
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier: R0HD8LboWRdF7hlrcenjv8/PvzvWamTpXPlBdClsPV8=
Subject key identifier: C6:F7:7C:D4:B2:7A:B6:D2:A1:DF:16:94:D1:47:F7:E9:00:7E:DC:E8
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1DD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number: 3FA7
Signing time: Wed 10 Jun 2026 14:29:11 +0000
Manifest this update: Wed 10 Jun 2026 14:29:10 +0000
Manifest next update: Wed 17 Jun 2026 14:29:10 +0000
Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: /CU6GiHHhXc02xboMXeGtrQZTdnkl9cOgOfN5vqCi3M=)
2: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
3: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
4: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: jKKRIP8Mze98sL1n15uOF95N4d5VeEeQhVHQTOvGEoE=)
5: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
6: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
7: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
8: 727C68508AB411EA89D83541C4F9AE02.roa (hash: j1y9l++Cb4rS0kTDJ/au9IYHGMfWT1dKRtZ4fnBWD30=)
9: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
10: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 6XI/IfvAsAWYLp6AJKm4dtAGOtIg8Onx4flKi94I10Y=)
11: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
12: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
13: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
14: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
15: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
16: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 14:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7636 (0x1dd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Jun 10 14:29:10 2026 GMT
Not After : Jun 17 14:29:10 2026 GMT
Subject: CN=6a2974b6-39f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:1b:72:3b:dc:8c:bb:40:a2:73:41:04:b7:
d6:fb:0d:c8:7a:6b:b6:ba:c3:0a:61:2a:55:75:13:
58:9d:04:0e:b8:c0:2a:85:ee:d9:ff:ed:0d:d0:25:
16:a1:a2:b0:b2:8f:cf:19:28:8f:6d:a2:12:91:2e:
b2:3e:50:11:19:9b:50:32:6b:24:38:f0:fa:bc:a0:
35:90:61:f4:6f:be:82:c2:c2:86:b3:af:6d:fd:f1:
c3:3c:e2:bc:2e:1d:f9:da:85:35:df:4c:dc:53:eb:
9f:8d:ac:0c:14:8a:5e:a3:d4:6f:04:da:36:7d:45:
02:4b:74:e7:0a:83:7f:73:62:71:4a:0c:d4:ae:f5:
d9:48:3a:51:e9:ed:46:f5:a9:5a:6c:83:30:ef:4f:
3c:75:65:b1:b4:fb:82:3b:a7:d9:aa:80:0c:65:2d:
f7:29:3a:9a:f4:fd:b4:df:01:d5:67:5f:5a:f4:7d:
f1:7c:3e:ea:cf:21:52:be:62:39:82:88:04:ee:27:
ba:9c:50:db:ce:ab:65:08:ed:0a:99:4f:86:14:eb:
b3:46:a6:42:b4:8c:3c:a7:18:27:72:ec:62:72:4d:
3b:16:5a:73:2a:a6:71:7f:b3:ce:e2:93:2c:59:5d:
83:d6:20:4c:df:d2:03:d4:6b:12:99:18:a5:03:ef:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F7:7C:D4:B2:7A:B6:D2:A1:DF:16:94:D1:47:F7:E9:00:7E:DC:E8
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:b7:bc:5a:49:2b:e4:5f:3a:2d:f1:ce:df:03:e4:46:37:cb:
10:f2:6f:a8:85:1d:f0:78:32:15:fb:9b:7e:51:14:08:40:cf:
cf:f7:3f:63:f3:8a:84:f0:24:31:a9:46:e2:02:da:f3:ef:9f:
6e:b0:96:f5:83:bb:4c:90:77:1d:78:13:90:f1:ce:bb:31:6b:
ca:1b:9a:77:74:a4:ec:a9:9e:b1:8d:24:74:28:29:4b:d0:c2:
aa:ed:d8:e5:dc:84:31:7b:94:5d:54:80:cc:13:89:b9:2b:aa:
1e:59:62:5b:c5:22:ad:c2:61:5a:01:43:7a:62:62:d8:91:d9:
49:47:45:5f:bf:fa:d4:a4:71:3a:09:d6:8d:8f:6a:f9:ad:e9:
70:a4:e4:a1:ca:ff:d2:ad:52:63:c3:7b:67:c3:9a:74:31:d0:
78:bd:f6:d2:a4:cb:0e:87:4c:e8:e2:03:f3:fe:d0:64:55:1e:
00:c6:b2:a2:05:82:d4:95:be:61:aa:aa:1c:79:19:f2:b4:e9:
25:31:57:7e:47:f2:c4:7b:ee:b3:da:ef:45:f5:03:3e:fb:70:
85:6f:59:d5:ef:59:72:52:c1:f4:b5:cc:08:c9:b9:a1:f3:bb:
d2:93:7d:21:b6:26:22:79:a5:a8:86:66:39:e8:1b:ac:87:0b:
56:50:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:59:10 2026 by rpki-client