
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json)
Hash identifier: A90c92sUWJLI81HkefKwnhnZqpFt7wq1Fcnlvl6wKLo=
Subject key identifier: 52:3B:87:23:15:85:AF:3B:73:32:AE:3F:0E:25:0A:8E:C7:A2:21:A0
Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
Manifest number: 019E
Signing time: Wed 23 Sep 2026 04:09:23 +0000
Manifest this update: Wed 23 Sep 2026 04:09:22 +0000
Manifest next update: Wed 30 Sep 2026 04:09:22 +0000
Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: l3xuCUMrkU3W53m8T3x3pq6qRhprrHYqWVubU9G8UYs=)
2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Validity
Not Before: Sep 23 04:09:22 2026 GMT
Not After : Sep 30 04:09:22 2026 GMT
Subject: CN=6ab350f3-e101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:17:60:1c:4e:7b:52:b6:fe:aa:e5:be:4b:
f1:a5:fe:06:f1:00:66:2f:10:da:89:88:12:5c:49:
9a:dc:80:ad:8c:aa:3a:a3:d8:65:78:d5:1f:24:ce:
a2:b9:12:d4:42:f8:f8:19:14:22:ca:71:ff:4c:48:
07:27:83:e1:22:87:20:7d:bf:4b:35:9d:9a:6c:db:
72:e2:8b:e6:5d:55:33:9e:fd:5b:1d:b8:8a:a1:7c:
c7:97:8a:55:e1:52:59:62:1e:ce:8e:7e:68:cb:d8:
12:03:94:ea:22:eb:79:e2:f7:57:41:7a:18:fc:1a:
d7:87:80:76:55:c5:1a:aa:d8:48:f0:9c:dc:ab:7d:
45:93:83:a3:9a:41:1a:01:aa:de:f1:a7:2d:53:3a:
f6:08:fe:41:8a:17:89:98:c7:90:44:9f:6d:1a:ee:
e1:f3:ba:68:46:ca:9e:f6:78:fc:ad:c1:a2:6e:7d:
8f:c4:e3:6b:55:17:6a:93:fa:54:45:96:f6:7a:31:
e8:bc:36:4a:a8:ae:9c:67:8f:3d:1a:5c:f2:20:ec:
f8:34:aa:fd:63:cb:f0:c0:72:d8:bb:7a:71:57:ab:
dd:8d:dc:cd:65:57:24:8f:32:d3:09:7c:02:4b:1a:
b5:9b:09:8f:19:e5:06:6c:1b:37:0c:92:7e:d0:15:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:87:23:15:85:AF:3B:73:32:AE:3F:0E:25:0A:8E:C7:A2:21:A0
X509v3 Authority Key Identifier:
keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8f:2d:87:a4:2d:e5:73:02:19:0c:00:f3:80:2e:57:38:c6:
e2:ee:fc:be:d3:58:8e:77:13:a7:be:65:de:cc:2f:9e:f0:d7:
90:e8:e9:26:c7:95:94:2f:64:05:66:dd:e6:c1:1d:ec:c1:cf:
0d:8f:12:1c:d3:bd:53:16:70:d1:37:af:52:c0:d9:c7:d4:d0:
2c:6e:cb:d4:3a:1e:c1:47:07:0f:35:37:2a:f2:a1:5f:7f:57:
9d:cb:9f:80:5b:19:1a:c6:37:d4:c8:ae:c9:24:0a:c6:4b:b5:
6d:6e:b8:38:94:f9:95:88:d7:08:56:ae:7a:8d:87:8b:82:51:
18:55:e1:34:dd:19:ef:40:76:24:b1:12:6b:32:47:12:6e:eb:
64:1f:0b:36:83:9e:7c:bc:63:ff:82:b2:da:de:df:14:68:ee:
a8:9b:fe:fb:99:de:75:d2:44:3d:ca:af:2a:f9:c8:6f:bc:4e:
74:8f:e8:d0:91:db:63:7d:94:27:3f:e7:17:05:a2:f2:af:c2:
90:23:da:b6:1c:59:76:6b:69:a7:bd:77:2c:c4:cb:c4:b3:45:
b8:c1:14:8d:f5:a0:f4:9a:de:9b:8a:78:1e:38:73:05:ea:ff:
3e:b4:8e:a3:4c:4f:05:ad:25:ef:2a:77:5b:0f:84:24:ce:ce:
3c:7d:56:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:16:29 2026 by rpki-client