
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier: 4aT3sDeLxQnQPyslWucxeSpR1T0bPgW/KWzMy/3o1fI=
Subject key identifier: 75:AE:63:3D:D2:B2:B8:7D:BA:8B:CF:E0:A7:35:6C:4C:45:BD:D5:F4
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number: 0166
Signing time: Fri 25 Sep 2026 02:59:50 +0000
Manifest this update: Fri 25 Sep 2026 02:59:49 +0000
Manifest next update: Fri 02 Oct 2026 02:59:49 +0000
Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: BeF/MIZ+zSqz0KH0sDvDdh+sc777tm/5tR1O4ETuHlM=)
2: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: fdQvyXJ/WQPf7MvdyljKOEY7VxKzLOji0CmCTZOXpHI=)
3: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: PK2V6pJkKs1cUfHH+NplffRcxO64GLqymLJjQgGE2VI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Validity
Not Before: Sep 25 02:59:49 2026 GMT
Not After : Oct 2 02:59:49 2026 GMT
Subject: CN=6ab5e3a5-ddfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:84:ff:a3:88:43:dd:e8:78:7c:a6:38:69:
e6:30:24:0a:f2:54:91:95:be:25:f4:f0:85:88:06:
c1:c3:7f:ca:1e:3d:b0:86:4e:6b:f6:c5:82:5a:d9:
ba:95:97:98:ad:1a:3f:dc:a2:06:96:a4:49:c8:1c:
4d:e5:5d:8e:94:3b:96:1f:20:10:4b:82:9b:67:85:
49:14:de:a9:3f:80:44:d2:f6:46:d6:79:0a:9b:33:
3a:31:4c:f7:30:60:66:bc:20:e7:24:15:b6:9f:33:
43:9c:eb:b4:d1:5a:34:53:0a:72:af:37:b4:3c:d6:
56:79:a7:d5:13:80:74:9b:38:95:31:32:2e:e1:aa:
29:54:ba:74:ff:20:a7:86:6c:67:dd:27:cd:d1:c1:
55:72:54:1c:52:90:64:ec:17:6f:10:1d:5c:c2:a7:
2f:09:0e:bb:1a:d3:80:fb:51:79:06:e6:4f:ab:7d:
c9:30:05:c0:ba:d7:45:25:6e:bf:9f:cb:e3:eb:51:
69:e3:31:2f:52:82:3c:0e:d9:13:1a:01:46:ac:65:
fa:2f:ea:a5:66:ba:19:c0:a1:1c:e9:7e:70:df:e3:
33:2f:87:74:47:1d:d2:a8:39:7a:85:25:84:3e:10:
ed:72:18:df:c6:2c:25:c0:a7:95:1c:e2:17:52:5c:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:63:3D:D2:B2:B8:7D:BA:8B:CF:E0:A7:35:6C:4C:45:BD:D5:F4
X509v3 Authority Key Identifier:
keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:42:7a:0f:99:e9:8f:f2:18:ef:ea:82:fc:02:3a:58:9c:3b:
f3:d2:36:61:f8:05:37:bf:a2:a5:50:f2:d1:47:aa:19:e5:6b:
0f:a8:1a:0b:32:78:05:93:c7:62:b5:7a:ed:a3:14:83:8c:07:
b6:4c:4b:05:f5:85:dc:24:05:e5:66:2b:87:b1:1f:b7:7c:77:
51:80:d8:99:2f:90:a4:55:70:67:3e:3d:1f:d9:08:c2:23:3e:
a3:81:d5:c4:d9:59:09:d8:cb:30:a6:84:cb:17:9d:30:eb:3d:
30:93:40:e1:f0:00:e2:08:82:01:ed:35:3e:38:c8:40:b6:99:
68:17:1e:c6:79:2e:72:37:73:08:7e:3c:95:3e:2f:d8:7c:97:
c6:72:a6:40:7e:f1:fb:6f:fd:30:c5:33:97:e1:5a:57:9f:76:
c8:3b:23:9c:d1:08:c6:04:f1:90:5c:d9:42:1f:a0:05:c8:2e:
33:c7:ad:a5:7e:0f:59:e7:67:9a:eb:82:bc:cf:0d:1f:4b:a9:
5d:d9:6c:8e:71:ed:ab:7d:3c:fa:94:ed:6a:dd:cf:94:0e:39:
6e:6b:7c:11:ce:a6:2b:7f:c8:ab:e8:20:73:76:b3:27:98:f5:
46:ae:ad:e2:78:e4:bc:ae:af:ae:36:dc:04:89:1a:ee:ee:d7:
71:ea:37:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJCODUxMTAvBgNVBAUTKEM1NTY0REVDMTAxNjYzQkY0M0QzRjJFMzQwMzk0QzAw
NzY2QTYzRTMwHhcNMjYwOTI1MDI1OTQ5WhcNMjYxMDAyMDI1OTQ5WjAYMRYwFAYD
VQQDEw02YWI1ZTNhNS1kZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqaE/6OIQ93oeHymOGnmMCQK8lSRlb4l9PCFiAbBw3/KHj2whk5r9sWCWtm6
lZeYrRo/3KIGlqRJyBxN5V2OlDuWHyAQS4KbZ4VJFN6pP4BE0vZG1nkKmzM6MUz3
MGBmvCDnJBW2nzNDnOu00Vo0Uwpyrze0PNZWeafVE4B0mziVMTIu4aopVLp0/yCn
hmxn3SfN0cFVclQcUpBk7BdvEB1cwqcvCQ67GtOA+1F5BuZPq33JMAXAutdFJW6/
n8vj61Fp4zEvUoI8DtkTGgFGrGX6L+qlZroZwKEc6X5w3+MzL4d0Rx3SqDl6hSWE
PhDtchjfxiwlwKeVHOIXUlwQQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWuYz3S
srh9uovP4Kc1bExFvdX0MB8GA1UdIwQYMBaAFMVWTewQFmO/Q9Py40A5TAB2amPj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS9DQ0JCQUJFQTlG
NjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3OUQwX0xqUURsTUFIWnFZ
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVktTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkI4NS9DQ0JCQUJFQTlGNjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3
OUQwX0xqUURsTUFIWnFZLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAx0J6D5npj/IY7+qC/AI6WJw789I2YfgFN7+ipVDy0UeqGeVrD6gaCzJ4BZPH
YrV67aMUg4wHtkxLBfWF3CQF5WYrh7Eft3x3UYDYmS+QpFVwZz49H9kIwiM+o4HV
xNlZCdjLMKaEyxedMOs9MJNA4fAA4giCAe01PjjIQLaZaBcexnkucjdzCH48lT4v
2HyXxnKmQH7x+2/9MMUzl+FaV592yDsjnNEIxgTxkFzZQh+gBcguM8etpX4PWedn
muuCvM8NH0upXdlsjnHtq308+pTtat3PlA45bmt8Ec6mK3/Iq+ggc3azJ5j1Rq6t
4njkvK6vrjbcBIka7u7Xceo3CA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:12:36 2026 by rpki-client