
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File: Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier: p6klHSN0CJpBLpgm10I78VCh3mWTA7+mHHND4jW4yk8=
Subject key identifier: EF:38:54:95:69:F0:9D:5F:03:33:D7:3E:33:59:4A:19:4E:ED:7B:DC
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer: /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial: 088B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number: 0879
Signing time: Sat 10 Oct 2026 20:55:43 +0000
Manifest this update: Sat 10 Oct 2026 20:55:43 +0000
Manifest next update: Sat 17 Oct 2026 20:55:43 +0000
Files and hashes: 1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: CiRUecyYW251XekNJGbrpUW069IkpL7D2MjVeTJFpUA=)
2: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: 7JHh8MoVNwErMWcl7x92d3QLXaJKjCCpvBAbQmrn6+g=)
3: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: xonVilXN+vwJrTlbS/U4yP1Zh1VuyVVSIZshvu9D2ho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 20:55:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Validity
Not Before: Oct 10 20:55:43 2026 GMT
Not After : Oct 17 20:55:43 2026 GMT
Subject: CN=6acaa64f-6dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:a6:91:c1:7a:3e:e6:79:d4:79:02:41:ba:
48:d0:62:e0:84:bd:1d:86:c3:e1:68:68:b9:32:1c:
21:63:a4:5e:2c:03:70:0c:6a:1b:9a:ba:cb:70:06:
9f:9b:93:f8:04:b7:e3:9c:df:fe:44:32:44:35:0c:
a5:0e:19:60:47:91:d9:89:66:ee:1e:55:59:bc:f6:
e9:8e:e3:59:1a:7a:f7:74:5d:45:a3:65:ea:17:bd:
45:32:43:28:56:90:0f:61:23:77:26:d7:18:6d:7d:
13:3f:2c:00:9d:1b:bb:45:96:04:6c:aa:60:85:e7:
81:1e:30:1f:c6:eb:c2:ae:3d:5f:29:3a:44:66:a4:
47:ff:8b:a0:78:f4:8f:de:53:1b:95:c6:10:42:89:
af:d8:a7:9a:26:03:26:65:4e:4b:51:53:d9:52:77:
b4:f5:06:39:2f:ce:7a:78:f3:39:58:1e:ed:54:53:
b2:ec:bb:2b:d3:89:e1:3b:7a:c5:a8:24:e0:6e:e8:
ee:c7:8b:a0:62:91:c0:e6:f1:c4:b1:4f:11:b1:62:
4d:2a:f5:51:f9:c8:7f:a6:b6:5d:3b:2b:1e:09:3f:
e1:83:0c:32:0c:6c:7e:52:80:8c:37:64:9d:9d:19:
9b:f9:04:d9:bb:90:68:ad:64:a2:1e:6c:c5:91:c6:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:38:54:95:69:F0:9D:5F:03:33:D7:3E:33:59:4A:19:4E:ED:7B:DC
X509v3 Authority Key Identifier:
keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:c3:87:2d:dc:bd:7f:3b:ed:c5:bc:84:e4:96:b1:e9:b6:
f9:a3:57:7d:ae:12:af:d4:56:f8:00:45:87:86:f4:2b:a2:1d:
23:5f:04:f8:73:a0:72:71:17:b8:65:77:b0:5d:69:b2:94:04:
50:bf:e3:97:ba:63:56:74:b4:c6:9b:72:de:12:a1:bf:e2:e9:
66:fb:10:4a:d0:75:a6:fe:2e:f2:b6:32:c0:0c:04:0a:f5:ec:
ed:02:8c:eb:3e:e0:c9:be:6e:7b:f0:f4:9c:83:47:a8:2e:24:
aa:8f:00:40:15:7d:1f:e4:49:60:72:da:c8:12:78:be:c8:62:
f1:01:c8:ea:6d:b6:0d:1b:49:79:9c:ca:c4:23:41:04:c1:87:
89:67:95:ec:33:ce:82:43:c9:e4:23:eb:9d:0f:11:95:ce:e7:
33:6e:d2:4b:06:94:51:12:6d:8f:42:34:e1:02:57:ee:ac:cf:
bf:b8:44:b4:dc:81:a1:08:01:8d:29:1a:88:3b:82:3a:bf:4c:
b9:15:b2:cc:de:54:fb:d1:d5:de:2f:68:4e:f9:3d:5a:28:7b:
27:60:2a:63:09:87:30:c3:d3:38:87:66:b1:4a:b1:7c:5d:b1:
bd:f1:c6:9f:ec:b4:78:5f:80:a2:de:cf:49:0c:4a:e2:9c:8f:
b3:93:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:02:04 2026 by rpki-client