
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json)
Hash identifier: wdd8+BED2Mv0IkFNl410wwsoeVOLr73UGfPVNVxrE3k=
Subject key identifier: E5:82:80:A8:10:27:8D:95:8F:64:91:92:68:48:B1:6D:04:12:38:F8
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
Manifest number: 0113
Signing time: Sun 01 Nov 2026 07:07:25 +0000
Manifest this update: Sun 01 Nov 2026 07:07:24 +0000
Manifest next update: Sun 08 Nov 2026 07:07:24 +0000
Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: C6Hn7seiAgfwaO1LkVxC0znM+0ilUn6vTH3Wp1f7BAw=)
2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: W37mY/OKuZXNI6l/SJOrt83pL0/6piDhzRMqwGbzwkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 07:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Validity
Not Before: Nov 1 07:07:24 2026 GMT
Not After : Nov 8 07:07:24 2026 GMT
Subject: CN=6ae6e52c-8290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:f3:ae:ce:39:31:df:8e:52:df:ba:ba:2d:
bc:be:30:f9:e9:c1:42:4b:c0:eb:05:cc:6b:d6:ba:
53:4a:7c:15:21:f2:eb:4f:97:8f:14:f0:3b:fb:01:
38:a4:68:70:2f:dd:53:f9:64:64:16:fc:ab:21:16:
eb:f2:66:fa:f9:dd:01:93:a5:02:eb:a9:de:e1:c5:
ca:35:05:0e:eb:06:c4:51:3c:41:d9:85:5d:e6:c8:
cb:39:67:2c:a2:cc:c6:25:26:ff:f1:b4:49:79:47:
5e:05:16:48:f2:e0:e2:cc:d0:ae:de:62:33:7a:7a:
11:ec:be:98:10:b6:81:d3:9d:09:d7:81:fb:50:2c:
b5:29:72:6f:8c:58:b8:e2:24:df:e5:93:3f:43:b6:
c8:b2:8c:c0:1f:0d:9e:93:82:d3:2e:7b:dd:f6:d9:
32:6f:38:a7:d4:39:c3:46:76:ea:70:34:f7:20:74:
21:fe:6b:a0:60:52:f5:b3:64:2c:df:3b:ec:83:f6:
df:50:21:eb:75:5e:24:36:21:46:e8:27:ec:05:8f:
bf:fd:3b:c6:98:00:24:2d:c2:cb:47:6a:db:9e:79:
50:ca:dc:cb:6d:97:69:34:4d:bb:c0:99:e1:a3:9f:
36:c0:90:da:40:c2:9c:12:69:3e:70:c9:4c:57:ee:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:82:80:A8:10:27:8D:95:8F:64:91:92:68:48:B1:6D:04:12:38:F8
X509v3 Authority Key Identifier:
keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:d4:85:84:99:1a:31:39:fd:33:b9:5b:99:a0:82:87:7e:
a9:7c:6d:be:06:02:98:74:dc:7a:d0:a3:72:cb:90:0d:fb:5b:
ef:bb:93:59:06:20:1b:c6:8c:56:06:a2:23:d9:e6:bd:00:9e:
ca:1e:3d:f4:7e:b5:2a:f4:01:7c:06:8e:aa:29:ea:c5:3a:9e:
4a:bf:c7:72:80:55:cb:93:7c:f7:6b:30:6d:64:a5:ec:29:b9:
1c:08:f8:3d:96:a9:91:33:1f:9c:fe:64:25:ca:9a:b6:e6:59:
dd:99:97:0c:09:fe:1e:c1:b6:a7:e4:82:de:7e:b9:0f:1e:a2:
c8:29:62:2e:6e:db:b4:96:ef:8f:43:cb:1f:46:cd:2a:bb:01:
8a:9e:be:21:2f:2d:df:3b:4b:8f:87:69:9b:89:3f:59:e3:ff:
ea:01:38:69:b7:ca:c7:5d:4c:98:4d:26:cd:cb:91:81:2c:6b:
a6:7c:ab:b0:dc:59:c5:77:ed:fb:2a:cf:a8:3b:9d:17:b0:46:
f3:41:eb:78:26:05:93:28:52:8b:f6:2c:25:b7:cc:fb:25:e9:
7e:ad:4d:77:4f:3e:27:99:45:46:c7:39:f6:99:e1:97:cf:bb:
84:c3:c4:29:c1:6c:bd:b3:03:92:f6:8d:86:2b:e4:2e:70:d4:
5d:87:8a:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBFOTAxMTAvBgNVBAUTKENGMUUwRTVCRDc3QjFGRkI1MzU2NzgxRjYxNjMxNThD
MkUyRjdCNkQwHhcNMjYxMTAxMDcwNzI0WhcNMjYxMTA4MDcwNzI0WjAYMRYwFAYD
VQQDEw02YWU2ZTUyYy04MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8/zrs45Md+OUt+6ui28vjD56cFCS8DrBcxr1rpTSnwVIfLrT5ePFPA7+wE4
pGhwL91T+WRkFvyrIRbr8mb6+d0Bk6UC66ne4cXKNQUO6wbEUTxB2YVd5sjLOWcs
oszGJSb/8bRJeUdeBRZI8uDizNCu3mIzenoR7L6YELaB050J14H7UCy1KXJvjFi4
4iTf5ZM/Q7bIsozAHw2ek4LTLnvd9tkybzin1DnDRnbqcDT3IHQh/mugYFL1s2Qs
3zvsg/bfUCHrdV4kNiFG6CfsBY+//TvGmAAkLcLLR2rbnnlQytzLbZdpNE27wJnh
o582wJDaQMKcEmk+cMlMV+7szwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWCgKgQ
J42Vj2SRkmhIsW0EEjj4MB8GA1UdIwQYMBaAFM8eDlvXex/7U1Z4H2FjFYwuL3tt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEU5MC9CQjZGQjY4ODM5
NjUxMUYwQTZBODFCNDNDNEY5QUUwMi96eDRPVzlkN0hfdFRWbmdmWVdNVmpDNHZl
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p4NE9XOWQ3SF90VFZuZ2ZZV01WakM0dmUyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MEU5MC9CQjZGQjY4ODM5NjUxMUYwQTZBODFCNDNDNEY5QUUwMi96eDRPVzlkN0hf
dFRWbmdmWVdNVmpDNHZlMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUgTUhYSZGjE5/TO5W5mggod+qXxtvgYCmHTcetCjcsuQDftb77uTWQYgG8aM
VgaiI9nmvQCeyh499H61KvQBfAaOqinqxTqeSr/HcoBVy5N892swbWSl7Cm5HAj4
PZapkTMfnP5kJcqatuZZ3ZmXDAn+HsG2p+SC3n65Dx6iyCliLm7btJbvj0PLH0bN
KrsBip6+IS8t3ztLj4dpm4k/WeP/6gE4abfKx11MmE0mzcuRgSxrpnyrsNxZxXft
+yrPqDudF7BG80HreCYFkyhSi/YsJbfM+yXpfq1Nd08+J5lFRsc59pnhl8+7hMPE
KcFsvbMDkvaNhivkLnDUXYeK7w==
-----END CERTIFICATE-----
Generated at Sun Nov 1 13:16:09 2026 by rpki-client