
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json)
Hash identifier: hitaj3j5rIcaani4CjPQQXDJ/tKRDgx+3ipG+qwXdio=
Subject key identifier: A1:2A:8D:68:36:D6:E1:72:16:A7:3F:9D:3A:60:9E:10:3E:B2:62:28
Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
Manifest number: 0180
Signing time: Mon 27 Jul 2026 06:29:02 +0000
Manifest this update: Mon 27 Jul 2026 06:29:01 +0000
Manifest next update: Mon 03 Aug 2026 06:29:01 +0000
Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: SBe6IdTexlxq1eqAzzywHnal1DUOm5/IZMQKqP+rS/s=)
2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Validity
Not Before: Jul 27 06:29:01 2026 GMT
Not After : Aug 3 06:29:01 2026 GMT
Subject: CN=6a66faae-f0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:90:5c:e6:73:f3:83:67:e5:d3:e0:e8:4e:97:
f8:9b:fc:84:32:ee:cc:72:ee:ef:83:4a:54:92:db:
97:61:25:4d:50:d0:54:19:33:03:48:4d:d1:c5:76:
6e:20:e3:24:5a:f2:a1:f0:c1:1e:7f:92:d8:b5:20:
30:8d:38:7d:6e:5c:58:99:e1:7c:43:83:da:cb:65:
92:88:a0:05:78:05:3e:e6:9e:ce:c8:49:6e:fe:49:
99:3e:89:aa:57:81:eb:5a:98:24:4d:5f:e3:0e:3d:
2a:b3:d4:d6:9c:7b:3e:81:74:3a:44:c3:01:57:2c:
f7:48:b4:e5:0d:24:4b:e4:18:14:62:e5:4f:d6:50:
63:96:1f:b0:69:d2:d7:e5:64:d9:cc:05:bb:ca:78:
94:92:22:f6:cf:7a:ea:b6:af:05:aa:b7:9b:8e:3a:
04:02:f0:ad:31:ab:63:14:d2:0a:59:c3:a9:75:b0:
d6:1e:5b:df:65:9f:f6:15:ce:98:31:b9:c7:08:3d:
fb:e5:67:1d:4c:f0:fa:23:e4:7e:ab:eb:cb:29:a5:
93:ce:ee:b2:4b:80:b0:ec:bb:5a:3d:d5:84:27:98:
5f:90:9c:9a:9d:f6:38:51:35:fd:61:c9:74:7d:96:
8c:5e:69:b4:1f:0d:48:06:cd:dd:54:3d:b8:d5:79:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:8D:68:36:D6:E1:72:16:A7:3F:9D:3A:60:9E:10:3E:B2:62:28
X509v3 Authority Key Identifier:
keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:3b:41:26:9d:bc:3e:ee:8e:25:1b:8f:30:0f:0e:ba:73:47:
7d:55:2d:d5:d2:f3:b2:39:17:fd:92:94:42:82:fa:69:e3:e5:
e1:0e:bc:34:9a:97:f4:d2:94:61:07:fc:d0:92:20:85:9c:f5:
c0:d3:85:b9:dd:7b:e9:5a:57:51:b6:3e:8e:d6:ff:5a:b0:8e:
4a:43:ff:a8:6a:a4:db:ca:17:30:9f:36:67:d5:70:90:67:8e:
9e:ff:8f:29:7e:53:7f:de:d3:5d:18:e7:7d:96:ea:0e:8e:77:
21:d1:c9:63:0d:9e:2d:57:57:81:3f:f6:64:fa:4c:1b:f3:1f:
98:16:49:62:c4:1a:d4:67:f6:0b:5d:ad:24:43:7d:87:5f:48:
e2:89:01:84:b5:c1:8e:f0:6a:a5:2c:0d:e5:11:52:46:cc:6c:
04:ef:cf:ca:43:95:58:2b:9f:b4:0b:f9:e0:99:f9:30:a8:b8:
12:26:bd:bd:a1:4c:99:94:99:87:02:af:05:50:2a:a1:43:98:
96:aa:49:1a:a3:cf:8a:dd:c0:cd:17:8a:e5:3e:75:d5:3b:bd:
eb:88:fa:9b:db:87:11:12:ac:5d:e7:96:c0:91:f8:dd:b8:c6:
c3:7b:ce:0c:db:f4:2a:28:c2:c4:47:6b:ad:00:17:60:bf:53:
cc:35:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:22 2026 by rpki-client