
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
File: CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json)
Hash identifier: VbtsALbovr3h1GjREKB6iDEBt2QXaZyhAycmgda7l18=
Subject key identifier: 0F:A7:3F:A9:11:E2:45:42:8B:B0:C6:37:E7:C5:73:FF:43:19:B7:94
Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Certificate serial: 08A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
Manifest number: 160B
Signing time: Sat 26 Sep 2026 18:00:49 +0000
Manifest this update: Sat 26 Sep 2026 18:00:48 +0000
Manifest next update: Sat 03 Oct 2026 18:00:48 +0000
Files and hashes: 1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: bXS2RT4LE1DQQBGZSGlIJxNlupclLyxB0MVFwwgSOBc=)
2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: ue5ndJ8DrcK9W907BtlxWmIb4e/ViU5GMxY4q9X9FmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl
rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Validity
Not Before: Sep 26 18:00:48 2026 GMT
Not After : Oct 3 18:00:48 2026 GMT
Subject: CN=6ab80851-b1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:5c:83:cf:7d:1e:91:11:19:20:c0:cd:f0:
de:b2:a6:ea:b6:37:6b:27:d6:f8:e1:e3:31:7a:b8:
24:f6:60:b1:a0:be:db:0f:c0:15:70:1e:4e:11:5e:
9a:cf:3e:16:6d:69:a9:62:87:01:a4:0d:94:91:3e:
8e:1f:36:4f:07:77:9e:6e:6d:72:6e:e6:12:6d:61:
5a:50:e5:32:38:b1:58:4c:d2:9c:8b:47:fe:70:c1:
66:9e:d5:36:57:8d:fb:4e:79:b6:b2:3e:1b:2d:87:
9f:73:cc:8c:72:2c:aa:ce:d6:8a:34:d7:ce:60:5b:
ff:04:76:86:2f:b5:80:6e:c6:d9:d6:02:db:96:fe:
31:6c:5c:66:8d:e0:14:c4:8a:9c:dc:29:84:d4:84:
81:27:a3:29:80:d4:90:da:90:a0:42:b1:a2:e9:d1:
15:e6:1b:b8:ba:5a:0e:89:16:0d:26:4f:b2:1c:7b:
c9:3c:64:f9:70:21:04:92:5b:35:47:32:45:c5:57:
fa:d2:c3:64:87:30:37:68:7b:9a:01:3a:9c:cf:a5:
ca:71:49:4f:e6:a2:32:05:80:83:9e:12:5b:80:9d:
2c:0e:b2:3e:9a:1d:b9:dd:f2:c8:0f:11:b4:de:8f:
2f:b3:f2:db:a2:63:a0:94:c0:58:d5:60:16:c0:66:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A7:3F:A9:11:E2:45:42:8B:B0:C6:37:E7:C5:73:FF:43:19:B7:94
X509v3 Authority Key Identifier:
keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d2:a7:25:6f:5e:94:54:07:3f:7c:06:fd:65:3d:da:49:96:
f7:ac:b6:c8:67:61:1e:56:06:eb:71:bb:10:d1:10:dd:d2:eb:
74:31:58:77:c4:96:ed:8a:7a:5c:6b:fa:72:3b:72:17:6b:23:
6a:ed:f8:77:17:e4:7c:8a:b1:4a:6f:bc:80:34:9d:ce:94:4f:
62:13:bd:2c:8f:2a:c2:35:ae:da:49:55:7c:49:c2:75:3e:64:
a3:05:b0:86:dc:6e:75:0a:83:f8:d2:b2:cf:4e:f0:98:e6:4b:
ab:e1:f6:39:01:05:b2:ea:92:f7:46:78:38:6c:c5:a9:12:6b:
72:2a:43:41:b1:36:57:b2:4c:8a:ae:bb:3e:3f:51:84:fe:74:
ff:ce:3a:5a:ea:f4:8d:3d:d2:23:b2:fc:a0:c6:3b:d9:07:07:
eb:5d:1d:18:45:1f:df:e4:2c:78:f0:9c:51:12:4e:76:a0:fa:
79:43:23:25:4e:e2:9b:3e:f0:46:8c:50:ac:cb:88:da:61:71:
96:73:88:ac:85:fc:0b:e8:2e:00:3b:7a:d7:92:53:8d:6e:f9:
0f:d0:2f:d1:f3:db:24:b8:71:e4:3a:f9:80:d7:ae:41:27:ae:
e2:8c:aa:c5:11:7a:37:77:6c:b9:51:2b:9e:e8:97:c8:85:e4:
e8:fc:d5:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz
RDg2NEZGMDEwHhcNMjYwOTI2MTgwMDQ4WhcNMjYxMDAzMTgwMDQ4WjAYMRYwFAYD
VQQDEw02YWI4MDg1MS1iMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqNFcg899HpERGSDAzfDesqbqtjdrJ9b44eMxergk9mCxoL7bD8AVcB5OEV6a
zz4WbWmpYocBpA2UkT6OHzZPB3eebm1ybuYSbWFaUOUyOLFYTNKci0f+cMFmntU2
V437Tnm2sj4bLYefc8yMciyqztaKNNfOYFv/BHaGL7WAbsbZ1gLblv4xbFxmjeAU
xIqc3CmE1ISBJ6MpgNSQ2pCgQrGi6dEV5hu4uloOiRYNJk+yHHvJPGT5cCEEkls1
RzJFxVf60sNkhzA3aHuaATqcz6XKcUlP5qIyBYCDnhJbgJ0sDrI+mh253fLIDxG0
3o8vs/LbomOglMBY1WAWwGb9kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+nP6kR
4kVCi7DGN+fFc/9DGbeUMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0
RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf
d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VB
Wnp6TmVoZGdYOU05aGtfd0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHtKnJW9elFQHP3wG/WU92kmW96y2yGdhHlYG63G7ENEQ3dLrdDFYd8SW7Yp6
XGv6cjtyF2sjau34dxfkfIqxSm+8gDSdzpRPYhO9LI8qwjWu2klVfEnCdT5kowWw
htxudQqD+NKyz07wmOZLq+H2OQEFsuqS90Z4OGzFqRJrcipDQbE2V7JMiq67Pj9R
hP50/846Wur0jT3SI7L8oMY72QcH610dGEUf3+QsePCcURJOdqD6eUMjJU7imz7w
RoxQrMuI2mFxlnOIrIX8C+guADt615JTjW75D9Av0fPbJLhx5Dr5gNeuQSeu4oyq
xRF6N3dsuVErnuiXyIXk6PzVOQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:13:57 2026 by rpki-client