3: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: U1wbDqDunlaKuYqjqIcFyq/5UG7Pub5IpvN+buNY/uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Validity
Not Before: May 12 21:06:52 2026 GMT
Not After : May 19 21:06:52 2026 GMT
Subject: CN=6a03966c-d8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:76:49:33:a6:de:1d:65:e4:c3:0d:e3:5e:
ec:38:0e:af:38:c3:8c:97:3a:e0:87:8d:dd:d2:e9:
e4:8e:4b:8d:ec:87:60:77:f0:23:c3:28:8a:c8:37:
ae:c4:43:49:59:eb:ff:7b:88:b6:25:7a:a0:56:0e:
b1:be:31:36:58:c2:08:39:a6:11:dd:cd:bd:62:f4:
90:6c:58:bc:d2:b0:bd:0b:40:56:1d:45:f4:71:56:
be:37:7a:1a:1a:96:ab:40:a1:22:31:0a:3c:b2:a8:
85:88:3f:84:7f:e8:9c:1f:88:0f:11:93:9f:35:93:
51:ee:1f:af:4b:db:fb:d7:a9:fb:66:ce:d8:55:9d:
a3:3f:40:f4:58:64:0c:ef:b0:f8:c3:1f:ce:5c:4d:
51:ee:59:78:2d:8d:6c:93:60:5e:65:10:92:26:07:
68:d9:6b:a1:73:3e:a2:ae:65:ee:ce:8e:1c:73:b3:
1f:6f:40:dc:d1:76:89:b7:16:e0:ed:57:e7:0d:87:
68:5a:33:8d:13:57:49:a5:58:a8:dc:09:fd:f3:87:
39:1a:77:26:b3:fb:d9:a6:26:3d:e3:af:97:ca:7c:
ed:0b:91:a2:a5:0b:70:1c:26:d0:dd:67:74:1f:ea:
d3:62:61:17:9a:00:2f:da:41:fa:5f:db:58:8d:59:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0A:82:D0:B6:57:1C:DF:41:C1:90:8E:B8:40:95:91:70:7D:DF:E1
X509v3 Authority Key Identifier:
keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:89:94:f7:ec:c3:58:d5:ca:d3:d5:ac:2b:5b:e7:e5:4e:5d:
fc:78:eb:d6:d7:e2:e2:81:84:e4:d3:12:ea:d6:2e:5b:27:e6:
42:9d:fe:a1:27:e4:98:78:ed:63:0f:d1:84:80:fd:54:6e:bd:
74:a6:01:e9:72:2b:ad:fc:72:c0:86:fd:83:ea:21:b7:f2:6a:
f2:ce:fb:4a:95:17:b4:e5:ed:95:09:99:2d:50:8c:28:dd:5e:
21:0e:33:bf:90:ba:55:d9:d4:06:9d:01:90:6d:a9:41:38:c1:
ae:06:92:f8:a7:88:d8:7a:67:d2:b8:53:95:21:67:5b:d7:bd:
6a:cd:79:13:5f:9c:ab:3a:9f:e9:be:e8:36:77:9b:45:04:54:
30:05:2a:f8:67:15:96:bd:27:6a:f2:96:a5:eb:54:28:31:6e:
ac:aa:9f:54:cf:29:8b:56:44:9e:70:42:3a:ee:2f:75:1b:f4:
2e:e0:3b:22:56:c0:7c:e3:cc:ee:a7:6e:76:58:df:ae:68:6d:
e9:44:3f:77:c0:1d:ad:5c:45:32:fc:28:ca:16:a1:b4:30:42:
2a:88:b1:0b:cb:12:86:c3:f7:ab:3a:c5:e7:8c:be:62:af:37:
cc:fa:29:2f:57:7f:dc:3a:0d:a3:87:7b:e6:54:2c:19:0c:f8:
c4:ba:8a:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVENTcxMTAvBgNVBAUTKDY2ODg3MkU4Nzk5N0I3M0I5NzVGRTNEQUQ0REFDQThF
QkVDOEVCQTMwHhcNMjYwNTEyMjEwNjUyWhcNMjYwNTE5MjEwNjUyWjAYMRYwFAYD
VQQDEw02YTAzOTY2Yy1kOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv4p2STOm3h1l5MMN417sOA6vOMOMlzrgh43d0unkjkuN7Idgd/AjwyiKyDeu
xENJWev/e4i2JXqgVg6xvjE2WMIIOaYR3c29YvSQbFi80rC9C0BWHUX0cVa+N3oa
GparQKEiMQo8sqiFiD+Ef+icH4gPEZOfNZNR7h+vS9v716n7Zs7YVZ2jP0D0WGQM
77D4wx/OXE1R7ll4LY1sk2BeZRCSJgdo2Wuhcz6irmXuzo4cc7Mfb0Dc0XaJtxbg
7VfnDYdoWjONE1dJpVio3An984c5Gncms/vZpiY946+XynztC5GipQtwHCbQ3Wd0
H+rTYmEXmgAv2kH6X9tYjVnLrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIKgtC2
VxzfQcGQjrhAlZFwfd/hMB8GA1UdIwQYMBaAFGaIcuh5l7c7l1/j2tTayo6+yOuj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUQ1Ny81Q0Q4MjQ0MjE3
QjAxMUVCQjk0REE3MTRDNEY5QUUwMi9ab2h5NkhtWHR6dVhYLVBhMU5yS2pyN0k2
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pvaHk2SG1YdHp1WFgtUGExTnJLanI3STY2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUQ1Ny81Q0Q4MjQ0MjE3QjAxMUVCQjk0REE3MTRDNEY5QUUwMi9ab2h5NkhtWHR6
dVhYLVBhMU5yS2pyN0k2Nk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZYmU9+zDWNXK09WsK1vn5U5d/Hjr1tfi4oGE5NMS6tYuWyfmQp3+oSfkmHjt
Yw/RhID9VG69dKYB6XIrrfxywIb9g+oht/Jq8s77SpUXtOXtlQmZLVCMKN1eIQ4z
v5C6VdnUBp0BkG2pQTjBrgaS+KeI2Hpn0rhTlSFnW9e9as15E1+cqzqf6b7oNneb
RQRUMAUq+GcVlr0navKWpetUKDFurKqfVM8pi1ZEnnBCOu4vdRv0LuA7IlbAfOPM
7qdudljfrmht6UQ/d8AdrVxFMvwoyhahtDBCKoixC8sShsP3qzrF54y+Yq83zPop
L1d/3DoNo4d75lQsGQz4xLqKOA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:46:28 2026 by rpki-client