
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json)
Hash identifier: nTIdHedw13rDUO19T6+Ekrz3aedCm/1EZ7mPrSkhVXI=
Subject key identifier: 4C:AC:EF:98:93:15:91:36:69:C9:39:9B:50:2C:22:C1:9E:9C:3A:64
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
Manifest number: BE
Signing time: Thu 21 May 2026 07:05:17 +0000
Manifest this update: Thu 21 May 2026 07:05:17 +0000
Manifest next update: Thu 28 May 2026 07:05:17 +0000
Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: 8RBKBNb9RK9oqnPy1oWbY0Xlitrux0Bo2xpR+7/LE00=)
2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: dqOqlSzXXzxd93ZJApAj30jOUASjxNUXJDLj8u2PMic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Validity
Not Before: May 21 07:05:17 2026 GMT
Not After : May 28 07:05:17 2026 GMT
Subject: CN=6a0eaead-18f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:9c:c3:6a:5f:13:aa:3c:30:e6:d8:f5:0d:
7e:f2:1c:2e:61:b7:0c:7c:0c:c0:62:27:04:b6:4e:
23:9d:de:ed:54:bc:f8:f0:00:41:ba:e8:12:0c:fc:
fc:0f:02:86:b8:77:41:96:22:3a:78:46:39:5c:5b:
16:76:a0:d3:e1:c5:d2:4f:b1:dd:6d:2a:61:bb:04:
31:3f:12:fa:be:70:91:85:0a:3b:90:f9:33:30:52:
ba:d3:a1:df:0c:a9:67:6c:dd:5c:f0:ad:96:b8:8c:
2a:a9:e2:9d:94:90:bd:a5:4f:97:98:9a:c9:5d:02:
6d:55:9a:ad:e7:0b:af:bf:c2:5b:2a:ce:29:ee:d9:
4c:bd:4d:eb:70:f2:3e:c6:ae:83:92:2d:2e:db:21:
a0:a2:94:3b:6d:9b:8e:82:87:c6:f5:d6:dd:0e:29:
ee:a8:b4:78:55:ce:b3:fa:3e:e9:a0:ae:7f:e6:ac:
63:d9:be:dc:e9:85:21:0b:6c:f8:ec:7e:e2:09:0c:
db:1f:bd:35:0f:5a:0e:d5:3c:bb:54:55:0b:3e:c0:
74:a9:62:0a:eb:c2:48:71:05:9d:21:a0:5b:0f:39:
69:d8:03:c5:a0:bd:2c:61:42:71:66:ba:5a:aa:6e:
94:77:24:35:a6:c1:7d:fb:e1:76:1f:9f:08:b0:6b:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AC:EF:98:93:15:91:36:69:C9:39:9B:50:2C:22:C1:9E:9C:3A:64
X509v3 Authority Key Identifier:
keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ea:c7:4b:87:d7:52:1f:9d:db:6f:c4:d6:9a:57:ab:e1:1b:
f2:95:02:59:26:b0:f1:49:09:ef:54:a8:e5:21:27:3f:73:6e:
f4:ae:39:86:1b:f9:dd:6b:54:46:d4:3c:65:c0:ef:9f:1d:25:
a9:20:49:36:dd:2f:c7:0e:f6:6d:12:1f:41:55:42:39:06:d6:
2f:bd:2d:20:08:e6:01:34:23:01:a2:3f:3f:f4:df:82:c1:97:
4e:69:94:b8:fd:e0:f6:93:dc:8b:64:0c:54:15:f4:da:4c:e4:
18:81:63:86:ca:97:21:ef:44:1e:e3:3f:5f:00:1c:b7:6a:a2:
69:51:e7:d6:bb:8f:bf:c6:b4:b1:cd:df:eb:db:1b:18:6d:eb:
3c:07:4a:da:00:f7:9e:4e:91:37:c0:ca:7f:48:9e:63:83:ad:
5f:f2:d0:08:35:d8:5b:0b:57:e5:92:03:b2:35:b8:d1:5d:47:
39:5f:ee:91:c0:71:2b:ca:e1:2f:f4:fe:19:e0:4a:e8:4d:77:
d9:1c:b5:fd:87:27:3c:b8:fa:6f:9b:c3:c1:b6:b9:b5:d5:a3:
cb:ad:40:9b:e6:87:50:93:16:87:c0:d9:d2:46:ac:b2:28:2e:
db:30:ec:a1:a0:0a:c5:40:f1:7d:d4:1d:f0:0b:43:1b:ab:7d:
ff:ce:11:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBFOTAxMTAvBgNVBAUTKENGMUUwRTVCRDc3QjFGRkI1MzU2NzgxRjYxNjMxNThD
MkUyRjdCNkQwHhcNMjYwNTIxMDcwNTE3WhcNMjYwNTI4MDcwNTE3WjAYMRYwFAYD
VQQDEw02YTBlYWVhZC0xOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx6Wcw2pfE6o8MObY9Q1+8hwuYbcMfAzAYicEtk4jnd7tVLz48ABBuugSDPz8
DwKGuHdBliI6eEY5XFsWdqDT4cXST7HdbSphuwQxPxL6vnCRhQo7kPkzMFK606Hf
DKlnbN1c8K2WuIwqqeKdlJC9pU+XmJrJXQJtVZqt5wuvv8JbKs4p7tlMvU3rcPI+
xq6Dki0u2yGgopQ7bZuOgofG9dbdDinuqLR4Vc6z+j7poK5/5qxj2b7c6YUhC2z4
7H7iCQzbH701D1oO1Ty7VFULPsB0qWIK68JIcQWdIaBbDzlp2APFoL0sYUJxZrpa
qm6UdyQ1psF9++F2H58IsGuVGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEys75iT
FZE2ack5m1AsIsGenDpkMB8GA1UdIwQYMBaAFM8eDlvXex/7U1Z4H2FjFYwuL3tt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEU5MC9CQjZGQjY4ODM5
NjUxMUYwQTZBODFCNDNDNEY5QUUwMi96eDRPVzlkN0hfdFRWbmdmWVdNVmpDNHZl
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p4NE9XOWQ3SF90VFZuZ2ZZV01WakM0dmUyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MEU5MC9CQjZGQjY4ODM5NjUxMUYwQTZBODFCNDNDNEY5QUUwMi96eDRPVzlkN0hf
dFRWbmdmWVdNVmpDNHZlMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhOrHS4fXUh+d22/E1ppXq+Eb8pUCWSaw8UkJ71So5SEnP3Nu9K45hhv53WtU
RtQ8ZcDvnx0lqSBJNt0vxw72bRIfQVVCOQbWL70tIAjmATQjAaI/P/TfgsGXTmmU
uP3g9pPci2QMVBX02kzkGIFjhsqXIe9EHuM/XwAct2qiaVHn1ruPv8a0sc3f69sb
GG3rPAdK2gD3nk6RN8DKf0ieY4OtX/LQCDXYWwtX5ZIDsjW40V1HOV/ukcBxK8rh
L/T+GeBK6E132Ry1/YcnPLj6b5vDwba5tdWjy61Am+aHUJMWh8DZ0kassigu2zDs
oaAKxUDxfdQd8AtDG6t9/84RQw==
-----END CERTIFICATE-----
Generated at Thu May 21 11:59:13 2026 by rpki-client