
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier: dKf7sy8TYddZFR4lU//yvGg3FL9RrU9iLx4uK1NPWjU=
Subject key identifier: 26:E6:D9:17:79:C7:39:8E:AE:4E:2D:AB:83:4E:37:5A:B2:C8:1B:16
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1D9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number: 3F71
Signing time: Mon 02 Mar 2026 00:08:34 +0000
Manifest this update: Mon 02 Mar 2026 00:08:30 +0000
Manifest next update: Mon 09 Mar 2026 00:08:30 +0000
Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: sJftG8jeAktRKMcS3TcaBuG+vMAXVHXbt0rSWxZ33UQ=)
2: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
3: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
4: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
5: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
6: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
7: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
8: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
9: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
10: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: A41l4a5QeLuyAAjDqJtyo29qvmKv7EtwQyyVY7eLbxI=)
11: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
12: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
13: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
14: 727C68508AB411EA89D83541C4F9AE02.roa (hash: j1y9l++Cb4rS0kTDJ/au9IYHGMfWT1dKRtZ4fnBWD30=)
15: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 6XI/IfvAsAWYLp6AJKm4dtAGOtIg8Onx4flKi94I10Y=)
16: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7581 (0x1d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Mar 2 00:08:30 2026 GMT
Not After : Mar 9 00:08:30 2026 GMT
Subject: CN=69a4d501-fd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:42:ea:29:92:ff:cf:48:69:1f:eb:0e:c7:
e5:b0:7c:ee:99:01:6b:4a:fd:ce:4c:4b:84:ff:f0:
f7:7b:97:13:06:53:34:af:33:6c:1b:56:f7:96:fc:
1b:db:3c:09:7e:3e:3e:66:37:df:33:ed:48:93:92:
e0:bb:31:80:70:c9:80:73:09:97:84:3c:a3:be:24:
a6:fd:d6:ce:bb:d8:b7:73:f6:62:22:38:4f:f9:45:
ea:25:4f:a1:e5:f9:fe:4c:99:56:68:0e:6c:80:f7:
76:58:13:64:ce:a3:c7:76:50:c4:38:b8:e4:ef:35:
5e:ba:14:2b:2b:39:57:bf:8b:13:b7:59:de:93:c6:
bb:1e:63:7c:91:2d:d1:5d:2b:78:f6:21:b9:dd:57:
1b:09:d0:79:d0:bd:a0:c8:c3:21:91:ca:46:43:d9:
f7:fa:fd:eb:d8:03:49:74:5e:8c:d3:61:f5:b8:72:
24:7c:19:f9:19:ba:fc:a0:4d:f4:88:0c:ee:41:05:
d4:28:fa:ea:0b:23:9b:da:f9:f7:01:52:64:d6:96:
a7:6e:6f:84:02:e0:f6:a5:b0:25:90:fe:27:01:78:
1f:d1:c0:e8:ee:d8:80:4e:1a:e1:5b:68:7f:1d:dd:
15:2f:ce:7a:8e:ff:b4:09:54:7b:bd:41:f1:05:42:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E6:D9:17:79:C7:39:8E:AE:4E:2D:AB:83:4E:37:5A:B2:C8:1B:16
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:18:76:2e:e1:f8:d2:60:6f:4f:72:9e:94:c9:66:88:4b:fa:
aa:8f:ad:5d:71:4d:c8:16:0d:bf:a9:56:9a:33:e9:c9:86:2f:
96:4f:86:09:d7:14:a2:51:7f:63:e8:f0:01:3c:ce:c4:13:a0:
67:77:eb:01:20:14:3c:1d:ab:e4:4f:78:ee:0d:b4:44:7f:42:
ce:1a:2e:f3:e3:0a:5c:83:2a:8d:08:62:11:2c:d5:e6:3f:38:
3c:f6:bc:4a:d8:b0:85:21:e4:f5:09:2f:61:e0:01:43:49:1d:
8d:bf:46:de:c2:d1:e6:9d:03:87:d2:b2:b0:ce:7d:24:1f:dc:
ab:50:5e:7b:0a:59:24:42:e3:86:34:c7:24:b0:60:c8:32:4a:
be:fd:8c:3d:13:1b:e7:a5:65:1d:e1:80:f7:cc:dc:0f:96:8a:
7e:a9:f0:9e:78:8c:01:a6:16:89:64:24:54:0d:04:8c:29:9b:
70:77:70:5b:7d:31:ca:57:ca:28:38:ad:38:dc:b1:e1:fb:07:
93:12:17:bc:d7:b0:e1:42:a3:31:57:51:83:da:f4:8c:b8:0d:
9a:a2:69:88:1d:67:90:c7:bb:40:a7:d1:a4:c6:b7:7b:af:47:
e2:6a:7b:78:2d:1b:71:39:74:50:c9:9e:e2:9f:cb:f0:f4:08:
ef:5d:37:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4
NkE5QjNGRDgwHhcNMjYwMzAyMDAwODMwWhcNMjYwMzA5MDAwODMwWjAYMRYwFAYD
VQQDEw02OWE0ZDUwMS1mZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1IFC6imS/89IaR/rDsflsHzumQFrSv3OTEuE//D3e5cTBlM0rzNsG1b3lvwb
2zwJfj4+ZjffM+1Ik5LguzGAcMmAcwmXhDyjviSm/dbOu9i3c/ZiIjhP+UXqJU+h
5fn+TJlWaA5sgPd2WBNkzqPHdlDEOLjk7zVeuhQrKzlXv4sTt1nek8a7HmN8kS3R
XSt49iG53VcbCdB50L2gyMMhkcpGQ9n3+v3r2ANJdF6M02H1uHIkfBn5Gbr8oE30
iAzuQQXUKPrqCyOb2vn3AVJk1panbm+EAuD2pbAlkP4nAXgf0cDo7tiAThrhW2h/
Hd0VL856jv+0CVR7vUHxBUL5gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbm2Rd5
xzmOrk4tq4NON1qyyBsWMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE
ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTU2OC9CRDFBOTVEMjFEODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0
dlRINkFXb3RXMXVHcWJQOWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqBh2LuH40mBvT3KelMlmiEv6qo+tXXFNyBYNv6lWmjPpyYYvlk+GCdcUolF/
Y+jwATzOxBOgZ3frASAUPB2r5E947g20RH9Czhou8+MKXIMqjQhiESzV5j84PPa8
StiwhSHk9QkvYeABQ0kdjb9G3sLR5p0Dh9KysM59JB/cq1BeewpZJELjhjTHJLBg
yDJKvv2MPRMb56VlHeGA98zcD5aKfqnwnniMAaYWiWQkVA0EjCmbcHdwW30xylfK
KDitONyx4fsHkxIXvNew4UKjMVdRg9r0jLgNmqJpiB1nkMe7QKfRpMa3e69H4mp7
eC0bcTl0UMme4p/L8PQI7103WA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:50 2026 by rpki-client