
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier: OJYX8Ple9xkcBDT8NEF0PZlpsACpyss+mJFwkuFhmeg=
Subject key identifier: BA:A4:11:38:F9:07:4F:E0:D0:9A:C3:56:10:D3:1E:0A:CA:EC:3A:E1
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1DF6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number: 3FC4
Signing time: Sun 26 Jul 2026 14:30:13 +0000
Manifest this update: Sun 26 Jul 2026 14:30:12 +0000
Manifest next update: Sun 02 Aug 2026 14:30:12 +0000
Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: V6FWkTDndlFqBhb+yZpD6mnjukRQAavd9aai/YgRgV4=)
2: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
3: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
4: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
5: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
6: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
7: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 9d7+U0GsZDY6ZehuYxySqXSfRY3e2dmU9OZ6IPMqzmU=)
8: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
9: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
10: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
11: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
12: 9894B43E80DA11F1AF01F71A5DA30FBC.roa (hash: 746pRPtMH1SGiVoQbklMO4Qp6QGnZ4g3CyOw0Szk53A=)
13: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: jKKRIP8Mze98sL1n15uOF95N4d5VeEeQhVHQTOvGEoE=)
14: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
15: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
16: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 14:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7670 (0x1df6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Jul 26 14:30:12 2026 GMT
Not After : Aug 2 14:30:12 2026 GMT
Subject: CN=6a6619f4-4f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:a9:db:bc:b0:30:c4:7c:4b:4c:bc:f4:3e:
eb:72:46:88:4e:c1:fc:7c:a4:b4:5a:b2:d2:c6:09:
ac:bb:d7:44:e5:a8:89:ca:bd:32:d4:b3:cd:7b:e4:
f6:5b:28:40:96:ee:3a:d4:51:c9:80:19:8d:ba:f5:
92:7b:d9:2b:6f:bd:64:50:85:f4:c8:f5:d1:9e:d3:
28:0c:82:2f:36:a5:77:67:44:bf:92:8f:ea:f0:7d:
e2:9e:03:d6:e5:9f:ee:fd:d1:98:e7:f2:f7:75:7d:
77:a8:c9:02:18:8b:c4:fa:7c:4e:87:ad:dc:71:e2:
1d:be:3e:16:64:30:32:2b:32:b2:b6:b5:4c:81:65:
f1:b4:6a:18:ec:b5:bb:5e:67:d8:b2:41:2d:ee:5a:
cc:7f:13:58:93:49:8c:af:96:9a:45:4a:30:2e:b8:
a3:14:0f:d8:07:ca:75:53:65:05:33:1c:75:08:4f:
25:4b:5c:af:51:ae:bc:c8:51:91:a5:17:61:d1:2a:
a6:75:81:9c:cb:e6:23:01:73:c9:19:11:c4:f2:f5:
76:7a:c5:06:a7:8e:d7:91:b6:81:48:f2:63:7f:c6:
b7:4d:c7:0e:da:ef:d1:4a:69:f0:4a:58:a3:1f:e6:
ef:c5:78:92:16:1a:92:24:80:b0:b5:c9:0c:c1:ad:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A4:11:38:F9:07:4F:E0:D0:9A:C3:56:10:D3:1E:0A:CA:EC:3A:E1
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:15:02:07:21:43:f0:a4:05:a9:57:b9:e6:18:b8:d2:e9:a9:
19:36:aa:2c:36:cc:c7:a1:27:af:52:4d:61:44:eb:aa:66:6a:
a8:a9:44:ec:61:45:55:ff:e1:d1:7c:bd:01:57:45:ec:01:de:
b9:a9:ef:63:5a:34:36:1b:31:8c:d5:c9:05:13:c9:74:1a:8e:
85:ba:56:a3:0d:79:f3:ad:b9:3e:b4:cc:93:23:5f:91:a6:01:
17:85:da:16:53:aa:85:a6:47:f1:b9:d7:0b:71:94:01:4c:40:
bf:8a:45:0f:a0:a3:f4:bb:00:bd:7b:13:b9:18:7e:9a:b7:f7:
4a:3e:35:56:b6:c4:27:e1:73:99:e7:29:e3:3b:37:9e:91:2c:
f0:e8:85:06:2f:50:1d:b5:31:3c:7c:eb:6a:a6:fc:2c:3e:c4:
f7:8f:c2:8f:69:02:61:c6:ac:da:16:23:cb:fb:fb:60:19:32:
d2:44:7d:08:91:f7:e3:b1:05:35:b8:83:12:15:c9:f6:b3:d2:
53:c6:49:e2:dc:3f:0f:de:ef:39:fb:a6:e3:0e:95:a4:fd:d7:
6d:00:72:e9:9a:5c:27:81:f1:04:17:74:05:1b:5f:7f:e4:cc:
4b:36:fe:66:e1:b4:12:fa:6e:22:54:6c:bb:c8:b1:79:a3:67:
df:78:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:34:32 2026 by rpki-client