
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier: R/0wDSNOL8AUiLhMsNF7BdDXhaJuAjowugxiqNMfLKU=
Subject key identifier: 1A:7C:D8:6F:64:DB:76:60:FA:B2:66:5F:36:A8:81:B1:3D:72:67:07
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number: 01F4
Signing time: Fri 17 Jul 2026 04:20:10 +0000
Manifest this update: Fri 17 Jul 2026 04:20:09 +0000
Manifest next update: Fri 24 Jul 2026 04:20:09 +0000
Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: lcXAmLifqViOJ+GHg3aLCYu6iMHcTBHTqTz7w3mt3Vs=)
2: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: KXFtRkkFX0jxsfltHXamlZ+jG+IhfgzkLv0dS+9a8To=)
3: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Validity
Not Before: Jul 17 04:20:09 2026 GMT
Not After : Jul 24 04:20:09 2026 GMT
Subject: CN=6a59ad7a-7aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:24:11:5e:cd:86:7f:81:8a:81:11:07:f9:
98:dd:78:56:0d:3c:6b:d4:7c:e1:a1:cc:8a:a1:e8:
50:b5:f3:28:d3:1c:5b:ad:d5:4c:c3:d7:09:c5:06:
f4:75:4d:a4:46:56:0b:a6:a1:24:2e:46:fb:b8:9e:
e3:43:65:7a:03:8e:1b:56:df:92:c1:f8:47:4d:93:
63:0b:16:0a:a4:c3:2e:4f:bf:e7:bf:ef:17:c8:bb:
76:82:ba:c7:36:02:34:bd:40:10:9d:13:31:b3:8e:
f8:64:e2:7f:34:e1:6b:d6:04:71:16:83:09:64:c5:
c7:0e:2f:f2:61:39:aa:9b:39:2e:19:bd:ec:ec:81:
3c:c3:c0:c1:ab:09:fc:ed:57:9b:27:32:fa:5e:03:
f0:b6:26:6d:8f:5d:0b:5f:8a:2b:8f:ba:2b:9c:8c:
42:cd:d7:75:23:79:41:09:19:f5:fa:f2:20:10:e4:
2f:48:3c:9b:1a:0d:a0:c9:62:64:1a:77:a0:a0:38:
ed:f9:2f:9a:41:2a:d0:ed:85:ba:90:3f:b4:13:a6:
17:54:8e:83:f9:2f:29:ba:fa:8d:7b:e4:c0:6b:c5:
8c:be:e5:3f:56:9a:55:59:f6:56:22:5b:73:17:11:
b4:93:b5:b8:2b:99:c2:98:9a:f6:5a:de:2e:8f:23:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7C:D8:6F:64:DB:76:60:FA:B2:66:5F:36:A8:81:B1:3D:72:67:07
X509v3 Authority Key Identifier:
keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:3f:dc:b0:07:de:c4:79:26:e7:7a:b5:e4:28:c2:0b:20:56:
c3:9c:7f:ae:bf:bc:5f:fe:d5:12:ab:07:e0:c0:06:6b:e6:ea:
33:a7:7e:b3:6d:07:80:e8:bf:81:66:9d:36:07:c4:56:83:c8:
df:14:ec:fa:24:24:b8:8c:6b:74:5d:b6:24:94:52:9c:6e:e5:
d5:79:6d:2b:1e:13:1a:9d:f0:d0:ed:ef:cf:47:8a:f6:78:10:
0b:07:bb:87:4a:ac:80:5b:b9:c7:cc:47:94:cb:3c:b0:2d:ee:
70:c1:d5:12:32:53:c1:5b:45:77:b5:c8:e4:b4:aa:67:ce:88:
62:37:0d:98:8b:2b:ac:c4:3c:1e:38:bf:4d:86:e6:7d:05:52:
60:c7:71:47:14:25:9b:87:ee:84:ad:f3:ad:fc:94:8f:48:58:
14:52:13:cf:ae:d0:f5:71:02:b0:e3:09:49:b9:64:0d:42:41:
90:3f:65:81:fc:9d:68:21:84:7c:ed:cf:5e:8c:77:c3:ef:67:
52:3c:79:bf:b5:7d:b8:75:80:ff:8e:2b:3a:41:da:fc:51:cb:
da:ff:b4:a2:9c:b7:2f:a1:09:19:7a:df:16:37:ee:2b:18:d6:
e3:2c:55:d4:0d:45:5e:9a:bb:c5:db:a4:20:36:a1:f1:35:ac:
47:c1:8c:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz
MjVDNUE2MEIwHhcNMjYwNzE3MDQyMDA5WhcNMjYwNzI0MDQyMDA5WjAYMRYwFAYD
VQQDEw02YTU5YWQ3YS03YWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBckEV7Nhn+BioERB/mY3XhWDTxr1HzhocyKoehQtfMo0xxbrdVMw9cJxQb0
dU2kRlYLpqEkLkb7uJ7jQ2V6A44bVt+SwfhHTZNjCxYKpMMuT7/nv+8XyLt2grrH
NgI0vUAQnRMxs474ZOJ/NOFr1gRxFoMJZMXHDi/yYTmqmzkuGb3s7IE8w8DBqwn8
7VebJzL6XgPwtiZtj10LX4orj7ornIxCzdd1I3lBCRn1+vIgEOQvSDybGg2gyWJk
GnegoDjt+S+aQSrQ7YW6kD+0E6YXVI6D+S8puvqNe+TAa8WMvuU/VppVWfZWIltz
FxG0k7W4K5nCmJr2Wt4ujyN8YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBp82G9k
23Zg+rJmXzaogbE9cmcHMB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz
NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDI2MS9EMDY1QkM0QzkzNDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhq
TVB2VVRBU0hJTkV5WEZwZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEART/csAfexHkm53q15CjCCyBWw5x/rr+8X/7VEqsH4MAGa+bqM6d+s20HgOi/
gWadNgfEVoPI3xTs+iQkuIxrdF22JJRSnG7l1XltKx4TGp3w0O3vz0eK9ngQCwe7
h0qsgFu5x8xHlMs8sC3ucMHVEjJTwVtFd7XI5LSqZ86IYjcNmIsrrMQ8Hji/TYbm
fQVSYMdxRxQlm4fuhK3zrfyUj0hYFFITz67Q9XECsOMJSblkDUJBkD9lgfydaCGE
fO3PXox3w+9nUjx5v7V9uHWA/44rOkHa/FHL2v+0opy3L6EJGXrfFjfuKxjW4yxV
1A1FXpq7xdukIDah8TWsR8GMGg==
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:15:20 2026 by rpki-client