
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json)
Hash identifier: yElHLCZbVM26pRkuHzz07oOTLqYcJH+02GAgRmhpKB8=
Subject key identifier: B6:3C:6D:70:E7:A1:41:2D:2B:54:EA:1E:69:2A:67:B3:C2:BA:35:0A
Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
Manifest number: 0165
Signing time: Mon 01 Jun 2026 05:43:22 +0000
Manifest this update: Mon 01 Jun 2026 05:43:22 +0000
Manifest next update: Mon 08 Jun 2026 05:43:22 +0000
Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: DD65+LiKVfqdvQ7C6J2gZ+fToxjBy3SpcA61GO/Rcdk=)
2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Validity
Not Before: Jun 1 05:43:22 2026 GMT
Not After : Jun 8 05:43:22 2026 GMT
Subject: CN=6a1d1bfa-bcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:f2:cb:85:4f:f3:30:0b:65:45:58:96:26:
56:d1:d0:ae:eb:4c:fe:a8:91:f4:91:58:14:49:83:
07:a3:16:01:00:79:8e:73:db:eb:b7:21:92:0e:af:
e9:f5:d2:0d:04:e8:96:f4:b8:6d:a4:4c:49:14:f2:
2b:5d:76:30:76:fb:6a:30:bc:90:6a:d0:84:f0:b5:
b5:90:d9:f7:da:57:ed:21:3e:1f:68:5a:8f:66:12:
98:10:de:e9:a2:df:12:fb:24:2c:cc:0e:b8:5d:65:
93:de:7c:bf:27:a9:a6:61:bf:dd:d8:11:8c:2e:83:
a1:b8:ad:26:47:ab:52:d0:b5:38:d5:6b:aa:a0:9b:
96:d6:0b:32:8c:34:89:6c:04:55:bc:ba:4e:8c:c7:
9d:2f:c8:df:68:9b:df:da:75:0d:d6:c1:48:6d:81:
59:20:20:8f:61:0b:7a:bb:82:8d:f1:17:f6:58:d3:
56:ba:c1:90:bc:bc:7f:e4:89:35:5c:f2:a2:a7:3b:
c3:bd:16:43:19:bc:70:07:8d:36:19:a5:d8:bd:69:
ca:dd:4c:63:bf:f9:93:10:cb:de:d6:ea:c9:9e:c1:
e6:00:15:0c:c4:c2:77:8e:e0:57:5e:db:76:b7:93:
04:68:c4:89:3c:7a:b4:c4:b8:2c:55:d1:0a:2a:dd:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:6D:70:E7:A1:41:2D:2B:54:EA:1E:69:2A:67:B3:C2:BA:35:0A
X509v3 Authority Key Identifier:
keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:48:55:3f:12:a8:23:9c:ac:b0:09:63:00:da:a0:f3:4d:cc:
be:b9:a4:e9:d7:6f:0f:d4:ff:fe:83:fd:12:c4:ac:bc:cb:19:
66:cd:4a:8f:35:10:13:03:13:ec:f7:da:84:2b:69:d5:14:37:
43:a2:8f:ef:e8:69:e7:ba:d3:d3:1d:a8:e1:2b:45:c5:47:1d:
28:28:31:08:04:0b:ad:3d:2f:d0:78:ff:22:8d:6e:4b:19:33:
1f:19:19:12:6c:67:b9:2f:9e:93:b9:f1:8e:23:24:46:78:30:
db:9b:c7:c0:76:21:81:90:c8:4a:5b:c3:d5:ec:1b:08:50:8a:
56:12:84:12:bc:0d:d5:f4:37:e4:26:6f:d8:1a:37:a2:b5:d5:
63:a7:09:91:24:30:d8:cb:50:f7:eb:04:c0:c8:40:eb:ad:9b:
c4:3f:a2:67:ca:60:78:45:43:1c:22:0d:de:0b:e0:73:19:52:
4e:77:13:70:a3:f3:a8:1b:f8:dc:5b:ae:87:bf:7a:9f:42:da:
87:3c:c1:15:7e:e7:21:6f:af:22:a4:08:1e:82:2b:83:d9:85:
52:3b:21:6c:e9:dd:00:8f:40:63:92:96:da:a8:c9:ab:48:de:
5f:f5:cd:d7:be:c8:8a:cf:d2:b1:aa:2d:0f:5c:46:57:de:9f:
f9:a4:a4:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw
NzZEQzMyODgwHhcNMjYwNjAxMDU0MzIyWhcNMjYwNjA4MDU0MzIyWjAYMRYwFAYD
VQQDEw02YTFkMWJmYS1iY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6kryy4VP8zALZUVYliZW0dCu60z+qJH0kVgUSYMHoxYBAHmOc9vrtyGSDq/p
9dINBOiW9LhtpExJFPIrXXYwdvtqMLyQatCE8LW1kNn32lftIT4faFqPZhKYEN7p
ot8S+yQszA64XWWT3ny/J6mmYb/d2BGMLoOhuK0mR6tS0LU41WuqoJuW1gsyjDSJ
bARVvLpOjMedL8jfaJvf2nUN1sFIbYFZICCPYQt6u4KN8Rf2WNNWusGQvLx/5Ik1
XPKipzvDvRZDGbxwB402GaXYvWnK3Uxjv/mTEMve1urJnsHmABUMxMJ3juBXXtt2
t5MEaMSJPHq0xLgsVdEKKt3kHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLY8bXDn
oUEtK1TqHmkqZ7PCujUKMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1
QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN
b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw
UWZVTnpMZzg3bklIYmNNb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG0hVPxKoI5yssAljANqg803Mvrmk6ddvD9T//oP9EsSsvMsZZs1KjzUQEwMT
7PfahCtp1RQ3Q6KP7+hp57rT0x2o4StFxUcdKCgxCAQLrT0v0Hj/Io1uSxkzHxkZ
EmxnuS+ek7nxjiMkRngw25vHwHYhgZDISlvD1ewbCFCKVhKEErwN1fQ35CZv2Bo3
orXVY6cJkSQw2MtQ9+sEwMhA662bxD+iZ8pgeEVDHCIN3gvgcxlSTncTcKPzqBv4
3Fuuh796n0LahzzBFX7nIW+vIqQIHoIrg9mFUjshbOndAI9AY5KW2qjJq0jeX/XN
177Iis/SsaotD1xGV96f+aSkYg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:23 2026 by rpki-client