
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier: fJeDu+J4pS9L/xS2k7zCfeSPgbvn1BF58mFgcCpWhnE=
Subject key identifier: 16:91:B7:A2:9F:DB:13:FB:DD:5A:8F:CD:F2:10:1E:3E:7A:D8:A9:AB
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1DD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number: 3FA8
Signing time: Fri 12 Jun 2026 14:29:00 +0000
Manifest this update: Fri 12 Jun 2026 14:29:00 +0000
Manifest next update: Fri 19 Jun 2026 14:29:00 +0000
Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: 5w2MhGiyiWnsBz0UmFDPkUcGnA80d8mcptawu+m8Ysw=)
2: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
3: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
4: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
5: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
6: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 6XI/IfvAsAWYLp6AJKm4dtAGOtIg8Onx4flKi94I10Y=)
7: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
8: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: jKKRIP8Mze98sL1n15uOF95N4d5VeEeQhVHQTOvGEoE=)
9: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
10: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
11: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
12: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
13: 727C68508AB411EA89D83541C4F9AE02.roa (hash: j1y9l++Cb4rS0kTDJ/au9IYHGMfWT1dKRtZ4fnBWD30=)
14: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
15: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
16: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7637 (0x1dd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Jun 12 14:29:00 2026 GMT
Not After : Jun 19 14:29:00 2026 GMT
Subject: CN=6a2c17ac-e0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:45:74:de:98:f7:03:37:7e:90:ec:89:d7:
c6:d3:82:76:76:44:f5:af:e7:1e:dc:e8:ce:bb:f2:
46:23:82:72:46:ea:f4:40:f7:f0:73:3e:87:ab:3c:
1e:5c:e2:91:2a:79:3e:1d:c6:23:76:bf:41:64:d4:
7b:b8:a9:dc:34:04:90:4d:33:31:d7:a8:69:ed:31:
4c:71:01:a9:c4:ed:ba:56:f2:2d:bb:e5:54:a5:be:
e2:3f:5a:f9:a5:3e:a7:2c:41:e3:ea:db:8d:20:02:
b2:a0:0e:3b:c6:dd:ab:26:87:f7:92:d8:ea:37:46:
f6:5d:d3:d1:22:03:ec:b3:0c:42:63:04:d1:3e:6f:
de:b7:37:08:28:2f:1f:c3:a2:4d:df:9f:d1:55:f6:
96:e3:14:d8:6c:45:a4:2e:52:61:f3:06:a6:3e:6f:
dd:1e:03:18:80:bf:14:21:40:82:11:27:15:7f:0f:
49:f3:ab:a7:9f:0e:da:50:57:87:e1:22:85:3b:73:
cf:13:86:14:92:c3:e3:e7:45:29:4a:68:f9:67:0e:
12:71:4f:1b:fe:b7:38:1b:1f:04:18:ea:44:a6:8b:
55:c9:ee:1a:71:23:29:53:3a:eb:54:1a:39:43:42:
13:fa:18:3b:4b:d7:a7:26:17:01:37:09:18:ac:3d:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:B7:A2:9F:DB:13:FB:DD:5A:8F:CD:F2:10:1E:3E:7A:D8:A9:AB
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0d:33:80:66:c1:de:09:ab:20:a3:3e:19:ca:c9:90:ad:5b:
cf:d3:21:df:54:dc:ec:01:65:ab:65:28:e8:d6:ff:8b:e3:00:
02:e5:4b:5b:4b:d5:30:62:89:b6:6f:8e:7b:8f:69:6f:dd:75:
45:20:0f:52:da:e3:65:5a:52:91:4e:e6:da:3d:d5:0d:c4:f6:
83:92:82:27:9a:24:6c:d5:b1:ad:07:f9:1c:26:93:64:f6:3c:
6d:e3:64:b3:a5:58:57:1a:16:f3:20:42:a3:35:11:46:5b:50:
d4:e8:03:03:e7:f2:9b:59:3e:5a:6b:49:90:f6:b6:89:1a:ee:
42:17:03:0e:56:d1:9a:17:91:5b:3f:24:7f:fa:1a:47:db:19:
b9:92:c5:8b:9f:ba:80:a6:8c:5e:9a:fb:74:a7:b2:3c:7a:c8:
d4:54:5d:e4:f8:2d:7d:32:fe:1c:e0:36:3b:9b:e6:85:75:b1:
80:98:0c:8c:ab:45:b0:ef:a5:94:7c:4f:f8:33:0e:df:16:e4:
73:b9:f4:0d:64:3f:da:f6:0e:ee:e9:a5:ad:0e:98:11:9a:0f:
d3:8c:50:63:2a:b5:00:f8:77:fd:bb:a7:0d:03:e4:8c:b0:d8:
2d:50:ce:61:28:e2:5d:17:40:6a:ce:3d:64:21:af:ce:5c:89:
f1:3a:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:58 2026 by rpki-client