
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json)
Hash identifier: h52rQxZQqH6vcwFXR0bpnaYhcNbRDvHA921pt7zP3HM=
Subject key identifier: DB:2A:A1:50:2E:2D:1F:C1:2D:13:49:72:27:F6:9E:92:EA:D0:68:6D
Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
Manifest number: 010E
Signing time: Thu 24 Sep 2026 17:30:08 +0000
Manifest this update: Thu 24 Sep 2026 17:30:08 +0000
Manifest next update: Thu 01 Oct 2026 17:30:08 +0000
Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: 2AkQkAes58MUxc+BPID6OLKHCryfohx74ayKW3i2MKY=)
2: 79FB87E45BE811F1A1050E64C6833773.roa (hash: NWwclcZCcPG2TS1pQpW1RR20GoSP1Iy5BozZgf751Lw=)
3: 87087F00267E11F09183092AC4F9AE02.roa (hash: ZonpCT+5ZZuP5erM6WjI5zX2DJGXZb7/2jDh35lgn00=)
4: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: 4a6PLPW/gOHUVu6+aFebgQ5/qx4vCQg4zTQoTmjp9Rk=)
5: E7E8471858BB11F1BAE21C4D9A833773.roa (hash: Tc3fcqpoYCzH1k3AQYmkHoaNjc5Waq991d+rce3j0bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Validity
Not Before: Sep 24 17:30:08 2026 GMT
Not After : Oct 1 17:30:08 2026 GMT
Subject: CN=6ab55e20-b799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:56:2c:30:8b:df:34:5e:d6:20:d6:16:f6:
ad:bc:3f:4c:b5:9e:97:aa:a7:62:89:39:3f:16:3d:
77:7a:a2:3d:bd:9d:5c:a4:ac:ba:40:51:93:da:f9:
70:4d:20:ce:b3:8f:71:c6:4f:0f:aa:0d:52:c8:11:
e3:36:77:3b:7c:4f:3b:d2:6e:58:00:f2:71:3d:c8:
94:4b:ce:28:42:24:83:f9:09:76:ea:00:48:8a:c8:
7c:11:ab:55:5b:0e:c5:5a:3b:22:86:6c:80:33:65:
10:c0:7d:38:1b:bf:50:94:66:c5:2e:ce:15:dd:c3:
24:92:ea:0a:fd:df:75:f6:3d:27:0d:d2:20:de:26:
49:63:9f:8c:c7:3f:27:82:3e:e1:0f:10:fc:1f:9f:
fa:fc:63:ef:3a:13:a3:44:ee:77:48:f8:bc:dc:b6:
8c:23:2e:1b:a0:56:af:8c:31:5e:1e:9e:d2:0a:5b:
42:07:e9:b9:c0:44:c7:ff:59:1b:e9:00:55:a5:e0:
dc:46:73:57:a1:8c:68:0e:20:77:0d:33:ab:b9:1d:
be:69:50:a5:1c:1f:62:88:47:12:12:0b:c7:43:42:
02:76:49:1c:16:67:ff:ae:5e:65:c5:f1:06:75:cf:
5f:d3:b6:dd:6a:eb:e6:8b:7b:6f:8c:61:29:71:1f:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2A:A1:50:2E:2D:1F:C1:2D:13:49:72:27:F6:9E:92:EA:D0:68:6D
X509v3 Authority Key Identifier:
keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:13:37:a9:37:8d:79:50:4a:84:fe:52:e4:8e:ee:3a:34:6f:
0a:d2:2d:d1:e1:27:62:6f:4f:e9:44:05:bf:7d:f9:00:63:bb:
37:e1:72:3c:ec:11:0b:80:dd:70:90:5f:8b:05:52:63:43:2c:
6b:3b:1d:6a:d4:11:2a:1e:09:9d:1d:39:96:80:4d:1d:58:e1:
57:66:22:3e:e7:56:1a:97:05:3e:4e:21:12:7d:b9:f7:6f:22:
43:8b:68:b9:b7:c3:75:a1:a0:9d:57:89:e3:22:6c:91:3f:24:
47:fc:2d:fc:4a:f2:3e:69:88:f5:f0:fd:0b:3a:fa:88:08:56:
b3:8b:ae:a1:cd:ec:3d:d5:ee:68:f3:e9:5c:96:78:2f:12:58:
af:9f:60:4a:4d:5d:de:97:af:fa:cb:e7:94:f4:b7:5f:48:af:
50:26:78:47:d0:c4:c9:55:c9:76:9e:ec:4a:fa:39:c8:8c:ef:
1d:e1:89:8a:3a:3b:7c:06:7e:ab:fb:e0:b7:e3:1c:cb:e3:d3:
37:bc:6d:08:98:d0:d7:b6:4e:ca:b3:29:49:30:d9:e5:47:2b:
04:df:04:1d:96:3b:27:4c:e8:35:fc:32:c2:cc:00:f0:49:39:
2d:41:58:aa:e0:60:82:dc:59:5c:a6:b7:75:02:88:c4:f2:09:
e0:de:6c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:00:46 2026 by rpki-client