
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json)
Hash identifier: Tcl+vTK7asvKRBg2gOAcLaYkhcoYjO2SF2MxOl31jN4=
Subject key identifier: 4F:11:90:2C:50:85:6F:2A:78:06:76:09:BA:D7:58:60:2F:BF:EB:FF
Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
Manifest number: 0171
Signing time: Tue 28 Jul 2026 21:58:38 +0000
Manifest this update: Tue 28 Jul 2026 21:58:37 +0000
Manifest next update: Tue 04 Aug 2026 21:58:37 +0000
Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: LDwGxLNxvWDI2mwfmxpi+29ADfdeWoBq2kiH+Idr4Z4=)
2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: 4De+ftW6AlydF3aj182yhRL0S4HDbta7pD0izCS8LQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Validity
Not Before: Jul 28 21:58:37 2026 GMT
Not After : Aug 4 21:58:37 2026 GMT
Subject: CN=6a69260e-1e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:e8:8d:65:56:43:ca:93:cc:e7:76:fc:bd:
c3:52:93:17:40:6f:d1:f9:68:3c:53:06:ee:3c:f8:
38:83:dd:99:c1:b8:39:f9:35:00:89:24:87:00:4a:
4a:8e:0b:bb:b9:9f:e9:8b:be:69:31:f6:7c:05:c5:
8e:d1:28:89:e2:d1:44:2b:e9:a2:1e:3c:00:a9:3c:
52:ff:bb:0b:53:e2:0e:f2:16:e4:fd:fb:88:d4:2a:
d7:8f:b8:18:95:8d:0d:a3:81:3c:37:f7:5e:a5:6e:
ef:0a:7c:ed:fd:65:18:9d:9d:15:29:6b:02:d0:63:
6a:61:64:d5:4f:1d:81:68:8e:6d:b0:fe:85:b6:53:
75:a7:47:7a:cf:a1:19:31:33:07:26:81:17:56:4d:
42:c0:73:42:cb:98:09:f1:30:23:b7:55:94:f5:50:
f0:98:e6:40:f8:9a:3e:39:ac:e0:b2:65:38:ed:3a:
8c:d6:16:8d:b4:dd:ee:4c:b8:64:73:27:a6:09:2b:
75:5d:24:d4:69:db:bf:25:be:88:e6:3b:5a:80:c9:
d3:c1:f4:f3:6f:eb:31:5f:d4:ad:c5:11:83:a0:ff:
94:2b:82:8d:6a:9b:eb:07:25:41:c0:bf:7d:c4:eb:
04:a5:18:c9:d1:51:d5:ca:33:36:5b:06:3c:48:b8:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:11:90:2C:50:85:6F:2A:78:06:76:09:BA:D7:58:60:2F:BF:EB:FF
X509v3 Authority Key Identifier:
keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:87:28:f0:8c:0f:18:84:b6:54:39:14:e6:c7:d6:60:00:6e:
52:e1:38:4c:c0:ae:ea:71:fa:68:69:ae:cf:23:c0:31:2a:39:
73:a3:f3:a9:50:40:d5:2e:42:e4:03:6c:7a:f1:6d:5c:bf:d2:
99:b6:d4:2a:76:e8:b4:82:64:55:e0:67:49:5a:5e:d5:94:f8:
6c:4c:40:db:e8:e0:2b:c5:53:4b:7a:45:dc:39:77:e5:76:d7:
f9:9e:7c:7c:a1:70:08:66:0d:b9:59:fc:9f:c6:1a:d1:ab:30:
c7:b6:55:50:4b:30:3f:25:89:0f:b8:f0:68:f0:e9:ef:9b:ba:
15:44:8a:31:d7:e5:e1:34:a4:cd:23:48:e1:07:36:41:3e:3e:
63:32:62:29:64:00:12:3a:28:02:4f:27:48:f4:b3:7b:96:78:
e6:f7:a2:de:65:ac:d1:33:a1:cf:98:ce:5d:72:03:f1:3d:05:
76:e1:70:91:ff:00:b2:97:06:bc:05:1d:2b:26:3a:86:d3:e3:
9e:c1:59:8a:32:8c:d4:70:84:d9:4b:40:33:9a:99:28:09:7d:
c0:ff:ad:1a:7b:08:31:b7:09:94:e4:d8:70:29:5b:0a:f0:26:
10:01:e9:aa:4b:81:a0:14:90:63:81:ad:f1:3f:eb:2f:0e:ec:
9a:ef:48:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB
ODVDQUFEN0UwHhcNMjYwNzI4MjE1ODM3WhcNMjYwODA0MjE1ODM3WjAYMRYwFAYD
VQQDEw02YTY5MjYwZS0xZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkBjojWVWQ8qTzOd2/L3DUpMXQG/R+Wg8UwbuPPg4g92Zwbg5+TUAiSSHAEpK
jgu7uZ/pi75pMfZ8BcWO0SiJ4tFEK+miHjwAqTxS/7sLU+IO8hbk/fuI1CrXj7gY
lY0No4E8N/depW7vCnzt/WUYnZ0VKWsC0GNqYWTVTx2BaI5tsP6FtlN1p0d6z6EZ
MTMHJoEXVk1CwHNCy5gJ8TAjt1WU9VDwmOZA+Jo+OazgsmU47TqM1haNtN3uTLhk
cyemCSt1XSTUadu/Jb6I5jtagMnTwfTzb+sxX9StxRGDoP+UK4KNapvrByVBwL99
xOsEpRjJ0VHVyjM2WwY8SLjjlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8RkCxQ
hW8qeAZ2CbrXWGAvv+v/MB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF
Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0
czk4NkhFMlhEeXFvWEtyWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAToco8IwPGIS2VDkU5sfWYABuUuE4TMCu6nH6aGmuzyPAMSo5c6PzqVBA1S5C
5ANsevFtXL/SmbbUKnbotIJkVeBnSVpe1ZT4bExA2+jgK8VTS3pF3Dl35XbX+Z58
fKFwCGYNuVn8n8Ya0aswx7ZVUEswPyWJD7jwaPDp75u6FUSKMdfl4TSkzSNI4Qc2
QT4+YzJiKWQAEjooAk8nSPSze5Z45vei3mWs0TOhz5jOXXID8T0FduFwkf8AspcG
vAUdKyY6htPjnsFZijKM1HCE2UtAM5qZKAl9wP+tGnsIMbcJlOTYcClbCvAmEAHp
qkuBoBSQY4Gt8T/rLw7smu9IVg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:21 2026 by rpki-client