
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json)
Hash identifier: VvMApSzsSMLM3SnOH6nLYlgIVRQgxi4UMo1oJoaYGFY=
Subject key identifier: 07:29:DE:53:02:FE:7E:D6:FE:43:22:27:CE:6A:B5:7D:18:B3:C4:C9
Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
Manifest number: 0180
Signing time: Mon 21 Sep 2026 04:59:42 +0000
Manifest this update: Mon 21 Sep 2026 04:59:41 +0000
Manifest next update: Mon 28 Sep 2026 04:59:41 +0000
Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: 0t6IB+ulNgwSnL+wpWDmA8vxpGWeM+EkYZPYF2jjmXA=)
2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: 7qNyR1XtX/IJK6zuiRl0X5DJ2rVIeGFSUiO8ugtPsRU=)
3: 7AF7C814840211F1973E26E995A30FBC.roa (hash: is6JOCj8UH69lDcFhNaVF+Wuwi+xpA8ahsitf2M2Xz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Validity
Not Before: Sep 21 04:59:41 2026 GMT
Not After : Sep 28 04:59:41 2026 GMT
Subject: CN=6ab0b9be-2d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:c9:f8:03:15:3b:a5:fb:91:17:74:75:7d:
01:ea:50:31:67:8f:50:59:7d:18:12:ac:a0:70:df:
3d:21:b6:e1:38:fe:19:d2:35:df:1f:2f:4a:c2:1d:
24:db:20:a3:25:81:71:74:ad:6a:16:9e:c7:ee:86:
65:0e:f1:64:2c:c6:dc:91:19:e4:c6:ef:0b:d3:5f:
94:3a:2d:b2:cb:c5:10:4f:91:67:a5:1c:29:78:c1:
42:e1:cf:15:ae:10:b6:e3:0f:16:7d:e5:cd:9f:c5:
5d:87:c6:73:ff:a1:d6:5b:66:3c:1b:c7:55:a9:7d:
99:1e:8c:31:11:c3:5d:96:b4:e8:5e:06:80:df:e0:
40:38:4e:bd:c0:4f:e1:21:3d:4c:0d:8d:14:1c:34:
5d:02:3f:88:2f:26:8d:e1:a1:a9:4f:30:cf:c9:c1:
c3:bb:96:60:d8:20:c8:77:87:11:a1:f2:1e:0e:0f:
cf:ad:3e:7a:ae:4a:b9:4b:e3:2a:3a:d4:f1:a9:41:
fa:d1:d5:1c:54:96:88:71:1e:d2:a5:b0:e0:91:47:
bb:7a:22:df:a4:7a:41:a8:4e:50:ba:7a:a0:04:df:
35:7f:6f:88:13:38:cc:75:6e:fe:b0:09:84:0d:d0:
b3:28:48:87:63:50:65:36:00:22:e5:ce:94:1b:e0:
d7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:29:DE:53:02:FE:7E:D6:FE:43:22:27:CE:6A:B5:7D:18:B3:C4:C9
X509v3 Authority Key Identifier:
keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4f:ae:6e:d7:35:b7:22:9a:0a:46:f4:cf:74:6f:ca:2a:96:
bb:43:fa:a6:d4:b8:ec:dd:fa:ea:01:8a:a4:78:f5:19:8d:e0:
ca:4a:ed:d8:0f:08:0d:d6:49:b0:4f:6a:51:33:ed:1d:35:38:
60:70:80:7d:ef:08:31:fc:f9:ba:ff:b1:cc:c8:99:1d:2e:61:
fa:8a:5e:8b:22:17:f3:51:d1:01:d3:1a:fc:76:a6:79:3b:5c:
b3:49:e5:56:bb:29:67:0e:05:ee:6e:08:e0:5e:3f:bf:3c:8d:
78:92:47:2f:16:81:21:bf:54:9c:fe:82:cc:85:4d:3b:df:b8:
32:01:87:3b:e3:38:e7:81:17:fc:68:6f:d7:a9:7b:af:22:f0:
61:fe:db:68:56:d4:a6:a0:1f:16:26:0d:ec:ac:82:61:cc:3f:
06:53:d1:53:f6:2a:0e:35:fd:74:67:e7:b8:1d:c1:d3:d4:43:
9d:6d:0a:35:8f:81:5d:93:f9:be:1a:45:7b:75:e1:62:37:61:
7f:89:6f:a0:3b:0f:5d:3a:16:e2:4f:e5:7d:6a:a2:f5:af:cc:
9c:2b:59:e2:e3:99:7e:a4:e8:83:cf:3a:50:ec:25:bc:0a:9d:
ac:b7:8a:92:be:b3:ff:34:31:00:a8:22:f9:2f:0b:ce:a1:a8:
fd:a6:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:58:26 2026 by rpki-client