
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
File: xWV5UwnochSM0g3isqQ807IEwlE.mft (raw, json)
Hash identifier: PLPMTJYL7ywQgpfLXWhBLKX7d+2YYeAxI+IZJw8ljjw=
Subject key identifier: BA:F2:D0:CE:A3:F5:6E:F9:88:E5:80:1D:7D:FB:AD:E8:20:1F:78:41
Authority key identifier: C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51
Certificate issuer: /CN=A913AB2B/serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
Manifest number: 3E
Signing time: Mon 05 Oct 2026 09:01:10 +0000
Manifest this update: Mon 05 Oct 2026 09:01:09 +0000
Manifest next update: Mon 12 Oct 2026 09:01:09 +0000
Files and hashes: 1: xWV5UwnochSM0g3isqQ807IEwlE.crl (hash: zUEmPb4kfbaisGSqa6pWiaj+rot/EOEDCCjZ9YU9NaU=)
2: C2308ADC6E2111F18E37985672A30FBC.roa (hash: wptdMLkGYWCREgeRbFIexsWdbeobaprWrt9rh5ES8yE=)
3: E58C711C6E2111F189BF576272A30FBC.roa (hash: 2KzEYDFnfXibar/cKmNE28FNWE3E+aAr6Na8gmkWSTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl
rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AB2B, serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
Validity
Not Before: Oct 5 09:01:09 2026 GMT
Not After : Oct 12 09:01:09 2026 GMT
Subject: CN=6ac36755-92ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:5a:a9:1b:53:4e:47:08:2a:2c:fb:2b:57:
d8:a3:3c:68:19:0f:39:20:64:48:1a:54:83:0e:0b:
09:c8:13:ef:e2:8d:2a:81:45:d3:09:d3:dc:04:54:
ef:97:f1:0a:01:de:04:86:c3:7b:8d:8c:81:8a:0d:
56:8b:b8:72:b0:48:ea:f8:19:0f:7c:90:40:7e:99:
23:cf:82:de:87:2a:b1:60:a4:e3:0c:5f:a0:78:b7:
3b:1e:6b:b1:6d:a2:6f:38:57:28:36:2a:72:77:59:
76:69:59:dd:3e:1f:49:17:c2:47:52:65:02:a6:df:
67:2f:94:14:4e:fb:ee:c9:d6:11:a0:ac:02:97:85:
e8:06:e1:dc:7a:69:7e:10:8d:17:bc:eb:64:c2:61:
49:15:29:75:8c:fa:1c:11:1d:d5:77:52:e2:35:62:
2b:6f:50:6f:00:ab:31:25:8f:86:4c:83:5d:13:ae:
83:99:67:89:c7:42:26:b0:36:88:5a:99:cc:5c:f4:
83:05:2a:34:2f:0f:d5:4b:c5:84:75:f3:77:9a:ee:
7d:99:2d:a9:8b:a0:fc:70:ad:a1:f7:ba:de:59:fa:
d4:09:ea:00:98:84:f4:df:73:ed:e3:ee:bd:3c:5e:
b7:cf:37:bb:7a:16:b3:2a:bb:aa:88:42:82:a7:a4:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:D0:CE:A3:F5:6E:F9:88:E5:80:1D:7D:FB:AD:E8:20:1F:78:41
X509v3 Authority Key Identifier:
keyid:C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:68:3f:a2:0c:4a:d7:b9:52:7a:a5:71:a4:c7:69:da:7a:6e:
26:48:85:5c:90:c4:9a:71:8e:74:8f:0e:11:e5:93:d7:40:3b:
a8:0a:36:b4:fd:67:4f:5b:aa:0e:a2:13:51:02:2b:be:5a:be:
77:61:d7:61:51:61:3c:f6:fa:85:36:c7:9f:9f:35:b2:40:cc:
f3:b5:53:23:c0:02:24:49:08:c3:1e:82:52:04:55:e8:10:54:
55:e1:d8:97:82:41:8a:f5:30:b1:d4:8a:ff:97:de:7f:ae:16:
e2:6b:f6:b4:9e:48:3d:5e:8c:bc:de:a9:20:94:fb:e9:d7:3c:
d6:79:95:62:0a:11:1c:96:47:f6:18:e0:1c:e6:7b:02:4d:e7:
6b:89:d8:bf:bf:f0:be:d2:dc:a4:d8:d1:f9:18:bd:c6:17:b9:
aa:61:74:18:58:82:6e:14:cd:81:5a:80:ed:fd:63:99:1b:11:
49:6e:75:96:d4:6d:71:8d:2c:9c:1d:30:61:c8:84:76:4e:ae:
5e:78:78:ba:3f:b6:28:5f:76:4b:2b:d6:4c:ee:82:90:4f:d3:
8c:1b:ba:db:43:ed:45:9a:43:b4:93:20:70:9e:ef:d5:2a:c6:
e8:2b:6a:dc:3c:c0:af:97:98:a7:d6:84:5c:83:f8:2f:25:5e:
05:fa:65:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 02:34:46 2026 by rpki-client