
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
File: ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json)
Hash identifier: glBV8urUMTmMe0rF8zGpziNByNrHx1YtaAdq6zaxsYM=
Subject key identifier: 6D:6E:59:BB:35:6F:1D:DB:C3:71:85:62:F6:82:2D:64:F1:FF:73:CD
Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF
Certificate issuer: /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
Manifest number: AB
Signing time: Tue 13 Oct 2026 07:54:11 +0000
Manifest this update: Tue 13 Oct 2026 07:54:10 +0000
Manifest next update: Tue 20 Oct 2026 07:54:10 +0000
Files and hashes: 1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: 8wIWAxxiN9bzBaEv4//8miR15iOpJ3VEWw6txFiATJE=)
2: 275E04E80BB711F1A64B03C6263D8C67.roa (hash: 9fFWODKU53GVq1qlZZ9LxoXAA6Tn5rDg6Hrhm4oZML0=)
3: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: HPrmPWZKTNrEQpqvXno/ycTGyKPtl5yRHQH8yuzYnug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl
rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 07:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
Validity
Not Before: Oct 13 07:54:10 2026 GMT
Not After : Oct 20 07:54:10 2026 GMT
Subject: CN=6acde3a3-c525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:21:f0:ac:d3:37:57:a1:97:c9:35:4f:8c:67:
2b:3b:c4:5a:5c:21:3b:a2:1f:23:72:c2:26:03:ab:
c3:11:c9:c2:8b:00:c3:77:9a:6d:2b:37:fe:5d:95:
0e:28:65:88:88:bf:79:90:97:9f:b5:5c:9d:ec:bb:
15:d4:c3:c5:18:53:2e:e9:54:d2:1e:0b:5d:75:27:
80:b1:92:c3:7a:6b:e0:5d:d9:2c:05:66:93:1c:79:
0d:34:ac:b0:45:30:bc:17:5b:49:2b:25:8c:92:06:
b3:36:7d:c1:b8:22:d6:8e:27:a0:38:20:37:6d:c8:
97:78:89:14:87:c1:df:62:32:28:94:da:1f:22:d2:
38:8f:7e:4c:0f:7e:75:88:0c:f1:0a:00:43:d7:bd:
12:66:a5:76:5d:f0:ba:9a:38:79:d8:13:0d:d4:26:
10:a8:cd:20:9c:00:26:05:e9:2e:e3:b6:93:c7:a3:
fe:2d:f2:43:f3:c9:f6:b4:c5:6f:30:0a:49:d6:f7:
19:a7:43:a6:ef:89:14:74:8e:8f:4f:3b:9b:d0:b6:
49:85:15:96:31:97:c7:31:55:8b:e7:7e:a8:90:c5:
c3:89:bb:8e:c8:b3:97:23:f9:66:69:a0:29:95:63:
49:95:7d:48:f4:fc:b5:54:89:93:fe:cc:06:6a:2c:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6E:59:BB:35:6F:1D:DB:C3:71:85:62:F6:82:2D:64:F1:FF:73:CD
X509v3 Authority Key Identifier:
keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:00:64:79:9c:77:03:11:da:8b:5b:76:7d:27:71:61:83:aa:
83:d0:ba:2d:55:5d:de:d1:61:63:ab:d2:56:49:76:9b:75:f8:
7a:62:ad:12:bf:f6:99:61:93:37:ef:1f:46:f8:e3:a6:d1:8b:
c8:6b:c0:2d:21:5c:4d:f2:03:64:48:32:bf:21:3d:b5:d1:84:
91:7f:46:f5:e9:a7:12:92:f1:4a:65:93:55:ad:4f:c3:26:e5:
d4:01:49:b2:d0:e1:96:11:04:d0:2c:ca:1f:df:b0:f2:57:04:
73:38:eb:21:e3:4e:15:68:31:d5:cb:ce:a3:dd:cf:0d:41:c5:
d8:99:c1:61:60:bb:88:25:04:a8:09:24:e4:b5:64:1d:f6:28:
0f:8e:1b:33:78:cb:6a:51:a9:48:0e:65:80:ef:d6:0e:dd:28:
71:e4:f5:d1:a5:06:42:3b:f0:32:9c:89:cd:02:e2:6f:47:44:
33:38:ca:41:c8:95:27:44:40:d8:38:6c:e4:6d:bb:3d:6b:ea:
58:28:46:8d:13:89:15:96:98:f5:78:b6:3e:a6:23:76:87:2e:
0e:62:83:08:fe:63:55:00:ae:06:2d:0b:32:48:28:ed:54:d2:
16:df:5d:da:6d:3b:47:ed:62:09:dc:11:4a:98:e2:22:97:67:
5a:4d:1b:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIxODcxMTAvBgNVBAUTKDY1QTFEMjVBRkI2NkE3NkU3OTRBOTY2RkYzM0I2QjA2
MEM3RjgwREYwHhcNMjYxMDEzMDc1NDEwWhcNMjYxMDIwMDc1NDEwWjAYMRYwFAYD
VQQDEw02YWNkZTNhMy1jNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8iHwrNM3V6GXyTVPjGcrO8RaXCE7oh8jcsImA6vDEcnCiwDDd5ptKzf+XZUO
KGWIiL95kJeftVyd7LsV1MPFGFMu6VTSHgtddSeAsZLDemvgXdksBWaTHHkNNKyw
RTC8F1tJKyWMkgazNn3BuCLWjiegOCA3bciXeIkUh8HfYjIolNofItI4j35MD351
iAzxCgBD170SZqV2XfC6mjh52BMN1CYQqM0gnAAmBeku47aTx6P+LfJD88n2tMVv
MApJ1vcZp0Om74kUdI6PTzub0LZJhRWWMZfHMVWL536okMXDibuOyLOXI/lmaaAp
lWNJlX1I9Py1VImT/swGaiz7FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1uWbs1
bx3bw3GFYvaCLWTx/3PNMB8GA1UdIwQYMBaAFGWh0lr7ZqdueUqWb/M7awYMf4Df
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjE4Ny8zOTJDMTgyNkNB
NTkxMUYwQTczQTg0NkJDNEY5QUUwMi9aYUhTV3Z0bXAyNTVTcFp2OHp0ckJneF9n
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1phSFNXdnRtcDI1NVNwWnY4enRyQmd4X2dOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjE4Ny8zOTJDMTgyNkNBNTkxMUYwQTczQTg0NkJDNEY5QUUwMi9aYUhTV3Z0bXAy
NTVTcFp2OHp0ckJneF9nTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkABkeZx3AxHai1t2fSdxYYOqg9C6LVVd3tFhY6vSVkl2m3X4emKtEr/2mWGT
N+8fRvjjptGLyGvALSFcTfIDZEgyvyE9tdGEkX9G9emnEpLxSmWTVa1Pwybl1AFJ
stDhlhEE0CzKH9+w8lcEczjrIeNOFWgx1cvOo93PDUHF2JnBYWC7iCUEqAkk5LVk
HfYoD44bM3jLalGpSA5lgO/WDt0oceT10aUGQjvwMpyJzQLib0dEMzjKQciVJ0RA
2Dhs5G27PWvqWChGjROJFZaY9Xi2PqYjdocuDmKDCP5jVQCuBi0LMkgo7VTSFt9d
2m07R+1iCdwRSpjiIpdnWk0b7A==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:50:35 2026 by rpki-client