
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json)
Hash identifier: qkQyNp3KMmrSVQndV5fOFliHcP/KnAn37Vv6w3jVeLc=
Subject key identifier: 95:DE:DC:C0:0B:05:8A:4D:59:1A:70:DB:60:53:C9:3A:B2:79:42:AA
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
Manifest number: E1
Signing time: Mon 27 Jul 2026 08:42:24 +0000
Manifest this update: Mon 27 Jul 2026 08:42:24 +0000
Manifest next update: Mon 03 Aug 2026 08:42:24 +0000
Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: zdr0MosrJrGV8tc8mvkDLSZZv643Gsu60a0HsibRj3k=)
2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: W37mY/OKuZXNI6l/SJOrt83pL0/6piDhzRMqwGbzwkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Validity
Not Before: Jul 27 08:42:24 2026 GMT
Not After : Aug 3 08:42:24 2026 GMT
Subject: CN=6a6719f0-f501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:3d:4d:0a:08:ea:c9:fb:47:a8:2c:7c:55:
8d:06:46:ce:4e:5a:bb:9e:9c:de:dc:00:3d:01:5a:
e0:d7:fc:43:37:4d:96:53:01:3d:0d:ce:33:3a:fa:
5f:e4:a6:c7:7b:e9:2a:eb:22:66:d4:e5:28:16:01:
70:cd:23:1d:db:7c:e8:9e:87:e3:88:60:af:64:19:
4a:bf:25:59:3c:7d:85:88:b9:3d:ab:9f:38:79:5b:
bf:d5:a5:2b:bd:4f:83:30:70:7d:93:2b:f5:97:d7:
26:07:f3:8c:a0:c5:46:7b:d4:49:00:35:a4:c7:10:
0e:6c:a3:22:ed:92:2f:7e:38:50:9c:d3:5a:0d:22:
cd:dd:f3:c4:e2:05:af:7d:84:f9:f5:7c:36:65:b6:
cf:fa:44:78:aa:05:68:20:2d:98:5d:8f:e8:2a:0a:
66:b5:e4:aa:49:5e:92:55:02:f6:0a:94:f2:2b:4c:
0f:34:9f:b5:3d:26:3c:04:fb:6a:ad:a7:02:fd:dc:
da:d7:f1:73:e5:c2:11:53:91:33:92:b6:e5:f6:c7:
7e:81:8b:2c:c3:1c:19:c6:5e:8b:d6:16:e5:56:de:
9d:c7:26:b4:bd:28:5f:78:89:82:b7:24:4e:5d:c4:
1c:07:9f:5b:ea:94:67:d7:29:29:c5:2d:0c:85:38:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:DC:C0:0B:05:8A:4D:59:1A:70:DB:60:53:C9:3A:B2:79:42:AA
X509v3 Authority Key Identifier:
keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:77:39:cc:32:e1:4f:74:ad:09:5a:30:c2:25:57:7f:35:14:
a7:9b:1d:1b:bb:27:21:3c:f8:2b:7e:b0:80:29:76:b9:9f:81:
03:28:ed:2c:48:66:37:f3:5e:62:44:8c:f4:b0:e2:72:a1:ee:
5c:4a:e1:16:f8:d1:c8:08:a3:66:e7:45:c4:d2:fd:12:e3:95:
35:57:84:df:68:24:86:71:e1:b7:09:ad:44:b2:f9:23:c1:f1:
ef:a0:d9:d3:50:f3:62:96:4d:84:09:91:61:31:a5:61:bc:35:
07:7b:db:9b:f1:86:b1:77:39:59:64:e8:5e:7c:cc:da:ee:26:
97:e7:d2:f8:dc:d0:74:01:85:02:c5:de:2e:c2:5c:9c:91:21:
2d:26:6d:d5:a7:bf:eb:d6:01:8f:7e:fa:ab:d1:d6:23:e9:b4:
32:20:04:74:26:9c:58:a9:bb:62:54:b8:dd:ad:83:5b:97:56:
d6:83:02:a3:75:8d:51:40:e4:44:f0:4d:ef:22:22:96:27:23:
94:13:be:c5:01:0d:ae:94:f8:b2:e8:2e:3a:5e:0d:a3:ba:11:
9e:e3:2b:17:47:4e:dd:6e:a2:2c:7e:22:51:a9:3a:8e:70:32:
fc:25:08:28:a6:79:c4:80:80:23:51:28:83:bf:d9:42:b6:a0:
a2:d7:ce:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBFOTAxMTAvBgNVBAUTKENGMUUwRTVCRDc3QjFGRkI1MzU2NzgxRjYxNjMxNThD
MkUyRjdCNkQwHhcNMjYwNzI3MDg0MjI0WhcNMjYwODAzMDg0MjI0WjAYMRYwFAYD
VQQDEw02YTY3MTlmMC1mNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2w9TQoI6sn7R6gsfFWNBkbOTlq7npze3AA9AVrg1/xDN02WUwE9Dc4zOvpf
5KbHe+kq6yJm1OUoFgFwzSMd23zonofjiGCvZBlKvyVZPH2FiLk9q584eVu/1aUr
vU+DMHB9kyv1l9cmB/OMoMVGe9RJADWkxxAObKMi7ZIvfjhQnNNaDSLN3fPE4gWv
fYT59Xw2ZbbP+kR4qgVoIC2YXY/oKgpmteSqSV6SVQL2CpTyK0wPNJ+1PSY8BPtq
racC/dza1/Fz5cIRU5Ezkrbl9sd+gYsswxwZxl6L1hblVt6dxya0vShfeImCtyRO
XcQcB59b6pRn1ykpxS0MhTgbawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXe3MAL
BYpNWRpw22BTyTqyeUKqMB8GA1UdIwQYMBaAFM8eDlvXex/7U1Z4H2FjFYwuL3tt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEU5MC9CQjZGQjY4ODM5
NjUxMUYwQTZBODFCNDNDNEY5QUUwMi96eDRPVzlkN0hfdFRWbmdmWVdNVmpDNHZl
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p4NE9XOWQ3SF90VFZuZ2ZZV01WakM0dmUyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MEU5MC9CQjZGQjY4ODM5NjUxMUYwQTZBODFCNDNDNEY5QUUwMi96eDRPVzlkN0hf
dFRWbmdmWVdNVmpDNHZlMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARHc5zDLhT3StCVowwiVXfzUUp5sdG7snITz4K36wgCl2uZ+BAyjtLEhmN/Ne
YkSM9LDicqHuXErhFvjRyAijZudFxNL9EuOVNVeE32gkhnHhtwmtRLL5I8Hx76DZ
01DzYpZNhAmRYTGlYbw1B3vbm/GGsXc5WWToXnzM2u4ml+fS+NzQdAGFAsXeLsJc
nJEhLSZt1ae/69YBj376q9HWI+m0MiAEdCacWKm7YlS43a2DW5dW1oMCo3WNUUDk
RPBN7yIilicjlBO+xQENrpT4suguOl4No7oRnuMrF0dO3W6iLH4iUak6jnAy/CUI
KKZ5xICAI1Eog7/ZQragotfOFw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:40 2026 by rpki-client