
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier: xpFGsqcoA/LF+8F5yfXMXyQaNLB0fTvz1gZMHBGS07c=
Subject key identifier: 91:6D:1E:64:29:93:FC:B0:3F:E8:7D:D5:27:83:5F:DE:03:D3:03:01
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1E16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number: 3FE4
Signing time: Sat 26 Sep 2026 14:29:25 +0000
Manifest this update: Sat 26 Sep 2026 14:29:25 +0000
Manifest next update: Sat 03 Oct 2026 14:29:25 +0000
Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: S0zdE9xY9kYeV1evyBFWn+o/qdDJAo16v2WolrKR09I=)
2: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
3: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
4: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: jKKRIP8Mze98sL1n15uOF95N4d5VeEeQhVHQTOvGEoE=)
5: 9894B43E80DA11F1AF01F71A5DA30FBC.roa (hash: 746pRPtMH1SGiVoQbklMO4Qp6QGnZ4g3CyOw0Szk53A=)
6: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
7: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
8: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
9: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
10: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
11: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
12: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
13: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
14: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
15: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 9d7+U0GsZDY6ZehuYxySqXSfRY3e2dmU9OZ6IPMqzmU=)
16: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7702 (0x1e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Sep 26 14:29:25 2026 GMT
Not After : Oct 3 14:29:25 2026 GMT
Subject: CN=6ab7d6c5-c573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:dd:b1:85:10:1e:8a:fa:f4:c2:9b:6d:b1:
e1:d0:cb:dd:45:fa:da:f0:4a:df:55:28:37:40:2b:
82:d4:55:de:92:b7:6a:69:55:90:2c:b1:ea:16:be:
2b:63:8c:5b:b0:4c:1e:da:e5:3a:dd:0b:2b:4d:25:
61:4b:9c:4a:a4:eb:64:26:e9:5e:70:ca:c3:06:20:
00:e3:aa:7c:58:87:f2:3c:f4:4c:cd:11:d2:4d:68:
ec:39:84:fb:13:df:90:c6:39:a6:06:9a:dd:06:87:
b8:a7:f6:51:a6:5c:f3:a1:f8:75:e2:dd:7b:12:e7:
a7:19:be:7d:d0:c4:92:d4:1d:5e:af:63:49:34:0b:
8a:35:31:c2:84:9f:9b:12:59:88:94:0e:1a:85:07:
81:d3:fd:2a:59:43:b2:9b:fb:7d:be:a7:21:de:37:
c8:d9:37:16:dd:15:09:77:f5:2d:5a:62:52:a3:0c:
8d:3e:21:8b:49:3a:03:65:e6:8f:56:34:8c:3c:23:
e1:89:bd:33:23:e7:59:e0:42:e9:ef:23:ac:38:c8:
68:43:d0:84:79:86:28:0c:f7:51:7c:c6:b7:6a:5c:
8d:6d:c6:17:b7:ca:14:05:93:27:b0:7d:9b:36:c1:
05:ad:e2:33:5e:bc:b9:1d:14:fc:ec:1d:db:00:ba:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6D:1E:64:29:93:FC:B0:3F:E8:7D:D5:27:83:5F:DE:03:D3:03:01
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:98:00:60:71:8e:1d:0d:bd:86:72:9c:03:ec:80:a5:9f:1a:
92:c4:82:1e:c9:db:ae:a4:c6:69:e1:6d:3c:2e:c2:6d:1b:3b:
85:71:8a:23:5e:2a:5c:e3:01:2e:5e:76:8c:35:18:a0:a8:02:
e4:08:8d:8d:f0:e7:5d:68:68:52:d2:ae:8a:9a:1b:8c:0d:26:
a0:ee:32:ed:19:81:44:9e:2e:6a:ac:91:35:72:41:91:7a:e7:
7a:cc:0f:30:43:c8:cb:10:ca:65:5a:97:2b:82:e0:74:0e:dc:
fb:4b:61:56:99:bf:d2:80:b6:aa:a5:5a:a9:ed:6b:6b:8a:68:
93:8b:97:ef:f4:6e:bf:d8:7b:35:2e:84:cb:b1:6d:04:17:3e:
96:55:c5:0a:6d:d5:8d:99:84:e8:da:e3:96:41:82:4a:9e:29:
56:cc:10:dc:39:2f:23:70:fc:d5:9e:d6:71:da:5e:be:16:d0:
89:23:37:72:13:e9:13:38:34:14:dc:30:94:18:b3:6e:aa:b5:
64:d7:5b:13:4d:fa:b9:82:5a:b6:e1:e6:f4:d6:ee:f6:ee:e8:
8b:3c:9f:44:f9:a5:07:1d:20:15:1d:77:ad:fa:08:2c:a6:81:
6f:ec:34:f2:37:e5:9c:d1:57:34:a1:19:29:aa:e6:90:32:d4:
b6:27:62:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:46:19 2026 by rpki-client