
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json)
Hash identifier: EtzPnAnIm4ZHf9dUePX5Tg45y+rXKRnwZ4tfhYV+Z1Q=
Subject key identifier: 22:66:22:74:9B:EC:A9:2E:09:9D:AF:1A:85:98:6A:61:91:23:3A:29
Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
Manifest number: 016E
Signing time: Wed 22 Jul 2026 22:06:58 +0000
Manifest this update: Wed 22 Jul 2026 22:06:58 +0000
Manifest next update: Wed 29 Jul 2026 22:06:58 +0000
Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: KqJUtUIeQDZtTLvslcOLspdeAEzkUhaXpJYe0oJBUrI=)
2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: 4De+ftW6AlydF3aj182yhRL0S4HDbta7pD0izCS8LQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Validity
Not Before: Jul 22 22:06:58 2026 GMT
Not After : Jul 29 22:06:58 2026 GMT
Subject: CN=6a613f02-d99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:23:f1:89:c9:33:0e:b6:ab:50:b9:42:42:
64:7b:04:f5:9f:7a:90:50:a3:d4:f9:4b:38:c4:e8:
c1:34:f7:3b:fc:a3:a2:82:16:dd:08:69:71:06:d7:
e8:f7:25:06:bb:e0:d4:39:5a:75:ff:8a:12:09:ae:
d1:b1:10:17:45:3e:d9:fc:93:85:45:00:7e:d9:d8:
da:e6:de:24:fc:35:07:5f:d3:db:e0:9f:c5:0b:a4:
df:f5:78:b5:ca:1b:91:21:c6:79:39:18:bb:a7:cf:
84:3e:a8:08:2a:11:e3:3f:56:f3:f4:ec:a6:59:d3:
7e:b6:3e:6b:26:27:ac:c9:4d:d8:2e:bb:e3:1b:0a:
ce:48:28:41:99:7d:d4:18:69:b2:84:77:6c:0d:0a:
5c:14:87:5d:a0:33:52:f8:7e:42:4f:8d:27:a7:4f:
e3:65:a9:6a:aa:9d:3f:f7:22:04:ed:d4:9c:d7:22:
7f:4a:ef:4b:78:a6:29:bf:31:10:bb:e8:b5:90:5a:
fb:17:c2:9f:5b:97:ec:6c:c2:01:60:5d:29:fc:62:
41:81:d8:2a:79:15:0b:0e:67:bf:bc:d1:55:91:79:
ca:a7:a8:13:df:48:7a:44:e7:61:57:9c:99:0d:be:
d2:f3:9d:4f:9e:42:16:a4:ac:fc:2d:c2:b6:cc:4a:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:66:22:74:9B:EC:A9:2E:09:9D:AF:1A:85:98:6A:61:91:23:3A:29
X509v3 Authority Key Identifier:
keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b8:e5:54:2f:f6:ba:17:1e:d8:d9:f1:ba:a7:3c:0a:25:46:
43:58:d6:7d:09:33:38:1b:8c:37:ac:e8:99:3c:e3:d1:1f:d7:
4a:e8:7a:cd:b3:48:09:27:2b:eb:d3:be:04:d3:84:7c:14:3d:
71:d1:04:8d:d3:46:3f:05:e0:51:66:67:12:b1:d8:bd:e9:3a:
d9:0d:32:5e:c1:27:31:8c:db:25:08:df:53:6d:0a:86:2b:15:
e7:09:9a:47:60:ab:84:1a:fa:d4:2d:97:d0:90:24:90:02:42:
57:68:d0:73:2a:f1:40:c3:73:53:20:e0:e0:fe:48:71:6d:bb:
6f:0b:d6:29:36:04:ae:ed:8c:a7:18:68:bb:d1:0b:84:5e:04:
73:63:a3:43:23:ee:b4:36:6e:e7:76:bd:a5:35:f6:17:be:ce:
09:c5:33:b3:10:8f:4f:2e:3d:b5:8f:e8:70:49:b8:dd:90:5a:
48:11:40:3a:55:c6:10:46:2f:27:a2:1a:ce:85:64:b4:67:c4:
d5:32:62:96:71:8e:69:4b:01:72:7c:d2:af:40:9a:2d:a3:c2:
5a:c5:1c:ae:a7:27:ab:3e:48:76:41:ab:d0:b4:25:53:24:41:
bb:0c:7c:63:35:10:ee:04:a8:10:a9:2d:3f:3b:22:af:b2:63:
b1:55:d1:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB
ODVDQUFEN0UwHhcNMjYwNzIyMjIwNjU4WhcNMjYwNzI5MjIwNjU4WjAYMRYwFAYD
VQQDEw02YTYxM2YwMi1kOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAroYj8YnJMw62q1C5QkJkewT1n3qQUKPU+Us4xOjBNPc7/KOighbdCGlxBtfo
9yUGu+DUOVp1/4oSCa7RsRAXRT7Z/JOFRQB+2dja5t4k/DUHX9Pb4J/FC6Tf9Xi1
yhuRIcZ5ORi7p8+EPqgIKhHjP1bz9OymWdN+tj5rJiesyU3YLrvjGwrOSChBmX3U
GGmyhHdsDQpcFIddoDNS+H5CT40np0/jZalqqp0/9yIE7dSc1yJ/Su9LeKYpvzEQ
u+i1kFr7F8KfW5fsbMIBYF0p/GJBgdgqeRULDme/vNFVkXnKp6gT30h6ROdhV5yZ
Db7S851PnkIWpKz8LcK2zEoGVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJmInSb
7KkuCZ2vGoWYamGRIzopMB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF
Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0
czk4NkhFMlhEeXFvWEtyWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP7jlVC/2uhce2Nnxuqc8CiVGQ1jWfQkzOBuMN6zomTzj0R/XSuh6zbNICScr
69O+BNOEfBQ9cdEEjdNGPwXgUWZnErHYvek62Q0yXsEnMYzbJQjfU20KhisV5wma
R2CrhBr61C2X0JAkkAJCV2jQcyrxQMNzUyDg4P5IcW27bwvWKTYEru2Mpxhou9EL
hF4Ec2OjQyPutDZu53a9pTX2F77OCcUzsxCPTy49tY/ocEm43ZBaSBFAOlXGEEYv
J6IazoVktGfE1TJilnGOaUsBcnzSr0CaLaPCWsUcrqcnqz5IdkGr0LQlUyRBuwx8
YzUQ7gSoEKktPzsir7JjsVXR2w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:58 2026 by rpki-client