
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier: GdkBIvUMYgEtmPe1XTJFL+7hHZkrKtwPljzBV3yD2DA=
Subject key identifier: A2:86:CF:2E:2E:AA:56:22:1F:E0:C4:BC:BA:A9:2C:4D:6B:29:E7:09
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number: 020E
Signing time: Thu 03 Sep 2026 03:17:44 +0000
Manifest this update: Thu 03 Sep 2026 03:17:44 +0000
Manifest next update: Thu 10 Sep 2026 03:17:44 +0000
Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: kQDFhhhIgeJZFfCG3WaJBtbnoHK0v0V+j8nSaYYXlLE=)
2: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: KXFtRkkFX0jxsfltHXamlZ+jG+IhfgzkLv0dS+9a8To=)
3: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Validity
Not Before: Sep 3 03:17:44 2026 GMT
Not After : Sep 10 03:17:44 2026 GMT
Subject: CN=6a98e6d8-96e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:61:a1:31:3a:40:3f:34:d7:2f:c5:5a:71:52:
85:16:e4:c6:75:3e:ac:6a:0f:7d:a0:ec:87:f2:fb:
4b:95:45:8a:cb:4d:d9:70:5b:af:45:4a:af:a1:c1:
56:10:0d:ad:cd:d5:18:4c:6a:92:2a:3d:9d:e8:9c:
29:e0:24:18:ba:9d:bf:cb:79:95:88:9e:4a:9c:ce:
87:1e:3c:3b:62:07:cd:39:1e:5a:67:1f:b9:a9:82:
d7:a3:61:6f:f2:0a:c4:1d:75:6c:e5:b7:37:73:05:
40:50:65:c5:e0:c6:b7:2f:08:04:8b:77:72:a1:28:
a3:60:56:25:6d:a8:67:14:3f:76:8f:61:1e:05:27:
cb:3d:a1:6d:25:fe:0e:97:81:14:fb:4a:4d:76:d9:
eb:aa:98:43:a4:67:cd:c9:95:be:d2:49:58:48:d2:
08:06:33:63:e4:ee:8d:7f:b3:7a:c4:04:38:e6:e3:
d8:14:e4:c6:45:e2:86:ca:63:7c:3a:c4:f5:af:d1:
25:72:30:9c:e3:05:30:af:4a:55:0f:0c:c0:ef:ac:
63:ec:ee:51:06:80:f3:65:2b:77:c3:42:dd:96:ff:
18:9f:5f:10:6d:d1:bb:52:56:d4:c5:eb:b9:42:c6:
99:36:33:02:11:9a:7a:88:cd:aa:0f:f0:bb:22:c4:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:86:CF:2E:2E:AA:56:22:1F:E0:C4:BC:BA:A9:2C:4D:6B:29:E7:09
X509v3 Authority Key Identifier:
keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:b5:96:1e:f3:b6:b6:32:0d:8f:89:07:4f:99:30:54:f8:07:
8a:ee:07:6f:7c:3b:d6:2c:fc:6b:8b:27:74:23:0f:15:22:02:
05:df:ff:0a:53:1b:0d:81:54:c3:c3:f3:8d:5e:ab:cd:aa:84:
cc:9f:d8:5d:b2:aa:4a:e9:75:61:0e:ad:4c:95:a5:6b:1a:53:
d8:cb:40:63:2c:65:79:25:69:65:b4:17:09:27:04:76:27:8d:
b1:36:f7:ba:71:a8:6c:02:fb:73:c6:b6:79:95:73:3b:66:fd:
da:fa:7a:86:b8:6e:91:53:ba:1c:f9:3b:77:ab:d9:39:1b:6d:
f5:01:5d:f8:8e:cb:8f:cc:01:ce:be:4d:29:c5:be:ca:72:68:
94:42:dc:5f:74:15:4f:df:13:2c:43:6f:71:ac:a8:9c:f3:e4:
89:7c:bf:ce:e8:2c:1e:f5:f2:d4:d1:9d:0f:15:7d:99:6a:cb:
d1:ad:79:f9:bb:1a:af:52:4b:9f:e0:b5:fc:47:5b:16:59:84:
c7:51:04:cd:bc:6e:ab:3d:21:31:8a:bc:3e:31:90:54:c3:57:
6a:94:5f:e5:c2:f7:50:70:12:b6:8d:24:f6:71:d2:5e:83:31:
db:7d:36:89:44:82:d8:32:a0:bc:57:e8:a5:f7:9e:bf:13:d1:
6e:1c:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:07 2026 by rpki-client