
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json)
Hash identifier: 1GILT4+FCF0srGtGR7GkY0Sm+gGlUWxxZAubEqDSMos=
Subject key identifier: 34:6D:32:31:CE:CE:76:5D:49:A5:B0:4A:EA:D7:D8:9C:26:F0:BB:EC
Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63
Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
Manifest number: 0145
Signing time: Mon 09 Nov 2026 05:33:16 +0000
Manifest this update: Mon 09 Nov 2026 05:33:15 +0000
Manifest next update: Mon 16 Nov 2026 05:33:15 +0000
Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: W0FoUV8Hi/DVAKgcHCcAcuZKiPS6RUs+a72MinyjyVw=)
2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: C0UeRmdUC5XES5gqgoPUp5FT+eSznO9ZwMgEuNb9JBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl
rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 05:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63
Validity
Not Before: Nov 9 05:33:15 2026 GMT
Not After : Nov 16 05:33:15 2026 GMT
Subject: CN=6af15b1c-50cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:d8:4a:29:03:39:ed:5b:8d:8b:49:2b:34:
35:21:58:17:08:8d:9c:da:63:82:40:98:14:be:5e:
c2:0c:5c:06:19:1a:0f:77:93:d7:78:2c:36:84:32:
a2:a0:60:13:2d:cc:3d:27:e1:62:c6:82:2b:eb:c2:
9d:57:6e:3b:dd:db:17:34:82:bd:ea:e9:ea:85:c7:
c1:1b:0a:40:04:33:cb:29:95:3c:c9:63:18:47:77:
f2:fb:da:2c:57:36:90:da:b9:10:0b:3e:36:47:be:
c6:94:fc:e0:e1:b4:34:15:b4:ad:0a:7f:b9:1c:dd:
65:38:fb:a3:42:88:fd:b3:14:c5:ec:de:b0:6e:32:
fe:35:33:57:2e:d0:de:c1:ea:0f:d3:89:2d:a5:69:
52:26:ff:3f:9c:de:da:aa:d4:92:c9:0b:44:40:3e:
2f:10:43:4f:06:8a:92:d1:65:e7:ba:f8:19:a6:a5:
ca:3e:fe:02:d8:84:5b:06:3d:e8:04:31:c2:67:68:
46:93:95:06:23:59:00:91:90:bb:90:1b:40:34:b6:
eb:b5:31:36:11:7e:ea:ac:b9:8f:db:a1:d2:b3:93:
86:33:d8:c1:aa:36:04:3f:c8:a0:f5:6f:3d:81:d3:
e9:dc:3e:ec:bb:68:4f:95:2d:49:e1:ea:31:36:27:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:32:31:CE:CE:76:5D:49:A5:B0:4A:EA:D7:D8:9C:26:F0:BB:EC
X509v3 Authority Key Identifier:
keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:b7:6b:7a:7f:41:10:f0:3b:18:cc:cd:d2:76:d7:e7:98:07:
ab:16:b4:74:c8:71:86:29:33:88:b9:1d:b5:28:29:e0:fa:aa:
8f:68:a1:a3:2c:26:09:f9:a6:c0:0d:ee:29:f8:4c:aa:0a:ce:
4b:90:67:c0:0c:6d:f7:2d:55:d0:9f:46:5c:80:4c:e1:ab:55:
3e:9d:24:f4:e3:0c:8a:67:c7:e4:26:6f:36:a5:03:d3:9e:2d:
54:47:35:ab:0f:a4:f7:46:fb:0b:9a:fc:01:89:d5:c1:35:c1:
d0:92:f8:2b:37:48:43:11:a6:8a:cc:c4:93:d4:6a:fa:86:63:
a7:1b:3b:ec:10:bc:bc:0e:b3:35:aa:dd:63:67:63:f1:60:d5:
75:91:91:d2:a8:f0:77:cb:24:43:8b:ff:69:68:d5:f4:15:fa:
03:ab:23:d8:1d:cf:d5:6c:50:6a:ee:93:45:c7:b2:94:8e:69:
a9:ee:47:48:50:c0:eb:06:ec:fe:bd:f3:b2:00:04:f4:ac:d9:
21:66:a8:e9:51:40:cf:f5:88:8f:fa:57:82:cf:be:a4:e0:fc:
71:00:f6:8d:ca:3f:24:a9:52:c5:cf:08:8a:28:13:20:fb:08:
ce:50:f9:1e:ee:1f:ea:a7:07:ae:e2:45:1d:52:7c:f3:cc:ca:
e7:70:ea:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVGODYxMTAvBgNVBAUTKDY3NDEyRjBDNzMwRDlGNDU0NjdBNTI2QzM4MjVFQzM4
RkU3MDBCNjMwHhcNMjYxMTA5MDUzMzE1WhcNMjYxMTE2MDUzMzE1WjAYMRYwFAYD
VQQDEw02YWYxNWIxYy01MGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuh/YSikDOe1bjYtJKzQ1IVgXCI2c2mOCQJgUvl7CDFwGGRoPd5PXeCw2hDKi
oGATLcw9J+FixoIr68KdV2473dsXNIK96unqhcfBGwpABDPLKZU8yWMYR3fy+9os
VzaQ2rkQCz42R77GlPzg4bQ0FbStCn+5HN1lOPujQoj9sxTF7N6wbjL+NTNXLtDe
weoP04ktpWlSJv8/nN7aqtSSyQtEQD4vEENPBoqS0WXnuvgZpqXKPv4C2IRbBj3o
BDHCZ2hGk5UGI1kAkZC7kBtANLbrtTE2EX7qrLmP26HSs5OGM9jBqjYEP8ig9W89
gdPp3D7su2hPlS1J4eoxNicpiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRtMjHO
znZdSaWwSurX2Jwm8LvsMB8GA1UdIwQYMBaAFGdBLwxzDZ9FRnpSbDgl7Dj+cAtj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUY4Ni84OEVENUM4NEVG
MkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4wVkdlbEpzT0NYc09QNXdD
Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0MyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUY4Ni84OEVENUM4NEVGMkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4w
VkdlbEpzT0NYc09QNXdDMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVrdren9BEPA7GMzN0nbX55gHqxa0dMhxhikziLkdtSgp4Pqqj2ihoywmCfmm
wA3uKfhMqgrOS5BnwAxt9y1V0J9GXIBM4atVPp0k9OMMimfH5CZvNqUD054tVEc1
qw+k90b7C5r8AYnVwTXB0JL4KzdIQxGmiszEk9Rq+oZjpxs77BC8vA6zNardY2dj
8WDVdZGR0qjwd8skQ4v/aWjV9BX6A6sj2B3P1WxQau6TRceylI5pqe5HSFDA6wbs
/r3zsgAE9KzZIWao6VFAz/WIj/pXgs++pOD8cQD2jco/JKlSxc8IiigTIPsIzlD5
Hu4f6qcHruJFHVJ888zK53DqLg==
-----END CERTIFICATE-----
Generated at Tue Nov 10 11:05:12 2026 by rpki-client