
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File: Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier: /X/dXbNFC66U2GI6MN9BCcOsPRtGkBnEzxx60D2H4n0=
Subject key identifier: AE:67:79:5E:D7:1B:60:06:B0:25:06:4E:08:41:B3:8A:EA:FC:93:D8
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer: /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial: 0866
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number: 0856
Signing time: Thu 06 Aug 2026 20:46:20 +0000
Manifest this update: Thu 06 Aug 2026 20:46:19 +0000
Manifest next update: Thu 13 Aug 2026 20:46:19 +0000
Files and hashes: 1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: 8QJxNb1arQrS0v+5ucutjoWerXHycezxPzqXSwNO09s=)
2: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: c2NbvzRPb3OX8yUH2vwhzYHB05TOx09RU6yJUt7vO/Q=)
3: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: U1wbDqDunlaKuYqjqIcFyq/5UG7Pub5IpvN+buNY/uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 20:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150 (0x866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Validity
Not Before: Aug 6 20:46:19 2026 GMT
Not After : Aug 13 20:46:19 2026 GMT
Subject: CN=6a74f29c-5e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d2:89:cd:76:82:cf:5f:a8:86:a0:05:c1:50:
af:49:6f:6e:05:9b:ff:fd:03:c0:49:80:3c:e2:d8:
47:36:a7:c3:25:7d:c8:a5:0b:99:5d:9b:95:d9:bc:
c7:c5:39:fd:fe:9d:90:9a:9c:92:f6:05:58:b6:69:
71:b9:54:a0:a4:62:92:57:cc:2b:cd:41:4f:bc:a7:
0a:48:8a:ae:98:42:f3:b1:21:8e:c4:e6:82:5f:94:
5f:a4:c4:db:1a:a5:d5:5b:d2:17:f9:27:43:a0:47:
c5:83:25:74:91:67:f6:b5:76:b0:03:a3:7a:b6:dd:
3c:38:36:e8:d5:92:4f:6b:17:ba:38:c7:31:35:26:
4f:c4:70:6a:79:0a:83:8f:66:6b:d7:5e:98:92:21:
d4:d7:75:d1:76:5f:0d:b1:55:27:58:60:51:88:82:
2d:2f:c4:b5:bb:63:6e:c0:fb:28:a2:ae:7f:2a:e5:
28:a4:60:31:ad:e8:b2:b9:d9:bf:5a:80:2f:b2:14:
ca:bd:b4:7d:92:3e:c1:7a:28:67:81:49:eb:3d:14:
62:8f:62:5e:85:65:7a:58:f8:40:f2:bf:f1:fc:42:
e3:93:34:09:e1:a8:b3:0f:cc:5d:d6:39:b8:a9:47:
38:e8:af:da:3a:a4:a4:5b:11:7d:47:bf:63:04:0b:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:67:79:5E:D7:1B:60:06:B0:25:06:4E:08:41:B3:8A:EA:FC:93:D8
X509v3 Authority Key Identifier:
keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:c0:ef:1e:60:d6:56:79:d1:16:c6:14:87:04:10:63:53:d0:
26:46:41:82:d7:79:b6:da:f5:8b:c6:26:55:fd:1c:20:55:83:
e9:87:06:eb:86:f7:1a:f9:90:c8:92:14:22:c2:52:ca:b4:2e:
9f:75:58:6b:52:27:41:e8:1f:5e:3f:95:56:92:09:97:96:6f:
e7:1b:fe:37:13:b5:5c:79:e3:7c:cd:70:cf:4b:9d:eb:3d:a3:
1b:00:79:8d:e3:b9:80:71:64:e0:c0:a8:25:39:6f:b1:b0:0c:
fa:07:66:65:ec:c8:f4:f3:74:55:ef:80:74:0d:56:4e:73:63:
c5:bc:4b:49:88:e8:19:73:c1:38:f6:12:cd:c6:38:79:4a:bc:
7e:e8:01:5a:5d:9e:b9:7c:fa:83:cb:a3:b4:03:ae:f1:ed:57:
ac:ef:f9:67:88:27:4f:47:5e:e5:a1:99:37:7f:c1:dd:4c:99:
79:9e:65:47:d2:02:af:c5:7f:d1:c9:a1:84:c5:31:b9:85:21:
27:ce:45:8c:81:ff:4e:c2:03:49:68:7b:9d:54:e1:b5:17:84:
71:e9:4e:70:7a:d6:a1:43:00:bd:06:3f:a1:70:77:a3:99:6b:
66:8e:9e:5b:ff:c6:de:37:38:82:4b:68:54:29:4b:cf:81:1e:
a5:cb:4d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:00:39 2026 by rpki-client