
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File: Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier: a8PEt8RxFlywbxyJSffH4ZtcxsLdA/p1yb3MOQiEhtA=
Subject key identifier: 72:3D:D0:CB:40:3C:F0:42:FE:9A:03:51:5B:B2:1A:5F:8D:41:A3:F7
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer: /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial: 0861
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number: 0851
Signing time: Tue 28 Jul 2026 21:22:35 +0000
Manifest this update: Tue 28 Jul 2026 21:22:35 +0000
Manifest next update: Tue 04 Aug 2026 21:22:35 +0000
Files and hashes: 1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: d6tIPX+Upx4YV1EFXlSmY3nNzXNxtY5uhWi0mLEPL7o=)
2: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: c2NbvzRPb3OX8yUH2vwhzYHB05TOx09RU6yJUt7vO/Q=)
3: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: U1wbDqDunlaKuYqjqIcFyq/5UG7Pub5IpvN+buNY/uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145 (0x861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Validity
Not Before: Jul 28 21:22:35 2026 GMT
Not After : Aug 4 21:22:35 2026 GMT
Subject: CN=6a691d9b-6a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:dd:e6:bc:62:b4:ce:e6:a1:9e:08:bb:33:
39:7d:15:ce:bd:9e:99:6e:dc:4f:2a:f7:0e:f8:b1:
54:46:b3:33:bd:20:30:84:d9:6d:b2:ee:c1:6d:5d:
a0:20:0e:57:c9:da:69:45:ee:e7:04:05:52:c7:59:
d5:5a:e2:4e:6b:8f:b9:cb:01:b0:75:58:55:bc:7d:
cb:48:7b:7b:e2:44:27:2e:24:14:94:ae:26:63:9e:
18:09:3c:ab:73:62:9d:5f:33:3e:cd:ff:40:5d:03:
2c:dd:47:ad:b2:1b:29:af:45:a9:c2:54:c4:ed:f5:
64:af:c7:a8:81:fc:73:e3:f1:3b:11:98:fd:a7:b9:
8b:89:2d:87:bf:c6:d9:26:8c:a6:b2:93:b9:df:e2:
ef:6c:9a:e1:ce:d0:0e:04:3c:01:1b:f6:08:72:74:
39:a3:84:8f:69:96:6f:0e:ab:b6:14:e1:a3:52:74:
9e:3a:d9:e1:34:e6:06:71:3f:8d:e2:c7:02:74:9e:
c8:22:37:13:ed:21:c7:2a:21:dd:b6:cc:dc:5b:c4:
14:77:de:d3:83:01:fd:a9:77:72:75:e7:5b:da:4e:
82:86:0c:36:17:85:46:fd:da:dd:37:a8:89:0b:2b:
59:8d:c2:ce:00:43:64:f0:c1:08:a1:e5:c7:73:9a:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:D0:CB:40:3C:F0:42:FE:9A:03:51:5B:B2:1A:5F:8D:41:A3:F7
X509v3 Authority Key Identifier:
keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c0:87:b3:9e:b0:6c:28:95:14:40:0c:b5:9e:b4:58:1d:1a:
8c:69:89:a4:0a:58:59:a3:c2:13:6e:5e:2e:24:1d:e7:bf:03:
2d:c3:ce:c8:55:8b:d8:a4:92:9b:3e:66:83:6f:b8:85:0e:90:
9d:ac:5d:e5:1a:b3:71:5a:91:d8:f4:96:84:45:d8:62:4c:1a:
79:16:93:48:64:4a:16:14:39:61:63:a1:6e:2f:4b:7c:75:13:
92:e9:79:4d:e4:44:6b:5b:3a:77:20:0a:ff:ae:0b:24:26:83:
e3:a8:27:f6:5a:04:e1:f2:fa:38:94:43:89:17:bf:6a:1e:73:
0a:8e:f6:52:fd:b5:b0:4b:51:72:d0:76:d4:21:cc:4e:d3:0e:
c5:b4:4a:a4:4f:48:87:90:5c:ae:70:b8:61:25:fe:c3:fd:01:
51:02:54:fc:03:4b:02:2b:e8:fd:c2:e1:63:2b:be:8d:2f:70:
ce:bd:2e:d7:d4:f6:b2:77:af:af:05:1f:ec:26:f4:b1:d0:25:
a6:8f:f9:ee:55:50:40:1f:04:45:32:7f:b4:34:a0:ea:e2:05:
83:e9:66:cf:bb:48:4f:43:ee:2b:8e:21:cb:34:a8:7b:83:c4:
00:d1:f6:a1:d0:5e:2d:38:96:c1:a7:b9:70:d4:94:2b:a4:ca:
c5:8b:44:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVENTcxMTAvBgNVBAUTKDY2ODg3MkU4Nzk5N0I3M0I5NzVGRTNEQUQ0REFDQThF
QkVDOEVCQTMwHhcNMjYwNzI4MjEyMjM1WhcNMjYwODA0MjEyMjM1WjAYMRYwFAYD
VQQDEw02YTY5MWQ5Yi02YTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAst/d5rxitM7moZ4IuzM5fRXOvZ6ZbtxPKvcO+LFURrMzvSAwhNltsu7BbV2g
IA5XydppRe7nBAVSx1nVWuJOa4+5ywGwdVhVvH3LSHt74kQnLiQUlK4mY54YCTyr
c2KdXzM+zf9AXQMs3Uetshspr0WpwlTE7fVkr8eogfxz4/E7EZj9p7mLiS2Hv8bZ
JoymspO53+LvbJrhztAOBDwBG/YIcnQ5o4SPaZZvDqu2FOGjUnSeOtnhNOYGcT+N
4scCdJ7IIjcT7SHHKiHdtszcW8QUd97TgwH9qXdydedb2k6Chgw2F4VG/drdN6iJ
CytZjcLOAENk8MEIoeXHc5poWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHI90MtA
PPBC/poDUVuyGl+NQaP3MB8GA1UdIwQYMBaAFGaIcuh5l7c7l1/j2tTayo6+yOuj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUQ1Ny81Q0Q4MjQ0MjE3
QjAxMUVCQjk0REE3MTRDNEY5QUUwMi9ab2h5NkhtWHR6dVhYLVBhMU5yS2pyN0k2
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pvaHk2SG1YdHp1WFgtUGExTnJLanI3STY2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUQ1Ny81Q0Q4MjQ0MjE3QjAxMUVCQjk0REE3MTRDNEY5QUUwMi9ab2h5NkhtWHR6
dVhYLVBhMU5yS2pyN0k2Nk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArcCHs56wbCiVFEAMtZ60WB0ajGmJpApYWaPCE25eLiQd578DLcPOyFWL2KSS
mz5mg2+4hQ6Qnaxd5RqzcVqR2PSWhEXYYkwaeRaTSGRKFhQ5YWOhbi9LfHUTkul5
TeREa1s6dyAK/64LJCaD46gn9loE4fL6OJRDiRe/ah5zCo72Uv21sEtRctB21CHM
TtMOxbRKpE9Ih5BcrnC4YSX+w/0BUQJU/ANLAivo/cLhYyu+jS9wzr0u19T2snev
rwUf7Cb0sdAlpo/57lVQQB8ERTJ/tDSg6uIFg+lmz7tIT0PuK44hyzSoe4PEANH2
odBeLTiWwae5cNSUK6TKxYtEuA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:17:07 2026 by rpki-client