
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json)
Hash identifier: Debj0Y0kqM7dvHFr5RBG3jueZyO6nw8LCyOKfLqdtRA=
Subject key identifier: 81:C3:F7:20:E8:0D:87:8F:05:8E:A0:87:B6:12:EE:A5:20:27:34:FA
Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF
Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
Certificate serial: 0BEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
Manifest number: 0BE4
Signing time: Tue 18 Aug 2026 19:14:27 +0000
Manifest this update: Tue 18 Aug 2026 19:14:27 +0000
Manifest next update: Tue 25 Aug 2026 19:14:27 +0000
Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: 1nduM53Jsm5807NHOCoUYgWVT3D6DZ0rsOYvuF2iP7M=)
2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: /2dz4PjA3+fudT7lQIBIdu9/aDa/a/TeRxW2OSUWKSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl
rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
Validity
Not Before: Aug 18 19:14:27 2026 GMT
Not After : Aug 25 19:14:27 2026 GMT
Subject: CN=6a84af13-c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:fa:bf:32:95:66:ba:06:d1:39:1f:34:12:
5c:d8:a0:31:b5:54:29:5d:0b:c7:a3:81:93:84:45:
51:8a:a9:45:88:f1:29:b6:2e:1c:f0:5c:f2:95:58:
85:18:de:e7:59:47:c1:a5:09:f1:27:91:98:ca:87:
05:96:8b:72:f9:4f:28:99:8c:fb:b9:6c:bd:a1:b3:
f5:86:58:e1:27:80:e9:f4:63:65:95:fc:37:d3:d1:
3b:91:ed:f8:a0:66:0e:8d:3f:56:fc:e1:f9:c3:e4:
af:6a:04:19:c3:91:87:c1:11:2d:7c:94:0e:b0:f0:
b1:06:54:c4:c4:e7:64:9d:1f:ec:8c:81:46:fe:a6:
cc:68:56:5e:d9:68:5c:0a:54:71:ea:91:85:9a:00:
b1:7d:84:46:a5:82:01:25:13:c1:29:eb:0a:48:25:
30:1e:32:d8:a9:4d:bb:ba:a0:5b:32:db:4b:b3:86:
b9:d2:9e:a8:c1:a3:3b:81:64:d8:8b:26:8f:6d:57:
85:fd:8d:2e:1b:a3:51:61:0f:98:2d:d7:58:2b:86:
3e:a4:64:b9:9e:4e:03:d7:8f:45:68:d1:08:1e:ca:
38:b9:63:95:3d:7d:89:79:b2:90:ec:7a:03:c3:c5:
18:ff:86:58:9b:4f:8d:e2:c7:d6:93:57:e1:31:cf:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C3:F7:20:E8:0D:87:8F:05:8E:A0:87:B6:12:EE:A5:20:27:34:FA
X509v3 Authority Key Identifier:
keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:56:a6:82:5a:9a:bc:f5:cc:ff:65:fa:03:ac:e3:28:31:73:
ec:71:d7:b2:84:13:f9:5a:64:0b:d2:45:34:a5:c2:80:c9:3d:
bd:ef:aa:49:a4:2a:b6:5d:6d:82:d2:f6:22:30:43:e1:ad:6f:
2b:fe:aa:9a:90:d2:4e:6b:5e:af:b6:79:0c:01:bc:19:e9:63:
5f:a2:6b:5c:49:35:41:05:f8:36:1f:79:90:f6:e4:c8:d7:4a:
67:13:dd:2c:f5:b9:9c:10:73:56:b9:c1:30:65:f2:a4:af:ca:
ae:0c:37:45:05:78:66:48:0e:73:35:36:6f:63:26:9e:fa:ec:
0d:74:f0:00:7d:26:86:9c:24:5c:3e:a9:24:ce:32:91:0a:e2:
d4:28:9f:c4:24:ff:21:f0:9f:43:46:9b:b3:d0:6b:50:b4:b2:
09:0d:ea:67:f2:80:2b:e5:e0:e0:cc:9c:cd:79:12:4a:5a:43:
8c:3f:30:ef:8d:7b:80:ed:7d:d4:7a:24:b1:c9:35:05:80:3d:
af:9f:10:36:c2:af:fc:2f:a0:9a:e8:82:53:5f:e4:c1:3a:52:
29:29:0b:c6:f4:59:4d:bb:cb:00:c4:52:14:c5:51:e9:d9:fd:
86:bd:7c:75:88:1c:e3:25:bd:72:7d:29:45:68:f5:dc:cf:9c:
53:a4:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:18 2026 by rpki-client