
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File: Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier: MZmgn7AZltqhS8rbjtLpR5P1DWiKTVg2amWNOsUEY5g=
Subject key identifier: 18:47:86:F4:B8:E7:28:3F:E0:96:36:86:0B:17:4F:7E:F6:30:A4:48
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer: /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial: 0889
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number: 0877
Signing time: Tue 06 Oct 2026 20:59:16 +0000
Manifest this update: Tue 06 Oct 2026 20:59:16 +0000
Manifest next update: Tue 13 Oct 2026 20:59:16 +0000
Files and hashes: 1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: 0K3yEoyeaiwjwek8x50vWlJJOXET7+fCCdmU158lQTM=)
2: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: 7JHh8MoVNwErMWcl7x92d3QLXaJKjCCpvBAbQmrn6+g=)
3: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: xonVilXN+vwJrTlbS/U4yP1Zh1VuyVVSIZshvu9D2ho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Validity
Not Before: Oct 6 20:59:16 2026 GMT
Not After : Oct 13 20:59:16 2026 GMT
Subject: CN=6ac56124-085d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:22:e5:4b:6d:3e:86:92:e5:35:d9:e8:91:
7d:64:a1:6a:01:df:13:66:2d:2a:3f:31:4d:35:a6:
8e:f5:fc:c0:28:f5:ea:03:40:34:86:91:6d:ca:eb:
8d:b8:27:e1:d9:6f:bd:6f:e4:db:e9:58:d0:78:ca:
5a:48:3d:ee:88:04:a7:d1:d3:5e:99:8f:46:74:41:
10:83:53:fa:97:8a:58:84:9a:d5:4d:4a:f9:4e:9c:
c9:f3:af:48:e1:47:5e:f8:69:8e:98:d2:60:ee:f7:
30:d0:b3:fc:09:c8:4f:ae:c3:24:54:d4:3c:55:01:
4b:59:82:5b:6a:a1:3c:14:67:bd:d8:20:b8:86:ab:
da:55:85:d2:ee:2d:24:55:ba:87:43:b3:c0:c5:32:
25:84:81:2f:a5:5b:d2:45:04:84:e9:20:b4:66:f7:
8b:50:c7:4c:b9:48:c0:56:e2:df:da:ae:85:11:e7:
ca:1a:b8:d6:dd:07:ad:54:71:eb:cc:fc:87:1b:19:
f0:52:d0:bf:52:35:d1:bb:47:ae:a8:2a:e1:c5:c5:
b0:45:0a:97:5e:30:e3:e8:07:25:99:fc:4a:a7:f2:
c7:c2:f9:2e:2c:ae:12:c9:47:6c:14:c7:ab:28:61:
0c:64:c7:7d:bf:74:f2:f8:a6:58:95:46:3e:a8:3e:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:86:F4:B8:E7:28:3F:E0:96:36:86:0B:17:4F:7E:F6:30:A4:48
X509v3 Authority Key Identifier:
keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b1:25:00:8d:b1:b6:fd:e3:92:57:ad:0c:e9:8a:4f:ca:f2:
51:50:2f:9a:a5:3b:24:6d:56:55:1a:84:8a:52:b3:b5:88:0d:
3f:b8:38:7f:11:53:3b:58:37:a0:63:01:0c:88:bd:0d:3d:64:
cc:8a:2e:ed:64:48:90:c8:4b:18:99:63:79:84:3c:47:fd:38:
13:db:5e:64:24:15:4f:74:1d:58:46:c6:20:e0:56:a4:a2:4b:
a0:31:1e:9b:84:38:da:1b:a5:ba:ac:20:f6:9d:5e:cc:3c:ea:
59:b4:4a:5a:b6:7c:bc:73:e3:0f:0d:67:84:39:23:8d:8f:5e:
25:b0:27:6b:66:d4:f3:36:62:d4:8b:9c:31:9b:73:96:4d:88:
c3:0c:f1:c9:e0:93:c5:ff:ab:e5:84:90:3c:6d:7e:7b:2d:1e:
b6:c0:98:78:43:c7:27:31:8e:d8:0c:20:c4:ec:90:07:86:f6:
c3:06:2e:ff:b3:98:e7:50:12:d2:fb:60:7b:9c:ab:8d:a6:b0:
e3:99:85:ee:44:2d:93:70:73:6e:d8:38:5d:f2:28:46:5c:00:
6c:a3:eb:12:8b:b1:1f:70:07:18:2c:28:d7:a8:72:ea:b4:89:
95:00:75:4a:78:e2:48:2c:23:62:4e:50:50:2b:09:71:1a:67:
59:a7:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:14:38 2026 by rpki-client