
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier: 8nrVrAnWZOWoqnPFuN7y1uHfy93igwNqRtbhRd3b2HE=
Subject key identifier: 1C:38:62:2D:E7:86:5C:5A:3E:A7:21:65:FE:A5:E8:A2:D5:42:77:2F
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1E0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number: 3FDC
Signing time: Thu 10 Sep 2026 14:29:03 +0000
Manifest this update: Thu 10 Sep 2026 14:29:02 +0000
Manifest next update: Thu 17 Sep 2026 14:29:02 +0000
Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: aR+Ew5bFniigxS3pqPmqYuUhX2NAG8UxuIqIIZHP2TI=)
2: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
3: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
4: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 9d7+U0GsZDY6ZehuYxySqXSfRY3e2dmU9OZ6IPMqzmU=)
5: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
6: 9894B43E80DA11F1AF01F71A5DA30FBC.roa (hash: 746pRPtMH1SGiVoQbklMO4Qp6QGnZ4g3CyOw0Szk53A=)
7: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
8: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
9: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
10: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
11: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
12: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: jKKRIP8Mze98sL1n15uOF95N4d5VeEeQhVHQTOvGEoE=)
13: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
14: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
15: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
16: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7694 (0x1e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Sep 10 14:29:02 2026 GMT
Not After : Sep 17 14:29:02 2026 GMT
Subject: CN=6aa2beaf-e557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:34:20:9d:fc:e0:02:39:cd:9b:db:4e:86:
73:8a:b9:7e:95:cf:29:4e:d7:2b:d8:3b:7d:b3:18:
15:78:a8:f9:b4:d4:d2:10:a3:fd:80:02:57:f4:c6:
c6:88:f9:ff:65:6b:43:38:15:d7:4e:bd:4f:9c:77:
e8:0d:c0:13:26:8d:7d:67:4f:28:0b:2c:b1:42:fb:
db:5c:9b:25:95:6d:ce:b1:82:a4:0c:c8:6b:31:ed:
b9:5c:c1:15:bd:98:d3:d5:ff:aa:6a:a4:e2:87:c6:
7b:85:cd:e1:50:1e:3d:f9:e5:35:61:67:b0:3d:d3:
70:e9:bc:8f:54:f2:92:7f:4b:2e:4e:84:08:6b:44:
84:a0:be:a4:f4:64:8c:82:96:8f:52:b4:e5:dc:49:
fa:b4:75:93:7c:0c:98:01:3f:f3:3a:62:f0:93:45:
7b:54:ae:51:d0:47:b3:0a:cf:e4:12:c5:78:49:56:
67:b6:16:6b:d5:f3:e3:4c:7d:9d:aa:50:a8:3d:10:
9e:30:72:9e:87:bc:4b:04:ee:35:2e:31:32:e9:c6:
28:bc:3a:d1:5f:97:29:90:ee:eb:24:68:2c:c4:c2:
c2:a6:dc:50:60:22:60:5a:99:88:20:cf:f3:6a:d1:
50:e1:ff:2d:78:b4:19:c7:79:a1:8a:9b:3c:a0:c6:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:38:62:2D:E7:86:5C:5A:3E:A7:21:65:FE:A5:E8:A2:D5:42:77:2F
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:08:16:8f:27:73:1b:63:1f:cc:35:31:b6:a5:4f:42:8f:a2:
25:10:78:80:3a:1e:1c:de:a8:ba:b5:e4:cb:2d:31:0b:6e:22:
cd:df:53:65:61:18:17:9b:94:da:fc:29:d6:da:7f:e9:e3:6a:
c8:8e:cd:38:00:93:f5:a2:56:1d:e4:e9:a5:38:c8:d9:cf:7b:
d3:ef:ac:02:1f:95:08:71:9a:c9:e6:b1:81:dd:69:01:89:d2:
ba:c6:92:4b:be:16:7c:c8:5b:49:72:ed:ad:99:5d:3e:67:df:
77:77:4e:ee:5e:03:13:25:2d:59:89:f2:cc:85:34:5d:f4:f5:
7c:7a:92:ac:68:a8:b3:f6:83:a3:3c:68:d4:8c:f9:67:b7:4f:
cc:75:6e:eb:a9:77:7e:55:99:8f:32:6d:a3:64:78:32:ea:88:
ae:9f:19:88:02:90:46:8f:b1:b5:2c:ed:90:d4:4c:79:4b:17:
52:6f:eb:8d:99:65:e6:97:7a:d0:a9:5d:ab:f9:8b:b1:8d:dc:
07:bb:fa:46:6a:1f:86:50:f7:3c:d9:f0:07:61:d9:8a:6f:3a:
76:61:dd:b3:50:30:05:a7:68:6f:65:9a:62:f8:cf:02:0d:4c:
14:67:b1:07:f9:f5:ad:e5:16:ff:d6:b7:cc:17:51:83:eb:11:
27:b1:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:43 2026 by rpki-client