
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json)
Hash identifier: tqyp5PxgDh9bURV+K1I5ZVm99mdcJ/o3MNmBRaILM/w=
Subject key identifier: 76:93:1D:21:E3:9E:C5:6E:80:61:ED:80:28:98:2B:DA:20:5F:7F:5D
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
Manifest number: 0187
Signing time: Mon 27 Jul 2026 06:19:26 +0000
Manifest this update: Mon 27 Jul 2026 06:19:26 +0000
Manifest next update: Mon 03 Aug 2026 06:19:26 +0000
Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: yG0SXEXQcBoGy9kb7RLmnb++CoouLyLSwCD3Jpy1U88=)
2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: KxQFpzpoosNuGePL0OCDu0Wnx4bnznIe59MLAgWCeJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Validity
Not Before: Jul 27 06:19:26 2026 GMT
Not After : Aug 3 06:19:26 2026 GMT
Subject: CN=6a66f86e-c2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:a3:a5:8d:1f:c1:2a:dd:69:1a:e8:be:bc:
9f:92:22:7a:a9:b1:f5:f0:73:1c:74:b6:e8:40:3c:
57:9a:c4:d2:9c:44:e5:86:dc:eb:82:a6:a6:e9:cd:
e5:96:82:9f:53:84:3f:37:4d:cc:95:5d:43:94:fd:
40:26:b4:54:32:f2:00:a0:94:23:0f:82:96:93:6a:
da:a2:e9:29:5a:32:6c:32:d7:0d:0b:d7:49:a8:25:
d4:b3:79:c4:ae:b6:5f:b5:1d:26:49:06:3c:a8:4d:
4c:1a:a6:22:c2:f6:73:10:86:c6:bd:8b:32:26:76:
f6:80:dc:77:7f:24:8e:ba:69:60:e6:6e:9d:d8:05:
12:d0:68:f8:a7:73:82:0b:63:db:3e:30:11:cf:64:
6e:82:52:b1:0a:c0:1c:32:e5:69:50:63:06:3b:41:
80:88:b9:04:30:67:69:d8:fc:38:19:4d:6a:a0:e1:
80:c3:5f:ff:ff:6d:9d:03:45:d1:aa:77:d5:5e:fe:
a9:05:6b:a6:3f:72:bf:33:8b:31:d8:84:e7:b3:33:
42:ed:3b:84:44:7c:2b:8c:17:c7:9c:76:30:4a:b9:
66:f9:44:32:09:45:90:f9:28:12:cd:e0:77:6b:56:
ee:d8:10:2d:b2:07:80:7e:d4:df:a8:e3:d8:31:8a:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:93:1D:21:E3:9E:C5:6E:80:61:ED:80:28:98:2B:DA:20:5F:7F:5D
X509v3 Authority Key Identifier:
keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:29:47:48:fd:e6:7c:46:2c:b2:1f:7b:d5:14:52:ef:ed:19:
ab:9d:7c:3e:d0:e1:30:75:e3:2a:43:94:8d:6d:c6:b7:c7:f4:
5c:d6:7f:20:15:15:da:56:7c:8b:9a:11:61:e4:5c:8f:43:72:
90:b3:b6:c9:21:1e:44:20:67:c2:3a:07:c2:ae:2b:35:a6:81:
b3:fa:3f:0a:67:27:2f:64:42:d6:ef:c0:b6:e5:f9:c8:b7:51:
8a:76:6f:70:57:4f:02:3a:b1:a2:19:8d:54:8f:2d:7d:f0:b8:
ec:23:f8:9d:9d:bc:f2:21:b8:f0:81:9b:9c:de:fe:85:4c:b8:
d5:25:82:3f:20:b5:d2:7e:79:34:8d:c0:e2:5b:a4:8a:5b:d5:
1b:3f:4d:73:5a:7d:81:9d:1a:75:85:fb:28:e1:e2:8e:3f:87:
16:50:6e:27:15:c9:db:a1:21:33:7f:3b:d7:93:5e:a7:80:f5:
17:a0:94:db:9a:5d:a1:1a:55:87:57:5c:68:9e:91:81:08:ce:
61:01:93:dd:74:50:9d:67:65:e3:4e:80:84:d3:2f:61:4d:ac:
39:36:b2:27:8b:0b:99:d2:7a:10:01:30:37:68:92:cd:ec:a0:
59:68:05:23:9e:65:e1:c9:74:b2:4d:08:63:8c:05:3b:b6:ee:
39:69:40:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg0MjQxMTAvBgNVBAUTKDY1ODE0MDJBMkRBRUM1M0VDRDY1RkQ3QzFEQzgwMEZB
NkU3NTczRkEwHhcNMjYwNzI3MDYxOTI2WhcNMjYwODAzMDYxOTI2WjAYMRYwFAYD
VQQDEw02YTY2Zjg2ZS1jMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4mjpY0fwSrdaRrovryfkiJ6qbH18HMcdLboQDxXmsTSnETlhtzrgqam6c3l
loKfU4Q/N03MlV1DlP1AJrRUMvIAoJQjD4KWk2raoukpWjJsMtcNC9dJqCXUs3nE
rrZftR0mSQY8qE1MGqYiwvZzEIbGvYsyJnb2gNx3fySOumlg5m6d2AUS0Gj4p3OC
C2PbPjARz2RuglKxCsAcMuVpUGMGO0GAiLkEMGdp2Pw4GU1qoOGAw1///22dA0XR
qnfVXv6pBWumP3K/M4sx2ITnszNC7TuERHwrjBfHnHYwSrlm+UQyCUWQ+SgSzeB3
a1bu2BAtsgeAftTfqOPYMYq1wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHaTHSHj
nsVugGHtgCiYK9ogX39dMB8GA1UdIwQYMBaAFGWBQCotrsU+zWX9fB3IAPpudXP6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC84MjVCRUI3NDM4
RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhUN05aZjE4SGNnQS1tNTFj
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODQyNC84MjVCRUI3NDM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhU
N05aZjE4SGNnQS1tNTFjX28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXSlHSP3mfEYssh971RRS7+0Zq518PtDhMHXjKkOUjW3Gt8f0XNZ/IBUV2lZ8
i5oRYeRcj0NykLO2ySEeRCBnwjoHwq4rNaaBs/o/CmcnL2RC1u/AtuX5yLdRinZv
cFdPAjqxohmNVI8tffC47CP4nZ288iG48IGbnN7+hUy41SWCPyC10n55NI3A4luk
ilvVGz9Nc1p9gZ0adYX7KOHijj+HFlBuJxXJ26EhM38715Nep4D1F6CU25pdoRpV
h1dcaJ6RgQjOYQGT3XRQnWdl406AhNMvYU2sOTayJ4sLmdJ6EAEwN2iSzeygWWgF
I55l4cl0sk0IY4wFO7buOWlAsQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:59 2026 by rpki-client