
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json)
Hash identifier: SNcx34wR7uIj9rOi+aTz5Uphrlj/zAJ7DK9BNFsiMLk=
Subject key identifier: 0D:18:F2:71:4C:20:77:D8:97:E8:9D:69:30:28:C0:0C:C6:A6:86:5F
Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Certificate serial: 0387
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
Manifest number: 037E
Signing time: Sat 03 Oct 2026 01:06:20 +0000
Manifest this update: Sat 03 Oct 2026 01:06:20 +0000
Manifest next update: Sat 10 Oct 2026 01:06:20 +0000
Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: /vdmca1JQL+jmsZnPXk06VC0NSmXmWDMd2FZz04lJl4=)
2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: 6tX/ppxMQbPSi1+Z7rMVoOSNeQ/9yxMMZw0GpFlQ8jY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178ACB, serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Validity
Not Before: Oct 3 01:06:20 2026 GMT
Not After : Oct 10 01:06:20 2026 GMT
Subject: CN=6ac0550c-ec99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:6e:4c:aa:55:8c:8c:d0:29:7c:63:b8:da:
ce:ce:aa:a6:22:f1:8f:cd:35:d2:d9:6c:a6:10:72:
4a:2d:40:d9:4c:9a:a6:fc:1c:ba:4a:ac:dc:7e:9a:
3f:3a:2f:d6:67:eb:94:27:b4:4f:32:eb:53:f5:9e:
28:e3:5f:97:47:aa:65:8a:91:3d:61:22:f9:ac:67:
ba:39:f5:4b:ad:f0:1f:37:51:db:70:33:c2:da:e5:
7c:17:3e:b8:d6:bb:40:b8:5b:71:c1:6d:dd:3c:df:
39:80:a1:84:13:94:32:41:90:2b:37:92:81:31:27:
50:91:0f:60:5f:9d:37:c6:09:e5:fe:20:12:4d:a3:
87:25:95:99:15:19:53:a0:d9:e9:e9:43:c2:e1:ab:
04:ce:c9:53:46:ae:28:92:0c:52:66:66:0d:47:3a:
3f:62:24:42:0c:72:3e:10:66:f0:a6:ed:27:ba:7e:
c0:cf:42:49:29:73:40:ca:18:3d:d3:41:77:c4:d7:
5d:c5:a1:34:08:49:a5:24:40:92:65:f8:17:87:3f:
c8:bd:57:ca:c0:37:c3:32:a6:0b:42:7f:9f:ed:fe:
ac:14:ed:cf:0d:e8:19:53:3e:30:e6:e1:96:d7:b5:
9c:f2:a3:61:e7:60:96:a8:2a:c8:5c:68:cb:ff:b7:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:18:F2:71:4C:20:77:D8:97:E8:9D:69:30:28:C0:0C:C6:A6:86:5F
X509v3 Authority Key Identifier:
keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:e0:71:88:10:33:55:58:12:a3:d1:f5:70:6c:78:d2:8d:f6:
aa:f1:9d:c1:c2:19:f5:6d:cc:d1:68:d1:26:e7:93:97:02:19:
fa:c7:b8:78:6a:df:6f:f9:64:37:45:aa:f3:95:08:c7:b4:64:
b0:0e:fe:30:3b:17:c9:6c:4f:03:9b:68:c0:3c:47:88:7d:59:
6c:62:88:a6:21:8a:24:bd:68:dc:42:fb:82:87:db:a4:d9:b9:
b0:63:6e:35:e5:19:54:1b:d9:1a:e3:d6:8d:fe:a6:04:98:f8:
29:60:e5:6c:99:cd:43:af:90:66:c6:e0:ed:a6:e6:35:3d:8b:
81:96:f1:85:7d:25:79:08:a1:0b:c4:75:34:d6:6a:83:c2:8e:
75:14:4d:ba:bc:47:27:ad:eb:8f:28:e5:4c:73:03:8b:cf:11:
2b:f7:a6:a5:ea:9a:4d:86:93:fd:ac:fd:ac:f0:bd:f3:9d:51:
60:ee:74:c4:3d:6b:17:8d:34:16:ee:37:24:f9:eb:7a:0c:30:
86:9e:74:fb:b3:98:af:4c:f3:9e:a2:d1:46:28:f6:0f:73:fd:
c2:12:29:09:0a:df:0e:e6:cf:6e:c7:40:2f:03:2d:78:e7:c2:
24:12:3c:69:db:79:04:40:f7:c1:9e:95:06:94:17:a9:8e:9a:
69:ec:ce:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBQ0IxMTAvBgNVBAUTKDVDMjdENTNEMEYyMzgxM0M4RUExNjM4QUYwNkM4RDM0
RDhGMkRGRjEwHhcNMjYxMDAzMDEwNjIwWhcNMjYxMDEwMDEwNjIwWjAYMRYwFAYD
VQQDEw02YWMwNTUwYy1lYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZtuTKpVjIzQKXxjuNrOzqqmIvGPzTXS2WymEHJKLUDZTJqm/By6Sqzcfpo/
Oi/WZ+uUJ7RPMutT9Z4o41+XR6plipE9YSL5rGe6OfVLrfAfN1HbcDPC2uV8Fz64
1rtAuFtxwW3dPN85gKGEE5QyQZArN5KBMSdQkQ9gX503xgnl/iASTaOHJZWZFRlT
oNnp6UPC4asEzslTRq4okgxSZmYNRzo/YiRCDHI+EGbwpu0nun7Az0JJKXNAyhg9
00F3xNddxaE0CEmlJECSZfgXhz/IvVfKwDfDMqYLQn+f7f6sFO3PDegZUz4w5uGW
17Wc8qNh52CWqCrIXGjL/7df7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0Y8nFM
IHfYl+idaTAowAzGpoZfMB8GA1UdIwQYMBaAFFwn1T0PI4E8jqFjivBsjTTY8t/x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFDQi81MjNBOEY1NjBC
QTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdUeU9vV09LOEd5Tk5Oankz
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hDZlZQUThqZ1R5T29XT0s4R3lOTk5qeTNfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEFDQi81MjNBOEY1NjBCQTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdU
eU9vV09LOEd5Tk5OankzX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM+BxiBAzVVgSo9H1cGx40o32qvGdwcIZ9W3M0WjRJueTlwIZ+se4eGrfb/lk
N0Wq85UIx7RksA7+MDsXyWxPA5towDxHiH1ZbGKIpiGKJL1o3EL7gofbpNm5sGNu
NeUZVBvZGuPWjf6mBJj4KWDlbJnNQ6+QZsbg7abmNT2LgZbxhX0leQihC8R1NNZq
g8KOdRRNurxHJ63rjyjlTHMDi88RK/empeqaTYaT/az9rPC9851RYO50xD1rF400
Fu43JPnregwwhp50+7OYr0zznqLRRij2D3P9whIpCQrfDubPbsdALwMteOfCJBI8
adt5BED3wZ6VBpQXqY6aaezOqw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:49:06 2026 by rpki-client