
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json)
Hash identifier: jkgDVnDNyHpIQGtQIDvszHuMAdlApvOo/xpZ0j8Izh0=
Subject key identifier: 30:47:3F:93:98:7A:B7:D4:30:74:99:55:D5:0A:F0:59:5A:62:CC:F0
Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
Manifest number: 0196
Signing time: Tue 29 Sep 2026 04:47:51 +0000
Manifest this update: Tue 29 Sep 2026 04:47:50 +0000
Manifest next update: Tue 06 Oct 2026 04:47:50 +0000
Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: 3IX937XlHHGpnsTYAPxYP5bcF9+8IkbDlRK252Sl/TI=)
2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: HpXF9RK830aj73W2wDJDIKJP/rmMEYbJuFSH5BCvJto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 04:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Validity
Not Before: Sep 29 04:47:50 2026 GMT
Not After : Oct 6 04:47:50 2026 GMT
Subject: CN=6abb42f7-5f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:00:ff:e4:07:b2:31:81:86:4e:0a:68:9d:
b4:1b:e0:e3:ab:02:ff:13:70:6f:3a:c3:f6:dd:2f:
74:f4:9e:57:45:76:f2:32:fd:96:8d:53:e4:e8:ef:
7b:bf:1d:7d:43:55:e1:97:c2:85:22:95:a5:90:63:
4e:41:b6:f6:d1:77:54:cd:6a:0f:7f:13:67:b1:b6:
61:e0:a1:21:4a:b1:69:b9:0d:34:b2:18:43:3b:54:
78:3b:17:31:6c:0e:2a:7c:08:80:df:51:58:39:b1:
c5:b9:84:02:5f:42:66:3a:be:52:2d:1b:05:a2:af:
d4:7b:b0:b8:7a:6e:39:8c:d5:ca:fe:79:89:22:51:
cc:03:ad:7a:2a:bb:ce:d0:38:96:de:ef:4b:cd:07:
6d:c7:ec:e8:45:9a:53:68:cd:93:f2:7d:ac:49:c9:
59:13:f9:ff:2b:8d:9f:2e:86:60:4c:7f:64:73:6a:
1c:12:a1:df:25:21:f0:73:e0:10:64:a5:f5:6e:8a:
dd:5a:73:fe:f4:49:15:8c:91:49:05:26:d0:bb:f6:
74:e6:8d:54:5d:da:0a:e2:95:5b:5d:bd:12:fe:ba:
44:41:06:ef:5a:7d:2a:7b:4c:0f:b1:96:ba:dd:fe:
96:99:71:91:82:79:eb:d6:2e:bb:45:80:4f:a8:5b:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:47:3F:93:98:7A:B7:D4:30:74:99:55:D5:0A:F0:59:5A:62:CC:F0
X509v3 Authority Key Identifier:
keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d1:db:ad:db:66:98:77:cb:56:a1:4a:2d:20:61:23:e2:52:
c2:ec:7f:54:60:0e:c9:fc:b9:2a:fa:f6:8e:bc:10:36:73:7d:
4b:ce:bc:21:ba:a7:75:6b:53:0e:06:61:3c:49:37:6d:38:af:
9c:0f:e4:12:65:ad:2c:87:a2:04:d5:5b:6b:7c:4c:73:f0:93:
f3:d0:2b:f4:1c:ee:b5:81:8d:a6:1a:54:09:c9:1b:a8:8e:ce:
c4:49:dd:ad:0b:86:41:b1:a1:5c:54:d8:c3:c5:27:a5:85:85:
ac:7e:5e:01:ee:53:1f:29:ba:54:09:67:25:20:77:22:7b:2f:
91:3a:37:f3:f7:d1:2c:8b:bb:cf:dc:05:07:64:c1:0f:ef:93:
cd:04:eb:2f:ae:77:a7:77:7b:4c:5c:3f:86:37:a6:2d:50:9a:
5e:8b:a2:ba:d3:45:9a:be:a1:45:92:5d:d5:7e:13:e1:a3:a5:
59:d4:75:b8:d6:e3:f0:ad:b2:0e:b9:f5:c4:c4:65:eb:ae:c1:
5f:d7:f6:af:43:7d:1b:90:cc:98:0e:7d:85:af:ce:68:bc:3c:
4e:e2:b0:a2:29:d7:fb:ee:d0:1b:df:8f:b2:7c:12:86:30:0f:
50:6c:dc:4b:9a:41:16:aa:6e:3a:c0:99:02:50:c3:27:58:17:
c2:fa:a4:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG
QUE4OENEODQwHhcNMjYwOTI5MDQ0NzUwWhcNMjYxMDA2MDQ0NzUwWjAYMRYwFAYD
VQQDEw02YWJiNDJmNy01ZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4agA/+QHsjGBhk4KaJ20G+DjqwL/E3BvOsP23S909J5XRXbyMv2WjVPk6O97
vx19Q1Xhl8KFIpWlkGNOQbb20XdUzWoPfxNnsbZh4KEhSrFpuQ00shhDO1R4Oxcx
bA4qfAiA31FYObHFuYQCX0JmOr5SLRsFoq/Ue7C4em45jNXK/nmJIlHMA616KrvO
0DiW3u9LzQdtx+zoRZpTaM2T8n2sSclZE/n/K42fLoZgTH9kc2ocEqHfJSHwc+AQ
ZKX1bordWnP+9EkVjJFJBSbQu/Z05o1UXdoK4pVbXb0S/rpEQQbvWn0qe0wPsZa6
3f6WmXGRgnnr1i67RYBPqFtYawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBHP5OY
erfUMHSZVdUK8FlaYszwMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz
MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6
WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1
RkdwQU92cFZmRno2cUl6WVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfNHbrdtmmHfLVqFKLSBhI+JSwux/VGAOyfy5Kvr2jrwQNnN9S868IbqndWtT
DgZhPEk3bTivnA/kEmWtLIeiBNVba3xMc/CT89Ar9BzutYGNphpUCckbqI7OxEnd
rQuGQbGhXFTYw8UnpYWFrH5eAe5THym6VAlnJSB3InsvkTo38/fRLIu7z9wFB2TB
D++TzQTrL653p3d7TFw/hjemLVCaXouiutNFmr6hRZJd1X4T4aOlWdR1uNbj8K2y
Drn1xMRl667BX9f2r0N9G5DMmA59ha/OaLw8TuKwoinX++7QG9+PsnwShjAPUGzc
S5pBFqpuOsCZAlDDJ1gXwvqkXA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 16:51:21 2026 by rpki-client