
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier: jQYkkPbxpj0JBDJwE2RdRubWB1BxYcoepC6O/kIo4jE=
Subject key identifier: 02:84:F6:AF:57:95:BE:AA:57:CB:09:E5:0C:BC:3D:2E:34:FD:A7:A3
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial: 087C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number: 085F
Signing time: Fri 04 Sep 2026 20:48:02 +0000
Manifest this update: Fri 04 Sep 2026 20:48:02 +0000
Manifest next update: Fri 11 Sep 2026 20:48:02 +0000
Files and hashes: 1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: cCiD8DwnbeivAP24vRGQUc77+AfW7i/ZHcFoPGnFW6I=)
2: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: mvrD5QWvYKdwFr7tS3PDXY6y+EhDGbDH0RckK+Dej1Q=)
3: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: NBqcYaP1mLGHLtPIUim7xHYRFSA/kjEWSIQ+kAnV1V0=)
4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: GobLIlYBkGNU9uPWpdV+qAlmLQ7h40rrOVM904qVtaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Validity
Not Before: Sep 4 20:48:02 2026 GMT
Not After : Sep 11 20:48:02 2026 GMT
Subject: CN=6a9b2e82-2ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:a9:b1:39:d3:fd:39:27:41:c9:e1:ab:a0:
2f:2f:41:61:ca:0a:03:5d:00:63:52:d4:c6:38:f4:
2c:9c:58:d7:cd:a3:d4:cd:11:65:75:12:88:91:86:
a7:5c:be:51:9c:5b:39:6b:7f:73:f1:78:a0:55:a1:
51:22:bd:40:ff:5b:ce:0f:e2:20:a2:fa:c0:e6:b4:
30:11:c5:e2:6d:b5:22:69:55:80:c0:1c:a5:cb:2c:
d1:64:02:5f:16:e2:a7:15:04:92:f0:12:a5:c4:cf:
89:23:80:92:53:9c:59:df:02:a9:06:5b:80:ff:ba:
4d:19:04:ea:c5:0e:6e:b9:33:96:63:c0:e5:62:2d:
57:4c:27:0d:07:5a:ba:d5:88:e4:bf:17:be:64:74:
95:b9:b6:ca:3a:b1:a3:87:fb:5b:62:79:1b:47:ec:
b7:2f:4d:38:6d:0a:2e:3a:01:8b:f2:c6:d7:17:8a:
ef:8d:e4:42:1c:74:3d:2a:5e:2c:02:bb:e5:0d:b9:
17:89:d7:ff:b5:16:42:d3:ce:40:4f:b7:14:dc:a9:
ca:2e:01:b4:ef:b7:49:b9:cf:66:80:82:02:80:73:
9a:b6:22:d5:d8:98:49:52:8a:45:90:85:00:b5:48:
1f:ea:31:49:1a:aa:d8:4f:04:5d:19:d5:24:e0:53:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:84:F6:AF:57:95:BE:AA:57:CB:09:E5:0C:BC:3D:2E:34:FD:A7:A3
X509v3 Authority Key Identifier:
keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:97:f9:a6:3d:17:15:a7:c6:a5:02:62:cc:bc:04:28:3f:92:
a6:89:2b:03:c0:4d:18:fe:36:66:08:49:4a:83:ae:da:00:37:
38:77:78:a0:f1:f4:a5:67:e5:8d:0f:8b:98:21:0d:ac:86:64:
d2:12:51:ba:64:3d:01:a5:e0:1c:5b:b0:9b:55:a4:3c:bb:ba:
34:65:19:eb:cb:38:65:23:84:ce:ec:75:2a:b6:70:e7:10:7f:
8c:c5:97:76:cc:cc:9c:31:7a:96:bf:5f:58:0d:84:e2:80:dc:
c8:e8:c8:a0:f2:47:b0:d3:21:48:6a:63:1f:4b:92:62:d8:f4:
3d:26:23:6d:39:dd:82:54:d2:e6:f3:c8:48:55:4a:a9:93:10:
15:55:6c:d2:a7:74:c7:92:cc:a8:62:6c:07:7a:ff:71:45:7b:
9e:3e:9f:3c:c5:77:f7:9b:65:cb:35:f2:0d:49:90:4d:70:5b:
b8:57:e0:fc:0f:4a:b9:f9:5b:f8:1f:92:81:2e:9a:bf:d1:77:
a3:50:17:6d:14:8c:bf:69:80:bd:cf:55:61:21:23:f9:be:0e:
ae:bf:25:82:9b:55:8f:a5:e8:f0:0f:6b:eb:43:e7:ed:f2:e5:
f6:ff:98:bd:52:58:02:35:a8:d4:47:d1:dd:f6:99:8b:63:4c:
8b:c6:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:26:43 2026 by rpki-client