
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json)
Hash identifier: AQ7yiIhK/PZoCpsujw7ugLUvpkiiysiSOOhrY4GP83Y=
Subject key identifier: C4:36:2B:A8:E6:02:8A:18:07:3C:E4:7E:33:73:87:D0:20:0B:52:F3
Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47
Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347
Certificate serial: 0385
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
Manifest number: 037D
Signing time: Sat 03 Oct 2026 01:06:14 +0000
Manifest this update: Sat 03 Oct 2026 01:06:13 +0000
Manifest next update: Sat 10 Oct 2026 01:06:13 +0000
Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: vc/g1gs2JpGS0HkcqvDN7TATLHEYfb5xlbDt+UHSBHc=)
2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: 6pLSX4iZnj+9KuMa9YE5WAxVB8RSlp8Xl7v22OxPGLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl
rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347
Validity
Not Before: Oct 3 01:06:13 2026 GMT
Not After : Oct 10 01:06:13 2026 GMT
Subject: CN=6ac05505-d95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:5d:f1:d0:17:e1:60:72:1d:11:87:b6:16:
6d:d9:83:cf:39:42:0b:f2:d6:f7:a5:2a:d3:9c:19:
c4:41:cd:55:a7:35:73:9b:9a:60:84:d8:1f:7e:e8:
55:99:36:49:7c:14:c4:b2:9a:37:7b:31:06:2d:ac:
a4:b6:cb:9f:ea:67:a2:a5:0e:fa:d1:24:fb:e6:d2:
2c:ca:80:98:18:cd:cb:34:fc:2b:5e:25:e7:13:fc:
1f:22:63:19:31:9c:a6:65:51:c3:d7:0d:98:4b:51:
d6:90:0f:6b:60:06:11:ef:cd:51:0f:e9:9d:08:12:
94:b4:66:0a:bb:48:80:3f:91:f1:25:22:bd:6f:c9:
7b:92:52:ca:0f:81:7d:ab:ac:74:ff:82:e8:0e:e4:
18:16:d3:8d:88:1a:5c:04:ad:ff:ea:3c:fc:eb:35:
22:f4:59:57:52:9c:c3:32:ca:b6:8c:67:81:6d:16:
c9:25:44:35:68:38:e1:3d:30:01:36:2b:f5:9c:17:
72:e5:a7:56:3a:eb:c2:78:02:00:bd:f5:f2:e6:65:
34:11:b2:f3:d9:f2:94:26:88:fe:2c:dc:bb:d1:58:
02:bb:78:f6:0a:bf:e2:98:07:06:6c:f9:87:23:87:
2b:23:86:b8:d1:f4:33:6d:5a:09:c3:8f:bc:33:f0:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:2B:A8:E6:02:8A:18:07:3C:E4:7E:33:73:87:D0:20:0B:52:F3
X509v3 Authority Key Identifier:
keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:ef:15:2f:5b:f7:e0:36:b7:73:73:91:c9:11:dd:b5:8b:9a:
6d:4c:84:11:60:06:ac:13:ff:6f:2a:d4:1a:c1:40:ca:53:8a:
b1:a4:3f:cc:02:d1:71:fa:db:64:da:6b:c7:8c:e7:72:84:56:
16:b6:30:a0:51:dd:3f:c5:78:44:31:0f:2c:f1:37:f0:d3:26:
96:fb:d4:65:48:48:4e:fa:86:19:9e:80:2a:95:92:35:a1:3c:
92:f1:c1:89:f4:35:0d:b1:f2:4c:db:b6:08:95:8c:e8:66:52:
2d:ce:07:62:b8:47:45:11:e9:01:ee:34:04:01:ff:56:98:a9:
74:08:71:74:0c:f0:9f:45:67:07:0e:29:4c:86:72:d5:57:32:
cf:45:7a:96:d5:77:bf:fb:a7:73:fb:70:fc:18:89:46:a8:88:
08:26:46:77:29:5e:78:de:ae:98:ea:05:68:76:d1:5e:90:c9:
11:f5:36:e6:73:df:19:b9:b1:ba:3b:69:3f:85:94:0f:73:50:
f3:e3:07:68:42:a2:f9:9e:02:45:b8:0b:c5:98:ce:93:fe:b9:
e6:7f:fd:b8:f6:b3:24:e0:34:7e:87:e8:54:e9:2e:8b:b2:ef:
bf:22:a0:13:49:a8:4e:ef:30:b4:9a:9a:00:46:ba:d3:84:e0:
ea:f4:e6:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy
MDMwRTIzNDcwHhcNMjYxMDAzMDEwNjEzWhcNMjYxMDEwMDEwNjEzWjAYMRYwFAYD
VQQDEw02YWMwNTUwNS1kOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshBd8dAX4WByHRGHthZt2YPPOUIL8tb3pSrTnBnEQc1VpzVzm5pghNgffuhV
mTZJfBTEspo3ezEGLayktsuf6meipQ760ST75tIsyoCYGM3LNPwrXiXnE/wfImMZ
MZymZVHD1w2YS1HWkA9rYAYR781RD+mdCBKUtGYKu0iAP5HxJSK9b8l7klLKD4F9
q6x0/4LoDuQYFtONiBpcBK3/6jz86zUi9FlXUpzDMsq2jGeBbRbJJUQ1aDjhPTAB
Niv1nBdy5adWOuvCeAIAvfXy5mU0EbLz2fKUJoj+LNy70VgCu3j2Cr/imAcGbPmH
I4crI4a40fQzbVoJw4+8M/CxVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQ2K6jm
AooYBzzkfjNzh9AgC1LzMB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC
NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlC
V1RqRHMyZTg0d2dnTU9JMGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAO8VL1v34Da3c3ORyRHdtYuabUyEEWAGrBP/byrUGsFAylOKsaQ/zALRcfrb
ZNprx4zncoRWFrYwoFHdP8V4RDEPLPE38NMmlvvUZUhITvqGGZ6AKpWSNaE8kvHB
ifQ1DbHyTNu2CJWM6GZSLc4HYrhHRRHpAe40BAH/VpipdAhxdAzwn0VnBw4pTIZy
1Vcyz0V6ltV3v/unc/tw/BiJRqiICCZGdyleeN6umOoFaHbRXpDJEfU25nPfGbmx
ujtpP4WUD3NQ8+MHaEKi+Z4CRbgLxZjOk/655n/9uPazJOA0fofoVOkui7LvvyKg
E0moTu8wtJqaAEa604Tg6vTmlw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:16:31 2026 by rpki-client