
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json)
Hash identifier: MzFZ8ptt5eGyUBVuB4dp/1wo0qC76EnoY7EWdFAC91I=
Subject key identifier: D6:2E:87:73:7D:C4:B7:83:EB:59:C0:2E:93:BC:00:CE:A8:B6:9C:EA
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
Manifest number: 01B5
Signing time: Sun 25 Oct 2026 04:25:08 +0000
Manifest this update: Sun 25 Oct 2026 04:25:08 +0000
Manifest next update: Sun 01 Nov 2026 04:25:08 +0000
Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: 9oueH4mh535Ra3+beY+smFzPg5vkPoLpl40334U1YYY=)
2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: KxQFpzpoosNuGePL0OCDu0Wnx4bnznIe59MLAgWCeJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 04:25:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Validity
Not Before: Oct 25 04:25:08 2026 GMT
Not After : Nov 1 04:25:08 2026 GMT
Subject: CN=6add84a4-2d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:b4:d5:51:21:93:e3:06:22:35:ac:08:29:
8a:da:00:31:90:5f:8e:7f:27:ed:7d:ff:60:36:5e:
fa:53:c5:dd:cf:79:2a:a3:03:0f:56:02:24:d5:41:
a5:0d:15:ed:f9:00:55:05:36:98:23:bb:20:9c:a5:
97:8a:74:44:03:74:b5:f1:3c:20:af:c0:4c:02:93:
bb:75:4a:7c:20:6c:04:de:6a:83:17:49:b9:ef:ea:
2c:e0:53:b0:7d:87:ce:25:e3:b6:59:9b:58:31:2a:
30:3c:9f:a3:00:19:83:f9:6a:2f:48:1b:dd:09:de:
e0:a2:fe:ee:02:cb:82:50:dc:b9:d8:d1:2b:28:6d:
a4:d9:4a:cd:d4:b3:9b:ab:ee:e6:5a:76:2f:8c:95:
9f:2b:a2:da:7a:a7:08:47:a9:10:b8:cb:d8:a9:62:
21:ce:b8:cc:c4:41:3d:25:ce:a6:95:bd:98:1b:da:
00:32:c4:05:7d:8d:d6:8a:8c:40:c0:8f:94:39:af:
ec:c4:76:9f:44:56:1b:ee:38:ba:a7:56:af:fc:41:
0b:a7:1a:f1:9e:ad:2c:40:92:ea:95:1d:44:4c:24:
29:10:0a:74:4f:4c:e0:50:ed:a9:6e:3a:2b:c1:7d:
b3:1e:14:06:22:8c:ae:2e:d2:ca:37:83:00:e8:4c:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2E:87:73:7D:C4:B7:83:EB:59:C0:2E:93:BC:00:CE:A8:B6:9C:EA
X509v3 Authority Key Identifier:
keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:6f:49:85:cf:95:1a:bd:72:04:f2:d3:e2:82:09:1c:be:78:
c1:fd:dd:e0:04:02:99:98:a6:96:3b:42:d6:63:e1:e3:40:08:
3e:7e:db:61:2c:1b:3a:56:a6:0f:71:74:64:8c:49:1d:0b:79:
f7:c3:67:8e:21:5e:68:77:0f:6d:87:77:7a:d6:3c:75:a2:b5:
18:2a:4a:11:37:96:e8:60:90:8e:64:b5:72:20:17:7a:d2:03:
ee:a5:34:47:26:2f:74:aa:14:22:f0:32:19:b8:e8:78:e0:d2:
2c:89:8a:f6:8b:a1:8c:17:55:3f:31:5e:86:cf:b3:83:4a:52:
71:6d:f5:f3:b8:b4:17:9b:31:b3:9a:b2:08:3e:b7:62:49:ed:
03:56:52:34:3d:82:d4:08:c8:11:f9:e4:a1:77:d0:44:be:97:
88:0a:30:78:09:12:54:96:b1:f9:8c:76:b3:98:89:a1:b9:b0:
9a:1d:cd:02:d9:ce:54:de:48:a6:f6:13:ca:31:73:3a:76:0f:
3f:1c:9b:be:8b:6f:d0:e9:05:2a:a3:76:69:bf:90:71:39:cb:
43:41:d8:41:fe:56:b3:b8:00:71:11:d7:4f:1e:a9:1a:71:b3:
68:63:d8:f9:4d:58:e0:cd:4f:e9:81:50:50:74:67:e4:f7:b0:
20:c9:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:39:29 2026 by rpki-client