
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json)
Hash identifier: if5U4Y7Dcd7N3SLwT31ktZv4Cwv4NHbqK66THdQ5Wzw=
Subject key identifier: 86:ED:56:FA:EA:61:66:95:74:95:74:E4:0D:2F:30:E0:8E:16:BB:9D
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
Manifest number: 0109
Signing time: Tue 13 Oct 2026 06:47:55 +0000
Manifest this update: Tue 13 Oct 2026 06:47:55 +0000
Manifest next update: Tue 20 Oct 2026 06:47:55 +0000
Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: 9mkLLIpIg2n0JeQFZsUzqoNH0SQ5ir1ro6akjmqpX04=)
2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: W37mY/OKuZXNI6l/SJOrt83pL0/6piDhzRMqwGbzwkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 06:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Validity
Not Before: Oct 13 06:47:55 2026 GMT
Not After : Oct 20 06:47:55 2026 GMT
Subject: CN=6acdd41b-162a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:69:82:16:6e:e1:be:e1:81:90:1f:a4:80:
a0:30:4a:71:e1:24:0b:af:dd:54:91:ac:17:3a:d7:
05:3e:65:b0:b8:17:d5:4d:40:7b:77:91:38:4e:96:
f2:78:0b:2b:b9:85:fb:7e:0e:9d:6a:02:59:ed:9d:
3b:b3:50:f0:79:70:e1:15:6d:89:7b:58:ca:6c:d3:
5b:21:5c:ac:d0:2e:dd:50:b6:f4:c6:c4:cc:85:12:
29:85:1a:49:7c:64:3e:f6:af:09:a9:e5:f1:d9:c0:
24:31:36:34:ed:28:aa:f7:e1:96:6f:4b:49:98:9e:
80:ee:0a:64:48:a2:49:a7:e2:00:b4:5b:44:ae:22:
1d:5b:b4:73:93:46:03:2b:e0:2d:ef:fb:57:9b:43:
9a:60:b5:34:46:c2:6c:46:82:36:4d:d7:80:c8:23:
42:70:01:b6:f4:7c:a5:4d:5c:04:25:e6:2b:91:c9:
7d:c5:66:66:ef:be:8f:47:ef:ac:4e:59:20:63:66:
4f:6d:58:d0:27:72:44:3f:23:7e:74:ef:7c:16:d8:
c3:ef:78:59:25:ff:ff:75:5b:83:04:16:a0:7b:65:
d8:7c:5e:14:92:d0:41:8d:00:4a:d6:96:ba:ef:e4:
98:49:92:08:b0:2a:ad:47:52:05:47:7c:83:88:af:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:56:FA:EA:61:66:95:74:95:74:E4:0D:2F:30:E0:8E:16:BB:9D
X509v3 Authority Key Identifier:
keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:b9:b8:17:2b:9c:f1:6f:54:5e:08:10:a8:89:6f:d6:b2:51:
19:a6:90:d4:8b:2d:77:77:4c:e8:3b:2e:a7:c5:44:e9:bd:c7:
ca:5b:8c:2b:64:7b:00:65:63:b0:c7:63:f5:fc:50:14:d3:5c:
e9:af:42:8c:95:68:9a:28:0e:34:a7:36:77:34:9e:68:44:3f:
08:c8:db:1c:8d:18:87:b8:9d:fc:cc:10:a9:dc:87:d0:0d:58:
d7:a4:d5:4a:38:5c:53:38:54:a6:ea:b2:32:c2:a0:15:7f:a8:
9a:77:50:0b:80:ca:0f:ec:56:c1:bb:60:c1:6f:fb:97:cf:2a:
75:ca:be:51:43:f1:92:52:cd:d5:92:56:0b:ca:66:2e:45:62:
04:7f:f4:dc:79:bf:80:8e:05:88:36:c8:09:ee:9a:ba:02:77:
22:13:f0:2c:7a:f5:20:5e:71:34:b7:9b:48:94:89:69:67:0d:
7a:9d:78:17:8c:ff:7a:5a:d0:0f:55:aa:33:21:ee:ad:42:67:
32:d6:d3:d8:fc:4a:d8:0d:88:cc:61:a5:c9:4a:2b:06:77:d4:
e7:7e:97:e9:96:79:b8:64:5e:c6:e3:d1:14:5b:06:39:31:ce:
a7:0a:97:e5:e3:83:9f:49:a6:a6:01:c7:77:c9:64:1e:e1:82:
f3:93:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:29:14 2026 by rpki-client