
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier: 8dJNbx5qY3w2791OLk7i28d7LRSR9B1l4xiqffcf3EE=
Subject key identifier: F7:EC:74:FE:F8:A2:42:5A:3E:C4:71:D3:EB:8B:56:5C:AF:C7:83:2E
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1E13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number: 3FE1
Signing time: Sun 20 Sep 2026 14:28:34 +0000
Manifest this update: Sun 20 Sep 2026 14:28:33 +0000
Manifest next update: Sun 27 Sep 2026 14:28:33 +0000
Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: DGRCGLFBTtBOmTFihyY7RNKoSfQ1DUyXHKiyZj85vdc=)
2: 9894B43E80DA11F1AF01F71A5DA30FBC.roa (hash: 746pRPtMH1SGiVoQbklMO4Qp6QGnZ4g3CyOw0Szk53A=)
3: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
4: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
5: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
6: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
7: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
8: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 9d7+U0GsZDY6ZehuYxySqXSfRY3e2dmU9OZ6IPMqzmU=)
9: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
10: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
11: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
12: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
13: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: jKKRIP8Mze98sL1n15uOF95N4d5VeEeQhVHQTOvGEoE=)
14: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
15: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
16: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7699 (0x1e13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Sep 20 14:28:33 2026 GMT
Not After : Sep 27 14:28:33 2026 GMT
Subject: CN=6aafed92-f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:f6:40:39:10:a6:5d:1a:76:e2:fa:0c:88:
1a:a6:1b:41:ff:9d:34:ee:27:bc:6f:00:0b:2b:3f:
69:1d:d8:87:f5:28:34:25:81:b9:4f:54:0c:7d:5b:
e8:54:80:73:ce:be:a2:9d:a9:07:bc:a6:c1:23:7c:
d2:b7:e5:e9:a8:ac:a3:a4:cf:2e:75:4d:88:eb:d2:
4e:b4:2f:fc:97:24:a5:a9:f6:07:32:74:ec:60:cb:
5a:8f:ff:87:d0:39:18:b3:38:b7:ac:8b:5b:de:f6:
e7:ec:37:ca:f3:d6:d2:2c:71:77:03:4b:74:85:96:
c2:ae:b5:dd:8b:b6:6b:f9:68:af:e3:82:65:9c:dc:
48:c0:78:07:99:3b:45:43:f7:d4:27:71:c9:4b:34:
41:1d:f0:e3:a6:35:ea:b0:47:69:d7:55:ed:83:2d:
6d:a4:49:98:b9:18:c6:7e:6c:99:2a:eb:24:b0:4b:
7a:a9:80:10:74:83:2e:02:d2:e6:0f:cd:7d:5f:47:
35:13:29:3c:39:22:55:8c:5b:a0:98:7b:a1:2d:71:
b6:cb:b7:fc:90:38:86:39:39:9c:ba:50:7d:27:9b:
60:89:da:78:fd:73:b3:df:2d:a8:d5:85:cf:96:80:
f0:df:e8:23:12:f8:2c:96:62:85:c8:6b:f9:ff:e7:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EC:74:FE:F8:A2:42:5A:3E:C4:71:D3:EB:8B:56:5C:AF:C7:83:2E
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:0d:9d:2b:0f:c2:ed:9f:a4:74:83:14:d1:e6:85:97:c8:08:
2d:30:3a:84:7f:a9:1c:24:77:d3:c9:8d:73:35:89:c3:54:7f:
07:74:3f:68:c0:38:b9:25:28:ac:d9:ea:19:47:f5:88:22:e3:
1d:d9:8a:b0:fc:1d:21:a4:35:2e:17:b6:7d:1f:19:22:f1:21:
75:29:83:de:ab:89:5e:e0:7a:d6:6c:ee:8c:0a:df:39:b1:ad:
9a:b4:5c:78:68:c0:a2:e5:fd:0a:5d:36:4a:0e:ca:92:b2:41:
4a:ac:2a:a4:61:ea:cf:49:64:c2:42:bf:97:48:23:d0:2d:93:
d2:3b:f8:70:93:a2:12:0b:2b:b3:90:c4:ae:e1:0f:a2:b1:1d:
c9:5f:8f:13:06:a6:4c:86:ee:1f:89:ae:19:20:62:1f:0a:6e:
ac:1c:5f:2c:bb:fb:bc:f0:59:5e:4f:97:1f:73:35:d3:23:65:
b2:c8:38:3a:3d:eb:d7:60:02:86:93:8e:fb:39:61:e5:32:fa:
1c:d3:a9:25:e0:79:7f:da:1f:06:a4:57:ae:2b:58:2a:85:03:
71:f9:2a:4d:2b:1c:a0:74:e2:e3:8d:38:e9:3c:a5:1d:1e:f9:
ed:3d:d3:74:a8:dd:ff:de:09:d0:67:93:49:bd:41:cc:f8:cd:
b2:db:52:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4
NkE5QjNGRDgwHhcNMjYwOTIwMTQyODMzWhcNMjYwOTI3MTQyODMzWjAYMRYwFAYD
VQQDEw02YWFmZWQ5Mi1mMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmz2QDkQpl0aduL6DIgaphtB/5007ie8bwALKz9pHdiH9Sg0JYG5T1QMfVvo
VIBzzr6inakHvKbBI3zSt+XpqKyjpM8udU2I69JOtC/8lySlqfYHMnTsYMtaj/+H
0DkYszi3rItb3vbn7DfK89bSLHF3A0t0hZbCrrXdi7Zr+Wiv44JlnNxIwHgHmTtF
Q/fUJ3HJSzRBHfDjpjXqsEdp11Xtgy1tpEmYuRjGfmyZKusksEt6qYAQdIMuAtLm
D819X0c1Eyk8OSJVjFugmHuhLXG2y7f8kDiGOTmculB9J5tgidp4/XOz3y2o1YXP
loDw3+gjEvgslmKFyGv5/+dMVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfsdP74
okJaPsRx0+uLVlyvx4MuMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE
ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTU2OC9CRDFBOTVEMjFEODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0
dlRINkFXb3RXMXVHcWJQOWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANg2dKw/C7Z+kdIMU0eaFl8gILTA6hH+pHCR308mNczWJw1R/B3Q/aMA4uSUo
rNnqGUf1iCLjHdmKsPwdIaQ1Lhe2fR8ZIvEhdSmD3quJXuB61mzujArfObGtmrRc
eGjAouX9Cl02Sg7KkrJBSqwqpGHqz0lkwkK/l0gj0C2T0jv4cJOiEgsrs5DEruEP
orEdyV+PEwamTIbuH4muGSBiHwpurBxfLLv7vPBZXk+XH3M10yNlssg4Oj3r12AC
hpOO+zlh5TL6HNOpJeB5f9ofBqRXritYKoUDcfkqTSscoHTi44046TylHR757T3T
dKjd/94J0GeTSb1BzPjNsttSNg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:18:29 2026 by rpki-client