
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
File: xT8GoF_V8dkjXh-VMPLNPOMREOI.mft (raw, json)
Hash identifier: BAGCG3HD9AbU+JNqtdutUsu7eKp83zD5Ip2h+dMgZMI=
Subject key identifier: 07:B5:B3:6B:32:DA:04:65:31:AB:71:D3:00:CA:F0:72:72:E6:04:B2
Authority key identifier: C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
Certificate issuer: /CN=A918190B/serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
Manifest number: A3
Signing time: Wed 23 Sep 2026 07:02:04 +0000
Manifest this update: Wed 23 Sep 2026 07:02:04 +0000
Manifest next update: Wed 30 Sep 2026 07:02:04 +0000
Files and hashes: 1: xT8GoF_V8dkjXh-VMPLNPOMREOI.crl (hash: gAjcz9FJw4RnaV0zNRnXAU4uK5QvBbrQ63an4E/iYAE=)
2: 3461A67021A811F182436258153D8C67.roa (hash: CnfvhJ3PR3mpLZc/i3GDghVF6JL2JkcdlNGKt7tvH9k=)
3: 329CC664C5C611F0A1D9E964C4F9AE02.roa (hash: lnx8KdODc8Z9IvWXfKLFt+dyZtSETllR99xleqZrHjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918190B, serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Validity
Not Before: Sep 23 07:02:04 2026 GMT
Not After : Sep 30 07:02:04 2026 GMT
Subject: CN=6ab3796c-db92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:e7:87:e6:f7:85:7c:12:96:28:77:12:df:
ad:59:c9:b5:7b:09:15:fc:0b:07:22:77:a0:b1:48:
49:5d:96:7d:63:db:c2:be:42:99:25:f6:68:ae:d2:
e3:52:24:3f:57:40:88:bb:69:64:1a:b0:b4:69:21:
0a:b5:cc:e0:42:c7:93:5a:80:2b:5f:3c:dc:5d:e6:
dc:25:31:08:da:82:af:f2:3b:93:32:b2:fc:c5:77:
88:76:93:99:dd:09:2c:3c:c5:c7:bf:a1:9f:5e:58:
75:a0:7e:a5:72:5e:df:61:14:8f:7b:e5:da:a5:a1:
4f:a0:fc:4b:72:af:fa:f8:54:a3:33:6a:42:d0:17:
64:0e:13:68:0d:3b:b1:6e:f9:ef:d6:26:9c:4c:70:
41:af:c0:33:ad:92:b4:e9:5b:f1:55:cd:a4:d1:4d:
ea:04:11:ac:19:13:41:03:1a:e8:a8:b1:c8:ea:b3:
f2:2c:13:b9:ad:3e:3b:e9:1f:49:f5:46:ee:50:3c:
cb:ea:cf:e3:84:d8:2d:32:57:24:b0:b3:3d:be:3a:
de:2b:ac:d6:cc:fc:0e:39:56:87:23:6b:6e:31:87:
ad:30:a0:12:b2:b8:e8:e8:40:f0:4d:9e:b4:7e:a4:
51:af:93:bc:b6:26:1d:88:07:ab:50:f2:57:b8:63:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B5:B3:6B:32:DA:04:65:31:AB:71:D3:00:CA:F0:72:72:E6:04:B2
X509v3 Authority Key Identifier:
keyid:C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:7a:89:49:79:62:5a:86:d6:e6:b5:c1:70:85:27:57:ec:d8:
03:e1:dd:14:42:c2:9a:21:4d:59:d4:68:28:f6:71:b7:50:f1:
79:cd:76:57:60:ba:3f:76:a9:bc:e1:d0:bc:36:de:08:f1:d6:
aa:55:80:01:69:79:80:39:44:72:da:30:22:1e:20:cf:18:b5:
b1:99:5f:ff:6e:cf:40:86:d3:f1:d0:41:37:e7:03:29:6f:62:
e6:4f:81:03:c2:7d:95:31:73:92:23:6f:22:59:c5:58:ee:7d:
59:3a:f2:26:aa:ac:90:87:81:6f:52:90:19:bd:9f:b0:88:db:
cf:13:30:4d:73:ec:91:e5:c4:65:62:5b:f5:cf:70:5a:0c:e2:
75:55:c3:dc:58:b6:d3:2a:ae:b1:84:33:0e:fe:66:6a:96:24:
ea:bf:33:12:14:b7:d2:68:42:00:60:58:fc:e2:96:7f:20:65:
6c:9a:0d:f6:cb:57:15:f3:ab:b2:c1:ba:9b:b3:c8:46:0e:38:
8b:97:8c:7c:f1:d3:09:c6:8b:8b:38:42:77:81:a4:37:2d:bf:
2a:04:e2:ed:66:cc:c0:c4:b7:31:87:40:a1:13:8a:62:b5:b2:
1c:80:cc:cb:f3:7f:84:bf:80:7c:81:64:3f:39:7e:51:1b:70:
91:70:f2:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE5MEIxMTAvBgNVBAUTKEM1M0YwNkEwNUZENUYxRDkyMzVFMUY5NTMwRjJDRDND
RTMxMTEwRTIwHhcNMjYwOTIzMDcwMjA0WhcNMjYwOTMwMDcwMjA0WjAYMRYwFAYD
VQQDEw02YWIzNzk2Yy1kYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5Tnh+b3hXwSlih3Et+tWcm1ewkV/AsHInegsUhJXZZ9Y9vCvkKZJfZortLj
UiQ/V0CIu2lkGrC0aSEKtczgQseTWoArXzzcXebcJTEI2oKv8juTMrL8xXeIdpOZ
3QksPMXHv6GfXlh1oH6lcl7fYRSPe+XapaFPoPxLcq/6+FSjM2pC0BdkDhNoDTux
bvnv1iacTHBBr8AzrZK06VvxVc2k0U3qBBGsGRNBAxroqLHI6rPyLBO5rT476R9J
9UbuUDzL6s/jhNgtMlcksLM9vjreK6zWzPwOOVaHI2tuMYetMKASsrjo6EDwTZ60
fqRRr5O8tiYdiAerUPJXuGOuRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAe1s2sy
2gRlMatx0wDK8HJy5gSyMB8GA1UdIwQYMBaAFMU/BqBf1fHZI14flTDyzTzjERDi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTkwQi9BMTQwQzE1MkM1
QzUxMUYwQUFBNENGMEZDNEY5QUUwMi94VDhHb0ZfVjhka2pYaC1WTVBMTlBPTVJF
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hUOEdvRl9WOGRralhoLVZNUExOUE9NUkVPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTkwQi9BMTQwQzE1MkM1QzUxMUYwQUFBNENGMEZDNEY5QUUwMi94VDhHb0ZfVjhk
a2pYaC1WTVBMTlBPTVJFT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZHqJSXliWobW5rXBcIUnV+zYA+HdFELCmiFNWdRoKPZxt1Dxec12V2C6P3ap
vOHQvDbeCPHWqlWAAWl5gDlEctowIh4gzxi1sZlf/27PQIbT8dBBN+cDKW9i5k+B
A8J9lTFzkiNvIlnFWO59WTryJqqskIeBb1KQGb2fsIjbzxMwTXPskeXEZWJb9c9w
WgzidVXD3Fi20yqusYQzDv5mapYk6r8zEhS30mhCAGBY/OKWfyBlbJoN9stXFfOr
ssG6m7PIRg44i5eMfPHTCcaLizhCd4GkNy2/KgTi7WbMwMS3MYdAoROKYrWyHIDM
y/N/hL+AfIFkPzl+URtwkXDyDQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:17:25 2026 by rpki-client