
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json)
Hash identifier: TC8nhpHLLQKL/U9MnKw22jr6AXFE2FJG/b9/88lQ94E=
Subject key identifier: 7A:0E:DB:40:C6:34:F0:7C:D9:8A:12:BB:63:8F:7E:F0:8E:9C:65:FD
Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Certificate serial: 0665
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
Manifest number: 0657
Signing time: Sat 14 Nov 2026 22:27:15 +0000
Manifest this update: Sat 14 Nov 2026 22:27:14 +0000
Manifest next update: Sat 21 Nov 2026 22:27:14 +0000
Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: 3aabxgkID+TEczlOZyCHvQVtMJhPdjlZnwrBjci05Rk=)
2: 46AF15AA9F6D11F09AF30234C4F9AE02.roa (hash: IuD9Z2/ZzzbGta3CCC1+WVsV393Sp75NRm7p+Oi0EWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Validity
Not Before: Nov 14 22:27:14 2026 GMT
Not After : Nov 21 22:27:14 2026 GMT
Subject: CN=6af8e042-150b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:5d:09:2f:6b:f5:20:25:ed:b6:95:ce:2a:
cd:8b:11:f0:c2:28:06:db:a6:92:2a:be:da:94:2c:
89:1f:ac:8d:3a:48:e3:e2:31:3f:14:a2:3c:e0:1a:
3c:cc:36:77:63:b0:f7:a4:e4:d1:96:18:6b:1c:b9:
1e:92:26:50:0c:60:ed:7a:b7:e4:e6:74:25:76:87:
9f:f1:5b:6a:9c:fd:46:d6:ac:3e:0a:82:f6:29:89:
15:7c:cb:cb:5f:13:d2:d0:c7:85:2e:59:86:8e:f6:
ac:73:36:e1:f6:9e:95:5f:32:bf:ef:3d:a1:0a:31:
0f:e2:f2:ae:91:3e:85:87:d5:02:8c:7b:e9:96:57:
60:5a:74:5f:29:05:e3:0b:d3:91:bc:28:fb:e1:51:
a2:70:87:b0:10:10:be:47:28:8d:a3:41:13:51:0c:
41:2e:b8:90:ea:ec:15:73:cb:36:35:21:e1:64:40:
b7:74:7f:92:d4:14:9d:da:6d:40:fb:8f:ae:f3:10:
a0:48:7b:2b:77:66:19:6e:3e:ae:93:a8:2e:a5:18:
23:80:61:e5:4e:e0:b2:76:62:d6:3c:b2:7e:a5:07:
5e:5f:4f:cd:9b:93:79:d5:6b:a8:72:4a:2e:9f:f0:
73:92:31:bd:f0:b9:56:55:ca:15:69:76:7e:a5:8d:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0E:DB:40:C6:34:F0:7C:D9:8A:12:BB:63:8F:7E:F0:8E:9C:65:FD
X509v3 Authority Key Identifier:
keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d4:43:a6:03:5e:f5:e7:ba:ba:48:c3:e3:c3:bd:50:05:83:
f7:55:10:c3:18:78:14:27:58:c7:76:dd:b3:fa:03:45:8f:91:
4f:39:c3:f2:84:43:a9:93:86:80:60:a7:87:30:6f:b7:26:bc:
bc:f0:47:3b:8e:7f:ba:ea:5c:04:b4:03:18:af:d8:45:c2:5d:
58:98:65:51:a1:20:18:eb:85:d8:48:3c:5b:01:1c:b3:fd:46:
c5:4f:e7:b3:2d:23:fd:3a:65:20:5a:a7:c9:69:d4:53:b9:60:
f0:ab:ec:63:41:41:8c:51:6a:ea:43:3a:b8:cf:61:82:69:6c:
25:32:65:82:d4:d0:f8:57:b6:6d:9a:57:20:dd:b0:ae:a5:16:
bc:d3:90:de:78:44:10:d9:6e:77:04:c4:cd:d7:7f:08:c4:99:
b2:08:be:f7:78:b3:2f:0c:82:73:9b:cb:9f:91:7c:1d:d2:a3:
70:5e:48:b4:c3:8e:b4:0c:2e:65:54:a3:c8:d4:6b:ee:53:c6:
8d:97:c0:2a:a0:54:23:f1:c1:3b:29:ca:14:c6:57:3a:e6:a3:
5c:ef:23:ba:da:48:c9:ff:ba:f8:30:1f:48:87:9e:cd:ea:cc:
c4:be:90:f4:6a:41:60:6f:93:25:9f:e7:95:dc:4a:79:a9:42:
a0:47:52:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw
QjVBM0NERDAwHhcNMjYxMTE0MjIyNzE0WhcNMjYxMTIxMjIyNzE0WjAYMRYwFAYD
VQQDEw02YWY4ZTA0Mi0xNTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/pdCS9r9SAl7baVzirNixHwwigG26aSKr7alCyJH6yNOkjj4jE/FKI84Bo8
zDZ3Y7D3pOTRlhhrHLkekiZQDGDterfk5nQldoef8VtqnP1G1qw+CoL2KYkVfMvL
XxPS0MeFLlmGjvasczbh9p6VXzK/7z2hCjEP4vKukT6Fh9UCjHvplldgWnRfKQXj
C9ORvCj74VGicIewEBC+RyiNo0ETUQxBLriQ6uwVc8s2NSHhZEC3dH+S1BSd2m1A
+4+u8xCgSHsrd2YZbj6uk6gupRgjgGHlTuCydmLWPLJ+pQdeX0/Nm5N51Wuockou
n/BzkjG98LlWVcoVaXZ+pY05AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoO20DG
NPB82YoSu2OPfvCOnGX9MB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0
N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02
OTljaWtEZDY3YzBMV2p6ZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnNRDpgNe9ee6ukjD48O9UAWD91UQwxh4FCdYx3bds/oDRY+RTznD8oRDqZOG
gGCnhzBvtya8vPBHO45/uupcBLQDGK/YRcJdWJhlUaEgGOuF2Eg8WwEcs/1GxU/n
sy0j/TplIFqnyWnUU7lg8KvsY0FBjFFq6kM6uM9hgmlsJTJlgtTQ+Fe2bZpXIN2w
rqUWvNOQ3nhEENludwTEzdd/CMSZsgi+93izLwyCc5vLn5F8HdKjcF5ItMOOtAwu
ZVSjyNRr7lPGjZfAKqBUI/HBOynKFMZXOuajXO8jutpIyf+6+DAfSIeezerMxL6Q
9GpBYG+TJZ/nldxKealCoEdSWg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:32:43 2026 by rpki-client