
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json)
Hash identifier: pGCSbabXywq4EklkG7IgEyEl7NNvaOSEISclP7GA+H8=
Subject key identifier: 6F:61:81:02:32:7B:30:FA:DF:BD:65:79:1F:96:D6:A1:24:31:5C:37
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial: 35C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
Manifest number: 3592
Signing time: Sat 10 Oct 2026 15:10:15 +0000
Manifest this update: Sat 10 Oct 2026 15:10:14 +0000
Manifest next update: Sat 17 Oct 2026 15:10:14 +0000
Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: SzVcOluIrHEY11L3VhzE4c+2FaZpK6P1r0WeIampjTY=)
2: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: IHiT2JkC8madnsWfQDkJBYO++lG67IBJ1W4/S66TXLY=)
3: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: 5cXLpNEPj2n6/HEGy8/26JkT8yzOfvZLJ/SaAIq5f84=)
4: 504CB1588D3911F093856C71C4F9AE02.roa (hash: XbsPrmHsv3A3kJ0QH0nWqPm+aVwo38LG2afXIGK/eHk=)
5: AF01BDAE331211F1A2C10B79B1833773.roa (hash: +lp+LJ18Jwi0gflyPYkZccPDvT37HJQu97mBM2XRD3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13765 (0x35c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Validity
Not Before: Oct 10 15:10:14 2026 GMT
Not After : Oct 17 15:10:14 2026 GMT
Subject: CN=6aca5556-c21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:24:64:4d:db:f9:cf:09:fb:da:e2:77:1c:
5a:a4:19:d3:d1:e5:3b:cd:13:23:96:4f:e0:c7:7c:
c8:51:bb:7e:1e:2d:22:09:ef:22:8a:8d:e8:d8:03:
08:9d:27:25:be:f4:0d:99:26:4c:cb:bb:0b:b8:6e:
22:f8:6b:bd:9c:7d:60:84:24:b6:54:3b:b6:05:42:
03:d7:8f:db:be:85:1c:11:a2:92:94:39:1f:54:ad:
7b:b0:94:bc:a8:6a:c4:c3:16:21:a9:9f:1c:74:59:
e7:07:d9:4b:42:76:e5:01:be:af:4a:d6:05:4b:46:
f9:9b:f7:58:02:55:7d:6a:9e:7a:2f:74:a2:0f:ac:
ed:6f:10:b3:17:bc:57:30:31:3d:6a:08:50:f4:d3:
1c:99:c7:50:10:d3:95:ec:95:bf:42:62:82:78:5f:
e1:40:76:55:5c:14:46:3b:78:bb:83:4c:90:4a:ce:
13:bb:76:88:7c:e4:7a:f0:2e:e9:fb:1c:ea:48:fc:
b7:06:4f:c0:b5:18:0f:4c:d3:6e:ee:8d:c5:f0:e3:
2f:75:36:86:a4:78:44:38:be:c3:09:22:75:91:34:
c2:cf:bc:89:47:84:f2:1b:b3:85:aa:c7:5e:50:86:
86:07:7d:34:69:73:68:7b:ea:87:25:88:f1:88:d5:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:61:81:02:32:7B:30:FA:DF:BD:65:79:1F:96:D6:A1:24:31:5C:37
X509v3 Authority Key Identifier:
keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2b:17:83:87:2f:61:07:1f:ab:36:d4:f5:92:fd:52:de:0a:
95:f1:93:03:6a:2a:69:e9:19:3b:90:ff:0e:5f:07:25:db:7b:
6e:cc:76:cf:7b:cb:7d:c5:b1:19:d7:d7:7c:d9:19:19:c8:10:
a7:eb:16:b7:e9:2a:7a:13:65:0a:0e:a2:5b:6d:79:63:4e:db:
64:0a:25:0f:a4:bb:e2:49:74:13:3a:2b:0a:eb:72:bd:ae:0b:
cd:e6:7f:f8:58:3f:d7:6e:77:30:af:ab:0b:dd:b7:ac:ee:03:
ba:fc:9a:af:ef:1f:ac:79:00:a7:cd:6c:26:af:8d:d6:f0:6a:
44:4f:cc:e4:d2:18:be:bd:f9:09:c5:eb:e6:3c:b4:06:c0:79:
43:58:c4:2b:53:77:57:b0:e6:f5:25:92:ac:aa:92:71:81:e8:
78:ea:78:d4:e8:7e:92:91:e3:2e:7a:fa:6f:2d:0a:c0:79:2c:
62:e3:b0:11:64:b5:85:f4:fe:a8:f8:49:9a:4b:af:b8:e2:fd:
bb:0c:b2:25:52:d0:60:ee:a0:eb:37:6a:2f:c4:c1:3e:51:1a:
23:9a:0c:4a:66:7c:a9:14:92:7e:34:39:73:30:bd:4c:5d:56:
51:41:f9:90:c9:26:a0:dc:be:a2:ab:e0:f2:de:9d:c1:5e:3f:
40:b1:75:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2
MjUzMDE3ODMwHhcNMjYxMDEwMTUxMDE0WhcNMjYxMDE3MTUxMDE0WjAYMRYwFAYD
VQQDEw02YWNhNTU1Ni1jMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz9UkZE3b+c8J+9ridxxapBnT0eU7zRMjlk/gx3zIUbt+Hi0iCe8iio3o2AMI
nSclvvQNmSZMy7sLuG4i+Gu9nH1ghCS2VDu2BUID14/bvoUcEaKSlDkfVK17sJS8
qGrEwxYhqZ8cdFnnB9lLQnblAb6vStYFS0b5m/dYAlV9ap56L3SiD6ztbxCzF7xX
MDE9aghQ9NMcmcdQENOV7JW/QmKCeF/hQHZVXBRGO3i7g0yQSs4Tu3aIfOR68C7p
+xzqSPy3Bk/AtRgPTNNu7o3F8OMvdTaGpHhEOL7DCSJ1kTTCz7yJR4TyG7OFqsde
UIaGB300aXNoe+qHJYjxiNWYBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9hgQIy
ezD6371leR+W1qEkMVw3MB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE
QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5
bG92dDhpX0dFSlJpVXdGNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwisXg4cvYQcfqzbU9ZL9Ut4KlfGTA2oqaekZO5D/Dl8HJdt7bsx2z3vLfcWx
GdfXfNkZGcgQp+sWt+kqehNlCg6iW215Y07bZAolD6S74kl0EzorCutyva4LzeZ/
+Fg/1253MK+rC923rO4Duvyar+8frHkAp81sJq+N1vBqRE/M5NIYvr35CcXr5jy0
BsB5Q1jEK1N3V7Dm9SWSrKqScYHoeOp41Oh+kpHjLnr6by0KwHksYuOwEWS1hfT+
qPhJmkuvuOL9uwyyJVLQYO6g6zdqL8TBPlEaI5oMSmZ8qRSSfjQ5czC9TF1WUUH5
kMkmoNy+oqvg8t6dwV4/QLF1/w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:07:39 2026 by rpki-client