
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json)
Hash identifier: Zdi2HMGMiLd2owkz+MK5WfzGZsALZzRaD7/FBQxciXc=
Subject key identifier: BA:E8:A4:BD:90:DB:69:1C:15:AF:08:D2:23:59:E6:67:BD:E3:07:07
Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
Manifest number: 021F
Signing time: Sat 03 Oct 2026 03:29:24 +0000
Manifest this update: Sat 03 Oct 2026 03:29:23 +0000
Manifest next update: Sat 10 Oct 2026 03:29:23 +0000
Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: xuiePVe+IRp8+jW7jw0UTXDhe1dbInmh8nYefxYiqXY=)
2: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: 9nJcymyhJdyjosWxKF37Ye2GxMONKGYPO84iI01RFGA=)
3: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: m2Uv3v7XUW3vXrCq6wyXHCyPqWh0u6BnyHOlUQ7XuZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Validity
Not Before: Oct 3 03:29:23 2026 GMT
Not After : Oct 10 03:29:23 2026 GMT
Subject: CN=6ac07694-fb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:78:a9:09:9b:8b:25:61:5d:18:91:4f:38:
0d:f5:41:2b:3c:a6:bb:3e:9b:6f:71:64:26:c6:da:
45:fa:0a:fe:2f:16:b1:7a:86:1e:da:34:6f:7f:95:
a1:8d:ac:6d:b9:a2:5b:c7:91:1a:27:72:22:55:df:
8e:55:e4:0f:f1:29:ee:74:0a:be:5a:1e:b9:38:23:
c9:87:17:3b:e3:dc:cd:64:57:c0:57:9b:5a:9e:24:
be:10:14:d6:19:30:aa:de:cc:b0:67:c1:d4:7e:94:
3a:f4:6d:8f:ae:9f:30:55:57:54:55:cb:73:e0:e4:
06:62:e1:39:ad:b6:67:35:c5:cb:73:b9:b7:3c:9b:
ad:f7:42:ab:81:66:11:b0:b7:66:f7:73:00:3b:c5:
72:fb:7f:03:68:4e:6c:ff:8b:da:b4:e1:0a:46:f9:
ac:ef:ff:93:76:91:f5:12:d1:c1:04:63:82:60:37:
9e:e9:ef:a1:30:8f:3a:8a:9e:f9:50:ac:17:d3:b2:
4e:98:56:79:80:ff:82:2e:af:31:80:0d:45:dc:99:
70:1c:5c:07:91:9b:ff:5d:1b:a8:da:5b:9e:db:b0:
b5:23:c4:cb:9e:c9:e1:59:6e:26:f7:8f:6b:8b:cd:
0e:e1:a2:ea:c9:c6:fd:1c:5e:bb:e0:35:f5:3c:a3:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:A4:BD:90:DB:69:1C:15:AF:08:D2:23:59:E6:67:BD:E3:07:07
X509v3 Authority Key Identifier:
keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:59:96:c6:09:1c:15:29:53:6c:68:3b:00:7f:08:fd:c6:47:
0b:36:a4:2e:5b:dc:2f:a6:7b:74:2a:17:3e:c8:d2:a4:87:60:
5f:09:ed:05:99:ae:16:ee:8b:e7:2b:4d:ca:94:c7:27:c9:ec:
af:e5:91:58:ca:60:51:b7:eb:75:0b:9a:44:d3:33:46:29:1d:
4f:8b:d6:d9:a8:0c:63:06:89:02:ea:36:cf:c5:51:46:17:76:
15:e5:d7:ef:5a:89:17:2a:c0:59:87:f5:4a:2c:51:06:6e:eb:
0e:37:f6:31:bf:ca:2c:37:64:b6:d0:aa:94:22:9e:25:f7:05:
76:8c:c2:a7:2b:47:c9:84:1d:d1:6a:22:b6:6e:73:20:c8:a4:
0f:05:22:c1:b0:b3:1c:6b:77:eb:ad:de:8f:40:61:1f:b9:52:
88:d5:e9:f3:f1:d9:15:73:ca:0d:7a:e5:67:44:48:27:84:75:
36:e7:5c:de:cb:01:17:a6:bc:97:2c:5b:bb:3e:c4:dc:ef:94:
a4:16:7b:75:1e:e5:16:f9:57:29:11:b0:91:8b:ee:b7:68:e9:
92:e3:eb:cb:1f:d6:89:3e:15:e2:e2:de:25:c4:8f:9c:67:09:
01:a2:b4:d4:f9:e8:1f:20:bd:42:a2:95:87:5c:4e:9a:09:f1:
e7:0c:77:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC
RUFDQkNDMkQwHhcNMjYxMDAzMDMyOTIzWhcNMjYxMDEwMDMyOTIzWjAYMRYwFAYD
VQQDEw02YWMwNzY5NC1mYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoip4qQmbiyVhXRiRTzgN9UErPKa7PptvcWQmxtpF+gr+LxaxeoYe2jRvf5Wh
jaxtuaJbx5EaJ3IiVd+OVeQP8SnudAq+Wh65OCPJhxc749zNZFfAV5taniS+EBTW
GTCq3sywZ8HUfpQ69G2Prp8wVVdUVctz4OQGYuE5rbZnNcXLc7m3PJut90KrgWYR
sLdm93MAO8Vy+38DaE5s/4vatOEKRvms7/+TdpH1EtHBBGOCYDee6e+hMI86ip75
UKwX07JOmFZ5gP+CLq8xgA1F3JlwHFwHkZv/XRuo2lue27C1I8TLnsnhWW4m949r
i80O4aLqycb9HF674DX1PKMqkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLropL2Q
22kcFa8I0iNZ5me94wcHMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz
NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6
NzBoQjAtTklRb0Mtckx6QzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR1mWxgkcFSlTbGg7AH8I/cZHCzakLlvcL6Z7dCoXPsjSpIdgXwntBZmuFu6L
5ytNypTHJ8nsr+WRWMpgUbfrdQuaRNMzRikdT4vW2agMYwaJAuo2z8VRRhd2FeXX
71qJFyrAWYf1SixRBm7rDjf2Mb/KLDdkttCqlCKeJfcFdozCpytHyYQd0Woitm5z
IMikDwUiwbCzHGt3663ej0BhH7lSiNXp8/HZFXPKDXrlZ0RIJ4R1Nudc3ssBF6a8
lyxbuz7E3O+UpBZ7dR7lFvlXKRGwkYvut2jpkuPryx/WiT4V4uLeJcSPnGcJAaK0
1PnoHyC9QqKVh1xOmgnx5wx3Uw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:09:01 2026 by rpki-client