
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json)
Hash identifier: ESMSLoF2jdj72lZwOo6V/fANOUB08d1er8gHXXeKc5w=
Subject key identifier: CE:5F:4C:19:B7:B1:B4:55:85:98:61:A4:F7:F1:6A:10:0C:54:25:5B
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
Manifest number: 014F
Signing time: Sun 05 Apr 2026 04:35:41 +0000
Manifest this update: Sun 05 Apr 2026 04:35:41 +0000
Manifest next update: Sun 12 Apr 2026 04:35:41 +0000
Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: MJH19c7weW8w+kJJdNlJnMGs9kbhwTMwnE9ezG8SY+Q=)
2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: KxQFpzpoosNuGePL0OCDu0Wnx4bnznIe59MLAgWCeJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Validity
Not Before: Apr 5 04:35:41 2026 GMT
Not After : Apr 12 04:35:41 2026 GMT
Subject: CN=69d1e69d-03b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:93:a5:68:02:3e:e2:a9:a1:cf:43:85:48:
70:28:de:0d:3e:64:ea:0c:01:26:fb:90:ba:b0:14:
7b:65:40:10:75:88:b5:a9:eb:7c:09:7e:67:96:cb:
d5:42:1d:3c:8f:35:be:30:b0:78:e0:b7:56:ca:49:
cf:4a:cf:a6:d1:81:74:ad:2a:76:b9:b5:63:92:3f:
03:05:b3:b6:1f:26:90:ba:5a:1c:ee:6e:d8:3e:0c:
0a:19:c4:b6:c1:a3:f8:07:fc:68:bd:d6:ba:e7:18:
98:21:6d:a7:97:f3:53:3d:2a:73:e4:bb:0f:97:95:
70:ad:6d:2f:87:44:ab:08:5b:19:4e:6a:e1:ec:f1:
3b:dc:a5:d6:85:d9:30:5e:83:f8:a7:b5:d8:21:71:
b5:9d:da:aa:01:89:f7:7c:b9:d1:48:7c:92:63:fa:
6c:ec:e7:0b:b1:69:de:6d:1d:b8:29:f4:30:2b:b3:
49:df:98:cc:39:0a:6c:ab:dd:d1:2e:46:0d:cb:2a:
15:11:2f:26:fb:e8:ce:e3:8b:5e:29:d8:30:8e:9b:
19:4c:fc:1d:61:0d:4e:0c:ba:96:c6:57:55:23:c1:
1a:92:80:c7:1c:e0:c7:74:a7:2a:8b:81:d1:b6:64:
07:ec:19:d9:2f:9f:03:e3:7d:ce:78:3a:54:5a:be:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5F:4C:19:B7:B1:B4:55:85:98:61:A4:F7:F1:6A:10:0C:54:25:5B
X509v3 Authority Key Identifier:
keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:aa:25:a9:6e:13:79:61:e6:9f:01:38:33:da:3f:04:be:3a:
74:11:b5:70:d5:b4:6b:e9:33:ea:65:1a:bd:c9:4c:4c:f7:d5:
66:13:da:a8:49:d2:a5:a8:43:6f:bf:2d:2b:13:68:8c:23:bc:
64:03:27:63:b4:a5:36:77:26:7c:0e:f2:ff:22:d0:00:d7:28:
f7:bb:15:88:59:07:04:1b:a2:b1:94:f9:de:1e:d6:4f:2a:37:
44:1b:23:5e:5a:5e:1a:9f:96:38:dc:56:b6:0e:ab:3c:a0:8e:
4d:c1:ec:3c:8c:76:fc:fc:86:75:56:52:7e:1b:c1:24:a2:03:
14:a6:81:1d:1e:7b:06:30:30:df:f8:30:6c:24:b1:47:76:f8:
f2:19:e9:6a:2d:7d:37:97:4f:fa:c3:94:1f:ec:b6:67:34:16:
33:f7:8d:fd:3f:12:93:58:a4:a9:68:3d:0d:03:92:f5:59:6b:
b1:9e:3e:94:94:33:e9:b4:c4:88:97:c3:44:17:c3:a1:60:7f:
69:5f:45:f8:01:67:b8:87:be:66:b7:55:ba:75:ba:ae:32:83:
59:9a:06:3f:31:ef:83:37:92:5c:ed:bd:98:66:39:01:d7:7c:
98:84:af:4a:98:76:68:b2:bf:a9:cb:11:27:55:c9:61:83:c6:
7d:08:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:26 2026 by rpki-client