
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File: Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier: HusNSkCTT4CQtDbDUEDREUMm/761jPLV9FNylFw4D4U=
Subject key identifier: CE:BD:60:E2:38:25:23:63:E6:93:FA:0F:CB:A1:19:10:AC:2B:76:0F
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer: /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial: 0821
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number: 0811
Signing time: Tue 24 Mar 2026 20:51:02 +0000
Manifest this update: Tue 24 Mar 2026 20:51:02 +0000
Manifest next update: Tue 31 Mar 2026 20:51:02 +0000
Files and hashes: 1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: 5BypDzHl4+Dnl2aUZtMTK/XgHzXIeubjsWamSpuB03s=)
2: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: U1wbDqDunlaKuYqjqIcFyq/5UG7Pub5IpvN+buNY/uw=)
3: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: c2NbvzRPb3OX8yUH2vwhzYHB05TOx09RU6yJUt7vO/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Validity
Not Before: Mar 24 20:51:02 2026 GMT
Not After : Mar 31 20:51:02 2026 GMT
Subject: CN=69c2f936-945a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:57:48:be:91:ee:08:aa:3f:ee:7a:ad:87:
f2:45:cf:57:2c:5c:de:84:fd:b5:70:da:2d:6f:02:
2b:1b:ff:d4:dc:c3:4b:2e:e2:a9:9f:6c:21:3e:d4:
f9:85:9d:12:aa:16:4d:5b:7b:68:0c:45:64:0e:35:
e1:7e:0f:2b:4d:be:1d:02:06:ab:1c:05:a3:bb:a7:
ab:62:d5:49:f4:7c:51:bc:4c:a6:6c:5a:6c:c1:d7:
9a:ab:7b:0c:a9:bf:17:92:7b:8d:c7:f4:b2:d8:6c:
54:c1:f9:da:af:be:cb:26:d0:bb:57:7e:cc:99:60:
52:2e:66:4a:55:5c:89:c2:d7:4e:a7:61:cf:54:d1:
87:72:db:7a:41:10:ac:d6:51:83:cb:5e:eb:98:09:
98:2f:f3:15:46:48:9b:5f:09:7a:c5:34:55:20:a0:
44:a0:25:48:60:eb:f4:9a:db:cd:a3:97:c5:28:18:
8f:13:5e:e9:a1:ce:bc:3e:6c:40:97:7d:97:6a:c1:
d7:36:7c:c9:50:ec:38:43:6a:a6:ec:f9:20:e8:36:
cb:ec:a2:82:69:2a:77:2c:30:ed:63:b8:ac:f1:ac:
49:45:d4:56:e9:d0:47:72:28:9b:ea:a0:c4:97:34:
d1:36:b9:4b:b2:24:24:00:fc:b3:3c:78:7d:63:99:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:60:E2:38:25:23:63:E6:93:FA:0F:CB:A1:19:10:AC:2B:76:0F
X509v3 Authority Key Identifier:
keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:b1:0e:c4:ab:23:04:87:1b:9a:e6:3d:6d:0c:c9:d1:8a:0f:
e0:34:53:97:24:6e:35:40:a7:05:42:7a:23:d0:5c:45:03:15:
a0:1e:83:63:90:5c:71:bb:fc:06:57:91:30:e9:2e:4c:dc:91:
e0:fa:5f:4d:1b:72:fc:34:93:0b:52:19:ed:6a:9a:9b:9c:17:
2c:b5:f2:8a:11:29:7b:3b:b8:1b:7e:09:2f:57:2a:5a:41:28:
4a:82:5d:e6:5d:cc:d9:dd:68:39:bc:a8:0b:18:40:51:02:28:
d6:49:b4:93:a2:03:ab:aa:21:d1:34:b7:96:3c:86:f7:3f:f7:
63:ee:94:cc:c2:34:ed:07:09:53:9c:02:47:66:16:d3:ea:6f:
6c:8b:dd:c2:3e:5a:07:f8:dd:ba:a7:2c:c7:a3:25:fb:ec:95:
9e:45:ef:8f:9e:d8:01:a9:d5:8e:c5:e2:ef:5e:dc:0d:d5:c9:
24:7a:56:cb:f0:1a:07:10:12:d8:53:e6:f5:f4:c3:7c:1b:16:
7c:af:f7:6b:42:9d:43:57:46:ed:5c:65:4c:3b:b8:89:af:17:
30:f9:58:2c:f9:89:47:45:15:96:ae:15:67:c2:54:3e:fc:e6:
1e:62:13:91:95:84:5e:8d:a7:75:f6:ef:cd:de:ce:32:25:b5:
b4:36:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:51 2026 by rpki-client