
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
File: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json)
Hash identifier: 29sS5JwLIY+yAvVawSBTXDedEUKuFuqsnLk/Sk3ONF4=
Subject key identifier: 3A:78:90:AC:06:F0:23:17:D8:57:90:BE:B5:08:2C:6A:04:B5:FC:75
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Certificate issuer: /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial: 0841
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
Manifest number: 0835
Signing time: Thu 16 Apr 2026 20:52:08 +0000
Manifest this update: Thu 16 Apr 2026 20:52:08 +0000
Manifest next update: Thu 23 Apr 2026 20:52:08 +0000
Files and hashes: 1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: /KvIz8FFAvkw9pay9JXIw7un1D8e3vsgpJHDEWtI4gk=)
2: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: U7Xb+WB2Zy8rYE3wkWAyIpelmLIP9RIDmbOk5JFzEG4=)
3: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: dVOkeWJ9y0uney+3boNEovz/nFQBP+b+4yBMrvQXnfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Validity
Not Before: Apr 16 20:52:08 2026 GMT
Not After : Apr 23 20:52:08 2026 GMT
Subject: CN=69e14bf8-4cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:7a:78:22:fb:76:ad:fd:e0:4c:0d:7a:c1:
85:b0:c6:4e:e5:06:45:37:f3:df:83:da:55:7c:2b:
c3:20:e5:e6:f3:87:57:60:18:97:dd:40:d5:60:cb:
c2:76:e4:70:e2:ee:44:e0:e0:02:e4:91:57:9c:93:
0c:ff:ce:cb:da:dc:78:8a:7c:b9:72:71:51:92:20:
9f:74:98:2c:7e:fe:9d:d2:1a:b4:84:1c:7c:dd:70:
c5:81:7c:81:c9:c3:e4:91:fe:5b:2d:55:50:d3:a8:
71:6f:d1:47:08:4a:28:45:6a:b5:de:83:84:1b:12:
f5:f4:c5:db:57:1e:03:bd:8b:f7:5b:4c:9d:a0:40:
0b:7d:e1:58:16:79:4f:24:d9:8a:43:91:b3:03:df:
24:a8:c1:79:d8:25:b5:bc:45:48:c9:be:b3:5a:83:
96:11:85:9b:3e:65:52:ea:ee:1c:30:c2:d4:96:92:
9c:62:5a:5a:08:84:f8:97:34:e5:89:a4:f1:ef:c3:
6c:3e:e0:80:16:36:9d:cd:03:e7:40:b0:67:44:94:
d7:3f:97:83:d7:76:5d:2b:1d:13:a5:18:99:32:7c:
5b:51:2e:46:e1:bf:7b:7e:9a:e8:a8:62:c5:f0:be:
23:52:13:05:f6:ad:1f:1e:53:e2:3c:a0:9c:7e:6a:
53:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:78:90:AC:06:F0:23:17:D8:57:90:BE:B5:08:2C:6A:04:B5:FC:75
X509v3 Authority Key Identifier:
keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:8b:1a:42:fb:4c:7d:0e:92:b8:31:e4:c1:44:4a:4f:2f:a9:
8e:a3:15:d2:66:cc:3f:64:16:3a:0f:78:9b:71:a1:db:21:81:
28:82:23:e9:f9:92:cc:02:28:e7:23:58:fb:ae:51:54:46:62:
04:50:ee:86:7f:2d:5c:0a:94:5f:12:60:74:9f:13:9f:32:76:
56:37:8b:7c:6c:67:27:d8:31:70:9a:ae:e4:a5:be:0b:bc:a3:
7c:65:19:6d:8f:56:1f:6e:07:80:a5:8c:10:68:20:56:c5:f6:
d6:1b:b0:f7:9f:ef:2b:b4:98:d1:f2:d0:e5:a6:15:7d:f2:fa:
6c:6e:95:91:cd:cd:67:f7:ce:29:91:29:e0:97:11:39:ef:b1:
48:62:6d:8a:e1:bf:e9:83:eb:49:85:af:28:8a:c3:b1:d5:ba:
9e:6a:f6:e5:53:c8:4c:70:34:ba:f8:02:8f:61:2e:87:de:27:
e7:61:ef:8d:46:cd:5a:af:1b:92:2f:d5:47:43:dc:0f:88:99:
02:c4:11:3c:4b:e7:ff:c9:70:d9:ec:de:ef:7b:c1:01:46:5f:
22:4a:3d:89:ba:4e:51:58:82:41:e1:65:0c:0f:72:fb:bb:2a:
38:21:8c:e1:b8:5b:73:b3:a9:ff:8e:a5:c0:50:b7:c4:67:68:
18:86:d8:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEOTYxMTAvBgNVBAUTKENEOEJCRTcwNkNDRDlCNTUzMkNGM0VCMUQ1RkJCRDdE
M0UzRUJFQTQwHhcNMjYwNDE2MjA1MjA4WhcNMjYwNDIzMjA1MjA4WjAYMRYwFAYD
VQQDEw02OWUxNGJmOC00Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhql6eCL7dq394EwNesGFsMZO5QZFN/Pfg9pVfCvDIOXm84dXYBiX3UDVYMvC
duRw4u5E4OAC5JFXnJMM/87L2tx4iny5cnFRkiCfdJgsfv6d0hq0hBx83XDFgXyB
ycPkkf5bLVVQ06hxb9FHCEooRWq13oOEGxL19MXbVx4DvYv3W0ydoEALfeFYFnlP
JNmKQ5GzA98kqMF52CW1vEVIyb6zWoOWEYWbPmVS6u4cMMLUlpKcYlpaCIT4lzTl
iaTx78NsPuCAFjadzQPnQLBnRJTXP5eD13ZdKx0TpRiZMnxbUS5G4b97fproqGLF
8L4jUhMF9q0fHlPiPKCcfmpTDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDp4kKwG
8CMX2FeQvrUILGoEtfx1MB8GA1UdIwQYMBaAFM2LvnBszZtVMs8+sdX7vX0+Pr6k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQ5Ni83NTY2RjUyNjBE
REIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0xVXl6ejZ4MWZ1OWZUNC12
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZdS1jR3pObTFVeXp6NngxZnU5ZlQ0LXZxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkQ5Ni83NTY2RjUyNjBEREIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0x
VXl6ejZ4MWZ1OWZUNC12cVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhosaQvtMfQ6SuDHkwURKTy+pjqMV0mbMP2QWOg94m3Gh2yGBKIIj6fmSzAIo
5yNY+65RVEZiBFDuhn8tXAqUXxJgdJ8TnzJ2VjeLfGxnJ9gxcJqu5KW+C7yjfGUZ
bY9WH24HgKWMEGggVsX21huw95/vK7SY0fLQ5aYVffL6bG6Vkc3NZ/fOKZEp4JcR
Oe+xSGJtiuG/6YPrSYWvKIrDsdW6nmr25VPITHA0uvgCj2Euh94n52HvjUbNWq8b
ki/VR0PcD4iZAsQRPEvn/8lw2eze73vBAUZfIko9ibpOUViCQeFlDA9y+7sqOCGM
4bhbc7Op/46lwFC3xGdoGIbYNg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:30 2026 by rpki-client