
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json)
Hash identifier: lsHKTQRUfUCpx0wOD5DAxz+rQYu27CK6Fr5pHRwQ0tw=
Subject key identifier: 25:32:C3:E0:06:4F:24:65:C9:1C:5B:43:BF:A9:67:9A:91:B3:A5:B9
Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
Manifest number: 01AB
Signing time: Mon 19 Oct 2026 04:46:53 +0000
Manifest this update: Mon 19 Oct 2026 04:46:52 +0000
Manifest next update: Mon 26 Oct 2026 04:46:52 +0000
Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: rT2xYPHP9RYfy4E4Lrsr2HaumNxrlYYUxwpRTrCwMa8=)
2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 04:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Validity
Not Before: Oct 19 04:46:52 2026 GMT
Not After : Oct 26 04:46:52 2026 GMT
Subject: CN=6ad5a0bd-8e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:5e:0c:52:ba:38:c0:83:df:f6:64:e8:25:
f9:4e:42:d8:a8:15:d0:c2:e6:58:e1:9f:18:c0:ec:
cc:41:cc:96:21:86:ac:b0:e8:a9:48:94:f7:3c:37:
82:32:dd:24:9b:5e:7a:2c:b1:cc:04:1c:be:11:36:
9e:d8:4e:f2:0d:2b:d0:49:ff:b5:f3:60:f9:64:3d:
1a:f0:af:43:bf:f0:71:38:13:f6:d3:65:f1:5e:ac:
c0:70:6c:dc:7b:60:3a:d8:10:cd:53:65:57:6b:2d:
a4:5f:32:23:8a:61:41:fc:11:c2:51:9c:75:63:68:
1d:96:dd:75:c2:2d:b7:c8:52:47:88:46:c7:46:9a:
60:22:9c:df:8e:61:33:f1:74:ec:76:6d:ae:ef:cb:
53:34:6b:88:2c:b8:64:40:f8:7f:43:48:41:5d:60:
d9:1c:26:35:e0:2d:17:f7:eb:eb:aa:5a:74:59:ac:
c4:04:a0:eb:cf:64:35:75:01:ce:70:aa:cc:cc:2e:
38:15:6c:e6:9a:53:61:de:5d:6d:c4:9a:d7:81:af:
02:4e:2d:91:b7:a9:a7:f7:7b:ef:b2:bc:38:3a:94:
85:7b:ce:8b:93:97:02:2b:76:1d:aa:2b:40:1b:dc:
71:03:c8:78:1d:c7:5d:bc:da:b6:80:e0:68:c8:09:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:32:C3:E0:06:4F:24:65:C9:1C:5B:43:BF:A9:67:9A:91:B3:A5:B9
X509v3 Authority Key Identifier:
keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:9f:1f:6d:00:b4:82:5e:d6:2a:bf:00:92:ba:76:88:2d:36:
6c:44:83:9e:e0:54:55:1d:52:0f:f3:05:6e:f5:fd:d4:89:cc:
49:7c:36:aa:5e:63:55:55:2c:c3:03:2b:6e:01:a4:f9:05:48:
9b:69:1e:c0:19:45:df:36:c6:5d:90:5d:d1:1f:11:ae:51:bc:
ac:d3:ad:07:79:bc:05:60:bf:6d:a5:48:f2:14:d7:3e:5a:6a:
df:d3:75:bf:7f:08:00:85:bb:f0:dd:6f:f4:91:5f:62:1d:96:
7a:18:e7:e1:e1:d8:cb:07:5d:95:81:bc:ef:28:4c:c2:1d:37:
e5:3a:c4:2e:34:3c:ad:2e:fd:94:34:74:ce:90:00:27:6f:7e:
d3:9b:f3:68:04:a5:e2:33:b5:3d:1a:86:37:42:49:e3:60:32:
dd:14:ad:c2:3b:f1:48:31:12:93:8a:48:55:a5:c8:c2:a0:77:
68:60:be:b4:8f:2d:76:95:68:a6:7d:e3:e9:6e:85:f8:60:0d:
39:0e:b6:0e:8a:60:d5:3a:b5:44:d6:ed:92:db:8f:d3:6c:97:
b8:fb:0c:e7:67:be:98:1d:e8:30:31:6a:33:81:39:86:b1:42:
b8:82:d1:c4:e1:58:e6:de:e3:bd:7a:5b:dc:fd:70:7d:6a:35:
91:dc:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:41:58 2026 by rpki-client