
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json)
Hash identifier: zWyNBfrsL18GN5WkyI8pJjymaO3uywa4/I/J1OauvWk=
Subject key identifier: A2:FF:64:6E:64:DD:C8:B5:24:12:90:A5:7A:40:A2:FF:88:5B:6A:E5
Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Certificate serial: 077B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
Manifest number: 0770
Signing time: Thu 24 Sep 2026 21:32:34 +0000
Manifest this update: Thu 24 Sep 2026 21:32:34 +0000
Manifest next update: Thu 01 Oct 2026 21:32:34 +0000
Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: nF08IVnwOAYKrAEPVRUfYEt/w3R8xOH6w7pELNZhfEE=)
2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: LQ6rMhZDzAY8FPwtfGTf2Oca3RZNu+bmDyNVPU27Ec0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Validity
Not Before: Sep 24 21:32:34 2026 GMT
Not After : Oct 1 21:32:34 2026 GMT
Subject: CN=6ab596f2-7429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:e2:c7:76:aa:8a:77:89:6e:36:34:c5:11:
3f:95:47:f9:44:68:c5:c3:5c:33:4c:33:c8:94:7d:
4b:89:84:2a:64:7a:95:f3:c0:83:42:16:98:6b:64:
e2:81:17:7c:c4:32:98:62:1a:9d:f4:fb:c4:60:d1:
f2:4b:10:35:c9:4d:d4:af:fb:29:ac:14:93:a9:33:
34:08:92:d8:ee:68:d9:7b:43:76:68:58:07:8b:57:
1c:47:30:32:f5:89:e2:1f:54:06:42:3b:c1:62:01:
4c:58:f9:ff:38:d8:2c:b3:b4:38:5f:08:5a:aa:90:
37:5d:cc:bf:d5:ca:d7:17:f2:fe:fc:b3:69:73:da:
91:da:71:3a:34:76:c3:b2:7f:cc:2f:d4:0e:45:99:
8f:d4:5b:8c:4c:91:89:f5:c7:d2:fd:47:21:2c:5a:
8e:54:fe:0c:16:65:f1:a2:c7:18:31:51:16:61:a0:
af:1e:b1:a6:2f:cb:ab:99:f3:45:5c:02:8d:7f:dd:
02:8d:c8:a5:4f:78:b0:58:c7:f0:7f:af:04:f3:91:
09:5e:3c:03:52:43:ab:16:97:c0:a5:8f:b6:72:b2:
0e:de:20:ed:95:69:fb:be:ca:46:d3:ee:f5:e2:72:
4c:c0:70:11:f0:6e:63:1f:17:e9:c9:95:ee:3c:6e:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FF:64:6E:64:DD:C8:B5:24:12:90:A5:7A:40:A2:FF:88:5B:6A:E5
X509v3 Authority Key Identifier:
keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:b2:42:51:36:24:c8:02:4e:99:f2:e0:20:83:61:90:8d:ab:
fd:21:ee:c2:24:86:64:99:7c:a6:fa:d2:b0:2e:fb:e5:73:be:
34:ba:83:82:a4:68:f9:f8:0d:b6:56:77:9b:61:45:d7:e0:ab:
3a:34:b3:cf:f9:50:11:b7:b5:a0:ed:23:98:ee:94:30:b2:92:
3c:9c:15:8c:a5:aa:14:2a:25:25:e6:4e:9d:0e:6c:88:62:14:
25:f1:80:98:15:b4:79:be:8c:ef:e3:2b:de:f1:3b:e7:bb:3d:
16:6e:11:1f:fe:19:97:5c:8f:03:f0:2e:38:6c:16:c2:78:85:
a0:3b:11:43:eb:0f:35:42:8c:bb:3b:30:19:a7:f7:ee:2c:ff:
46:ed:17:de:ec:6d:eb:44:4f:36:86:6d:28:16:aa:fd:e1:0b:
10:ce:49:28:d8:82:9a:70:d0:b6:d8:09:fc:26:e5:41:70:fc:
2f:0e:88:a2:be:18:2e:48:34:c8:05:29:9a:46:21:16:2f:39:
5c:91:08:52:13:fa:27:8d:ba:5e:00:b6:71:eb:34:f6:6d:93:
98:cd:7c:aa:44:3e:45:aa:29:29:ba:d6:3b:61:c1:d1:33:4d:
ed:e1:79:a4:82:87:d1:aa:52:48:c0:79:3d:e4:bc:49:47:1a:
f2:4a:df:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz
QjFBREY2QTEwHhcNMjYwOTI0MjEzMjM0WhcNMjYxMDAxMjEzMjM0WjAYMRYwFAYD
VQQDEw02YWI1OTZmMi03NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArN3ix3aqineJbjY0xRE/lUf5RGjFw1wzTDPIlH1LiYQqZHqV88CDQhaYa2Ti
gRd8xDKYYhqd9PvEYNHySxA1yU3Ur/sprBSTqTM0CJLY7mjZe0N2aFgHi1ccRzAy
9YniH1QGQjvBYgFMWPn/ONgss7Q4XwhaqpA3Xcy/1crXF/L+/LNpc9qR2nE6NHbD
sn/ML9QORZmP1FuMTJGJ9cfS/UchLFqOVP4MFmXxoscYMVEWYaCvHrGmL8urmfNF
XAKNf90CjcilT3iwWMfwf68E85EJXjwDUkOrFpfApY+2crIO3iDtlWn7vspG0+71
4nJMwHAR8G5jHxfpyZXuPG4BAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKL/ZG5k
3ci1JBKQpXpAov+IW2rlMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC
MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw
Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk7JCUTYkyAJOmfLgIINhkI2r/SHuwiSGZJl8pvrSsC775XO+NLqDgqRo+fgN
tlZ3m2FF1+CrOjSzz/lQEbe1oO0jmO6UMLKSPJwVjKWqFColJeZOnQ5siGIUJfGA
mBW0eb6M7+Mr3vE757s9Fm4RH/4Zl1yPA/AuOGwWwniFoDsRQ+sPNUKMuzswGaf3
7iz/Ru0X3uxt60RPNoZtKBaq/eELEM5JKNiCmnDQttgJ/CblQXD8Lw6Ior4YLkg0
yAUpmkYhFi85XJEIUhP6J426XgC2ces09m2TmM18qkQ+RaopKbrWO2HB0TNN7eF5
pIKH0apSSMB5PeS8SUca8krfTg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:53:16 2026 by rpki-client