
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
File: XQ11AElW7cyrm4QnGnNA5jhV_4o.mft (raw, json)
Hash identifier: ZQjjinF2rEaMjHKI3T0eQmNVFhMB3oYDxnwcHtFGG4Y=
Subject key identifier: 73:5B:4C:4C:31:45:B1:8B:C1:4B:CC:FE:52:CD:0A:E9:C1:4D:0A:12
Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A
Certificate issuer: /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
Certificate serial: 0819
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
Manifest number: 0804
Signing time: Fri 04 Sep 2026 21:07:34 +0000
Manifest this update: Fri 04 Sep 2026 21:07:33 +0000
Manifest next update: Fri 11 Sep 2026 21:07:33 +0000
Files and hashes: 1: XQ11AElW7cyrm4QnGnNA5jhV_4o.crl (hash: lT6/kBS/kxtdIuGddmaBVYhO3Tnqi/xwFGOtUiu4ct8=)
2: 688EAE1E8A1911EC94921D85C4F9AE02.roa (hash: cm2Fl2NPATbgGQFwsosZWB6VAsdQeNU6CjDmIcGsXUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl
rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BC39, serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
Validity
Not Before: Sep 4 21:07:33 2026 GMT
Not After : Sep 11 21:07:33 2026 GMT
Subject: CN=6a9b3315-4924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:94:77:66:6e:88:86:1c:c6:c6:93:d3:46:
db:73:a7:17:39:ee:5f:d3:24:d9:fa:4f:aa:fb:a5:
8e:19:c0:d0:ee:f1:45:30:d1:da:15:ba:cc:00:ab:
4e:80:d4:10:fb:48:af:7c:9c:40:49:ff:0d:a6:ad:
86:7a:ac:49:50:1e:79:84:01:09:f5:3a:c3:4d:8b:
d8:51:57:3a:f9:5e:b6:8c:59:2b:23:97:50:ba:f5:
30:ba:f3:8e:33:17:ff:f8:f8:a4:01:35:bf:fc:97:
fa:22:a8:71:14:03:a6:41:b4:28:a6:b7:cf:82:d4:
e9:53:04:5d:9e:8a:d1:b1:2d:6e:1c:be:03:cb:fa:
60:8e:38:5a:f6:db:c5:f5:02:05:89:97:ae:de:42:
11:8d:23:b4:b8:b5:a7:0c:f9:98:54:03:d9:86:71:
e7:53:b2:f5:2a:22:ad:2a:45:9a:8f:cc:ec:1e:d9:
64:55:c4:3a:d5:03:62:da:eb:61:b9:1b:74:e5:99:
bc:df:15:4a:22:79:ff:cd:b6:68:0c:7b:e8:f4:79:
5f:5f:1c:c6:8b:58:a4:1a:a1:09:49:27:3b:c7:7b:
de:d2:c5:47:e2:d7:3b:e0:03:7a:cc:91:18:a7:ed:
02:30:04:9e:09:ff:17:34:3d:07:fc:8c:a2:a3:0c:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:4C:4C:31:45:B1:8B:C1:4B:CC:FE:52:CD:0A:E9:C1:4D:0A:12
X509v3 Authority Key Identifier:
keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:30:75:0b:82:89:2a:12:98:8e:7f:e0:c0:55:69:98:bf:13:
e3:5d:a3:6d:9d:ca:c7:21:0f:4c:1b:a2:ce:32:5c:6c:95:63:
dc:fa:bb:23:aa:22:8d:21:9f:99:2c:cd:83:68:0f:b9:b6:89:
62:87:76:27:73:ed:96:02:60:66:80:4e:ef:e8:a8:9c:ca:89:
75:fc:47:3e:0e:da:f0:dc:74:cc:9a:b5:2f:a8:ff:69:f9:0a:
25:40:d7:ee:90:ea:bd:38:32:99:eb:ad:cb:bb:9e:25:61:bc:
83:9d:b4:20:e1:04:70:b6:5b:97:07:05:64:06:2e:1f:49:95:
63:dc:c7:7c:99:ea:56:86:ff:1c:6c:e6:90:37:82:ce:48:f1:
83:b3:66:a5:4e:4a:3e:57:69:5f:70:48:17:dc:f7:68:a6:37:
89:c1:a9:1d:65:64:51:8f:de:a4:69:48:5a:ae:68:52:e0:d9:
e6:7c:c6:3b:60:0d:70:e3:1c:63:44:d9:3c:92:83:66:b9:c8:
cd:7c:a7:3c:19:31:ea:90:4b:e7:4a:fa:97:99:b9:a2:4c:ae:
88:c9:f4:10:57:9a:09:59:71:96:1a:2a:4a:b0:9f:14:ab:de:
e5:36:5c:5a:36:d6:95:82:4c:37:f8:a0:a6:38:56:54:15:6c:
06:bf:5b:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJDMzkxMTAvBgNVBAUTKDVEMEQ3NTAwNDk1NkVEQ0NBQjlCODQyNzFBNzM0MEU2
Mzg1NUZGOEEwHhcNMjYwOTA0MjEwNzMzWhcNMjYwOTExMjEwNzMzWjAYMRYwFAYD
VQQDEw02YTliMzMxNS00OTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1lOUd2ZuiIYcxsaT00bbc6cXOe5f0yTZ+k+q+6WOGcDQ7vFFMNHaFbrMAKtO
gNQQ+0ivfJxASf8Npq2GeqxJUB55hAEJ9TrDTYvYUVc6+V62jFkrI5dQuvUwuvOO
Mxf/+PikATW//Jf6IqhxFAOmQbQoprfPgtTpUwRdnorRsS1uHL4Dy/pgjjha9tvF
9QIFiZeu3kIRjSO0uLWnDPmYVAPZhnHnU7L1KiKtKkWaj8zsHtlkVcQ61QNi2uth
uRt05Zm83xVKInn/zbZoDHvo9HlfXxzGi1ikGqEJSSc7x3ve0sVH4tc74AN6zJEY
p+0CMASeCf8XND0H/IyiowwBVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHNbTEwx
RbGLwUvM/lLNCunBTQoSMB8GA1UdIwQYMBaAFF0NdQBJVu3Mq5uEJxpzQOY4Vf+K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkMzOS9CMzdCMTU4RTNG
MjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdjeXJtNFFuR25OQTVqaFZf
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hRMTFBRWxXN2N5cm00UW5Hbk5BNWpoVl80by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkMzOS9CMzdCMTU4RTNGMjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdj
eXJtNFFuR25OQTVqaFZfNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmDB1C4KJKhKYjn/gwFVpmL8T412jbZ3KxyEPTBuizjJcbJVj3Pq7I6oijSGf
mSzNg2gPubaJYod2J3PtlgJgZoBO7+ionMqJdfxHPg7a8Nx0zJq1L6j/afkKJUDX
7pDqvTgymeuty7ueJWG8g520IOEEcLZblwcFZAYuH0mVY9zHfJnqVob/HGzmkDeC
zkjxg7NmpU5KPldpX3BIF9z3aKY3icGpHWVkUY/epGlIWq5oUuDZ5nzGO2ANcOMc
Y0TZPJKDZrnIzXynPBkx6pBL50r6l5m5okyuiMn0EFeaCVlxlhoqSrCfFKve5TZc
WjbWlYJMN/igpjhWVBVsBr9bxg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:48:03 2026 by rpki-client