
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
File: zyFayRHKpSBlx-xKx5V4NTgr4-0.mft (raw, json)
Hash identifier: MnIo/CxzdyffU8tP1lWGRPJcCKgxEAy6FOKLxV63y+M=
Subject key identifier: C9:1D:81:D4:09:2B:E6:72:26:0C:00:B2:F8:13:79:30:F3:F7:4D:6A
Authority key identifier: CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED
Certificate issuer: /CN=A91BF2DB/serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
Manifest number: 53
Signing time: Fri 17 Apr 2026 07:54:27 +0000
Manifest this update: Fri 17 Apr 2026 07:54:27 +0000
Manifest next update: Fri 24 Apr 2026 07:54:27 +0000
Files and hashes: 1: zyFayRHKpSBlx-xKx5V4NTgr4-0.crl (hash: NK0afAI30ceSsrQhiJegYd5zLlstze9hysRs2ynf5I8=)
2: FD88540EF5E311F0AB8204204D6F56BC.roa (hash: 15B38ymuojJsU1lBlmAxw+iYaANkqD35wxiK+F+Bx6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl
rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2DB, serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED
Validity
Not Before: Apr 17 07:54:27 2026 GMT
Not After : Apr 24 07:54:27 2026 GMT
Subject: CN=69e1e733-2551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:39:7a:85:39:70:1d:ed:8f:ab:02:df:1b:
51:6b:71:82:1e:2f:4c:e0:dc:28:db:d9:3d:62:d8:
48:86:56:d4:f2:cd:9e:94:65:45:48:70:4b:41:5d:
e2:5d:6a:92:79:b0:d9:d1:cc:57:5c:7c:1e:e5:65:
a1:42:7d:d3:b6:26:d5:0c:4c:2c:51:c7:ce:a5:d5:
cb:5e:aa:76:77:03:78:6d:5e:b0:ce:89:23:ac:03:
f2:b3:f4:39:a3:1c:51:6d:8b:01:3b:53:93:82:db:
2c:7f:0d:a5:f2:fa:04:67:e0:e0:42:56:39:f8:77:
bb:4d:61:60:60:7c:89:49:66:a5:5e:a2:c1:64:04:
2d:c3:d0:f0:fa:71:d7:bc:4c:84:11:e6:6d:9e:ca:
fa:d6:8f:2a:b1:c3:ac:7b:59:bc:e4:e0:1e:fe:b2:
95:b1:73:f3:db:47:3a:b9:b8:e3:29:51:e8:70:23:
6d:34:6a:6d:bd:a2:ef:e6:79:10:d1:66:20:86:a4:
c9:db:60:bd:84:b7:61:be:dd:76:03:fe:54:5d:dd:
41:cb:68:bb:b1:68:d9:32:03:8f:7a:32:5e:1a:9e:
1f:c4:ba:1d:e7:0f:c9:ac:ce:04:06:02:d1:ff:69:
bc:07:e3:38:0d:2e:bb:9b:8e:3b:a3:08:0e:08:94:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1D:81:D4:09:2B:E6:72:26:0C:00:B2:F8:13:79:30:F3:F7:4D:6A
X509v3 Authority Key Identifier:
keyid:CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:07:59:3a:c2:88:1b:6f:79:2c:8b:e9:c5:1b:73:eb:6a:19:
c9:1d:41:58:2c:28:1f:bd:d2:da:92:42:00:b7:6e:30:9d:6c:
af:12:bc:c8:a7:88:83:2a:87:2e:c5:f4:7f:9f:61:f1:c0:82:
c8:b8:97:82:44:32:d9:dd:6e:48:e8:67:c2:fe:8f:e6:e4:8a:
03:a6:20:d7:30:72:53:8e:1f:b6:4e:e2:5b:35:7b:82:1c:ae:
93:42:88:7e:7c:1b:0f:a9:5d:65:98:93:90:0d:ae:bb:38:e7:
22:d7:d7:82:9b:e4:87:2e:f8:9c:27:6c:1a:fb:4d:27:1c:6e:
c5:25:38:1f:af:b4:5a:24:17:9b:79:b5:32:e3:54:dc:a1:71:
4f:3e:68:25:d1:1b:b4:37:b0:9e:80:83:09:59:15:b9:a2:f1:
f2:0b:53:5e:ee:a3:b7:6a:1c:2d:9d:48:49:d7:1b:fb:84:8c:
a5:71:95:fb:26:bd:be:95:35:64:83:3f:43:74:86:b4:78:c8:
69:32:7c:fb:37:de:3f:a0:c2:37:84:8a:56:ca:c6:71:d8:69:
1d:57:bd:85:e1:51:6e:bb:41:ee:82:8f:5b:19:80:81:81:37:
2e:36:83:d5:57:ee:95:f9:1b:0b:d8:eb:7b:c7:86:11:ab:ee:
17:63:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:27:28 2026 by rpki-client