
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier: VkMYVL3Ar0TMqzfNlbIuk0rQTgtBHBZr0pyFN97I6oA=
Subject key identifier: 6B:03:84:CB:C7:25:CF:FA:30:14:D4:5E:70:9C:90:B9:8D:8D:E1:B7
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial: 089A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number: 087A
Signing time: Sat 24 Oct 2026 20:51:51 +0000
Manifest this update: Sat 24 Oct 2026 20:51:50 +0000
Manifest next update: Sat 31 Oct 2026 20:51:50 +0000
Files and hashes: 1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: jskq5U7P8EagHnjD/PE50jxel4K1MdAJ4d/rCjogBY8=)
2: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: QlgAUCXmC3Vf8gn3/9F5D2vvghvKK1U9Va+wORc0M0U=)
3: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: 4/IcjjLj330SqD/Q7AAdU1kh1KBOFfWc4SaKg7w4SQI=)
4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: kswNh4oQmVLSKCpaizjtywziRkakPGEMk3+r2p83GRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Validity
Not Before: Oct 24 20:51:50 2026 GMT
Not After : Oct 31 20:51:50 2026 GMT
Subject: CN=6add1a67-e825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:df:25:ce:69:84:0f:8a:97:39:07:a4:8f:
ce:a2:4c:6a:b5:82:6f:49:9b:f5:3a:08:60:db:89:
7f:4e:97:e0:43:60:3a:d1:cf:50:b2:9e:21:66:68:
8f:a3:02:c7:5c:8d:67:39:ae:e1:78:2b:92:fb:d1:
6d:b9:bc:d1:3a:03:eb:d8:90:98:1b:7f:8b:80:50:
56:d5:79:43:64:b7:e2:11:ec:ec:23:a6:bc:5b:51:
40:92:5d:bb:e3:93:66:f8:ad:4a:6f:da:a9:bb:ad:
96:81:20:81:45:6c:a4:4d:43:30:bf:79:c8:cf:43:
3c:65:68:d6:64:77:6b:18:ad:be:7e:d7:c6:7f:f8:
17:6c:29:72:21:8e:87:0c:eb:34:a1:7f:ff:d5:4b:
d3:72:01:39:a6:d9:42:fe:75:33:f5:51:e7:5d:70:
cb:44:2f:7c:37:be:ad:78:20:f1:8b:43:e7:12:89:
58:99:f2:c3:de:a2:7f:8e:99:57:d0:62:bc:a8:74:
2d:08:f7:81:6e:87:12:5b:dc:38:c5:01:97:33:ff:
36:2a:8d:b1:6d:cd:8c:1e:45:8c:08:3d:82:c3:4c:
1a:e7:8f:86:c0:66:8b:5d:2e:c7:75:d6:9e:4e:da:
a0:fe:37:55:ab:04:e8:8b:b9:b9:77:41:39:60:6b:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:84:CB:C7:25:CF:FA:30:14:D4:5E:70:9C:90:B9:8D:8D:E1:B7
X509v3 Authority Key Identifier:
keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:13:1e:81:5b:d0:cc:cf:19:70:fd:93:9b:4a:c7:80:c5:53:
24:f8:b1:12:10:de:45:f3:d5:13:33:f8:9a:61:c8:34:ce:81:
7e:fe:b6:52:7e:ef:fd:9e:00:6c:51:74:2b:48:18:c1:70:2c:
09:21:9b:15:2d:63:76:36:15:a2:90:3f:41:f3:2b:8d:83:16:
c1:24:29:d5:a6:80:6b:df:19:fd:aa:75:0d:99:0d:8d:aa:ad:
07:02:a9:39:03:a7:18:e9:55:14:10:1f:8b:6a:49:55:cc:34:
a2:6a:1e:4b:a6:18:bd:ee:46:ad:e7:a3:c9:83:53:65:a4:1f:
95:c0:96:b0:53:46:19:ef:8a:00:a9:1c:9a:2b:35:58:c7:56:
c0:7c:c4:94:70:d7:b8:df:2c:34:e4:eb:76:d4:e6:92:7a:7f:
d6:34:be:8f:5f:20:56:aa:6f:db:1d:c3:4e:c8:2f:f4:17:00:
6e:26:2f:f6:94:01:05:a8:00:50:69:c6:05:36:b6:13:7a:ba:
b6:58:c0:e7:39:81:a0:d1:26:6a:69:81:6e:37:21:74:66:52:
06:88:c5:19:55:0c:b5:91:b3:84:f7:5a:9a:d0:b0:64:2d:ec:
5a:1b:fc:22:a3:65:29:cb:c2:b5:60:42:b8:3a:27:56:d2:30:
b5:4d:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:12:29 2026 by rpki-client