
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json)
Hash identifier: Uzjd8lx203+yvoC9Zig/8Lej5Bkj/MVRd1MgdBrUuH0=
Subject key identifier: C1:FB:89:40:92:00:C3:08:DD:5E:B5:65:FC:7D:75:8E:AE:DE:1E:BF
Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF
Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
Certificate serial: 0C06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
Manifest number: 0BFB
Signing time: Fri 02 Oct 2026 19:10:25 +0000
Manifest this update: Fri 02 Oct 2026 19:10:24 +0000
Manifest next update: Fri 09 Oct 2026 19:10:24 +0000
Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: xihXtd4o5uXkJn3emlaQZuMZoZbpFzvp4sba+sdBlnQ=)
2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: /2dz4PjA3+fudT7lQIBIdu9/aDa/a/TeRxW2OSUWKSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl
rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
Validity
Not Before: Oct 2 19:10:24 2026 GMT
Not After : Oct 9 19:10:24 2026 GMT
Subject: CN=6ac001a0-cd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:5f:23:c9:54:0e:db:39:82:29:44:7e:eb:
34:b3:76:74:86:44:fb:80:52:e2:33:7d:92:fd:01:
58:53:6e:e0:bf:4c:9a:fc:53:2c:05:c6:fb:6c:f5:
b3:9c:9c:ca:f8:01:48:33:1e:62:02:d8:f6:e4:84:
6d:e2:7c:ae:ba:8f:02:91:f9:af:89:9d:1f:9b:92:
f1:5e:d5:e2:16:d5:41:26:40:c9:d1:04:20:f5:15:
48:7c:49:e6:69:91:7e:d9:c7:e5:42:3d:49:ec:6d:
31:d4:0f:cd:ee:03:c1:79:a4:cf:b4:94:d5:af:07:
65:fa:10:d2:af:a1:ce:69:66:da:5e:de:cd:a3:a2:
24:5f:2f:bd:69:84:31:54:13:c7:78:c5:f6:6c:ff:
0b:40:01:29:c3:0d:31:d1:f6:50:10:93:39:6f:ba:
cd:ec:8c:17:2b:90:e8:a6:9f:90:1d:72:8d:86:e0:
25:43:e6:3a:f4:ba:73:aa:32:87:6b:ad:43:d2:15:
08:d8:85:75:37:a6:d0:94:f3:5a:af:5f:bb:04:1f:
58:b2:f0:88:7a:e5:f6:1f:3f:c0:ea:18:03:77:b5:
d4:27:5f:ef:f9:e6:13:0f:c8:c9:aa:7c:b3:43:0b:
5d:6a:ff:06:0e:28:f1:e8:08:fd:c8:02:59:90:95:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FB:89:40:92:00:C3:08:DD:5E:B5:65:FC:7D:75:8E:AE:DE:1E:BF
X509v3 Authority Key Identifier:
keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:03:9f:aa:2d:94:6b:e1:61:ef:a7:4c:3d:91:42:11:c1:23:
62:88:21:9b:52:42:63:7e:4f:08:0d:38:9a:90:80:6c:c3:97:
98:58:e7:d9:e9:c9:03:2c:ef:b0:76:0b:72:87:40:9d:5d:35:
08:2c:3e:62:f3:09:17:11:57:c9:6e:d8:bd:c1:25:a5:30:b4:
b3:e4:9d:1c:dc:54:4a:8d:40:54:1a:94:06:ae:6d:e3:57:c8:
75:37:7c:6c:02:b1:34:8e:0f:eb:59:3a:77:d4:e4:25:38:15:
e4:ec:60:40:40:ca:f1:0d:25:9c:e7:50:f0:e4:b1:3d:8b:eb:
84:bf:ff:3d:1b:d8:30:70:38:b3:7f:33:9c:cb:6f:bc:c1:ac:
29:22:19:52:f4:92:00:03:92:60:4e:ff:da:13:e2:78:9f:ba:
51:69:ab:fb:86:88:79:c9:90:7a:c5:3d:31:a8:ce:c7:27:16:
12:30:64:5c:91:b7:06:82:11:cf:8b:00:b6:e1:dd:40:44:44:
9c:f1:60:14:d9:a7:cb:cd:de:f4:58:a0:cd:4b:60:6a:85:32:
1b:2e:b3:a0:14:45:ec:85:7a:63:02:61:e4:b6:18:9b:10:fd:
71:f6:99:07:db:f2:3a:70:3d:eb:a2:06:b3:4d:cb:7c:ec:e0:
42:00:de:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkxMzIxMTAvBgNVBAUTKENFRDU5NTFDMEUyRkMyRjY2MUZFRUYxQzM3MUI2N0Iy
M0YxQzUyREYwHhcNMjYxMDAyMTkxMDI0WhcNMjYxMDA5MTkxMDI0WjAYMRYwFAYD
VQQDEw02YWMwMDFhMC1jZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyINfI8lUDts5gilEfus0s3Z0hkT7gFLiM32S/QFYU27gv0ya/FMsBcb7bPWz
nJzK+AFIMx5iAtj25IRt4nyuuo8CkfmviZ0fm5LxXtXiFtVBJkDJ0QQg9RVIfEnm
aZF+2cflQj1J7G0x1A/N7gPBeaTPtJTVrwdl+hDSr6HOaWbaXt7No6IkXy+9aYQx
VBPHeMX2bP8LQAEpww0x0fZQEJM5b7rN7IwXK5Dopp+QHXKNhuAlQ+Y69LpzqjKH
a61D0hUI2IV1N6bQlPNar1+7BB9YsvCIeuX2Hz/A6hgDd7XUJ1/v+eYTD8jJqnyz
Qwtdav8GDijx6Aj9yAJZkJXdhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMH7iUCS
AMMI3V61Zfx9dY6u3h6/MB8GA1UdIwQYMBaAFM7VlRwOL8L2Yf7vHDcbZ7I/HFLf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEzMi9EMjY0QTJBNDQ1
OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2WmhfdThjTnh0bnNqOGNV
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p0V1ZIQTR2d3ZaaF91OGNOeHRuc2o4Y1V0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTEzMi9EMjY0QTJBNDQ1OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2
WmhfdThjTnh0bnNqOGNVdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGAOfqi2Ua+Fh76dMPZFCEcEjYoghm1JCY35PCA04mpCAbMOXmFjn2enJAyzv
sHYLcodAnV01CCw+YvMJFxFXyW7YvcElpTC0s+SdHNxUSo1AVBqUBq5t41fIdTd8
bAKxNI4P61k6d9TkJTgV5OxgQEDK8Q0lnOdQ8OSxPYvrhL//PRvYMHA4s38znMtv
vMGsKSIZUvSSAAOSYE7/2hPieJ+6UWmr+4aIecmQesU9MajOxycWEjBkXJG3BoIR
z4sAtuHdQEREnPFgFNmny83e9FigzUtgaoUyGy6zoBRF7IV6YwJh5LYYmxD9cfaZ
B9vyOnA966IGs03LfOzgQgDeIQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:30:06 2026 by rpki-client