
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json)
Hash identifier: D2gmtenc4oNZa8z/l4g3WmJ/A8pEjg9AFre7siagd0I=
Subject key identifier: D8:04:6B:9F:96:07:78:16:C4:8E:65:CB:0F:D6:BD:C8:CC:A2:58:E9
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial: 05D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
Manifest number: 05BA
Signing time: Wed 28 Oct 2026 23:24:01 +0000
Manifest this update: Wed 28 Oct 2026 23:24:00 +0000
Manifest next update: Wed 04 Nov 2026 23:24:00 +0000
Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: g82icHu+x1GdWrs0J/t7G9CzOP3wwNuI7A3Np7u07js=)
2: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: XRPA2JKWpTIHSFaMOHgkHY8yCfbif5wXEREcy191bJ4=)
3: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: et9HDrh+GN5yOnO0QC3PHWe6pVv8xUnM/31aeD6iTS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 23:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Validity
Not Before: Oct 28 23:24:00 2026 GMT
Not After : Nov 4 23:24:00 2026 GMT
Subject: CN=6ae28411-ec4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:d4:ea:18:a6:2e:fd:1a:13:3f:d9:e4:82:
9d:f6:36:98:54:3d:91:c3:db:db:3a:eb:97:da:c3:
23:a6:a6:72:80:46:7d:4b:be:83:ed:3a:1b:8e:8e:
70:ad:6c:1d:9f:ea:e1:eb:62:7a:df:a0:93:ce:64:
9a:c0:2d:fc:4b:29:bf:2f:b2:58:88:13:54:b6:38:
ef:97:ad:00:8f:fd:02:5a:6d:91:66:0a:ad:31:03:
c5:f3:12:be:f4:95:71:e9:66:92:27:7c:d1:6d:3b:
95:41:34:f3:cf:ce:f8:fb:e3:e1:76:17:6d:05:30:
02:4c:a4:86:ae:2f:14:a2:41:fb:ac:6a:12:a0:22:
86:73:ba:c7:18:a6:7d:e2:23:b0:66:31:74:a4:9b:
7b:d0:86:fd:b7:2b:2b:c4:f6:30:10:1a:7d:45:77:
01:fc:48:65:b5:74:a2:5a:c4:38:8b:b9:4b:76:ec:
e1:f7:05:1b:cd:bf:b2:a2:56:45:d1:8d:44:53:df:
28:76:1d:95:ff:0b:ce:09:12:ac:25:83:96:a2:18:
5c:f7:b5:9c:b6:0f:2b:21:95:26:31:4b:b3:93:87:
10:eb:f1:07:f2:a8:be:6e:8a:9c:78:5f:69:77:13:
50:ad:e4:4f:28:9e:97:28:54:c0:19:aa:f0:e0:8b:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:04:6B:9F:96:07:78:16:C4:8E:65:CB:0F:D6:BD:C8:CC:A2:58:E9
X509v3 Authority Key Identifier:
keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:11:ac:31:65:35:47:9e:ea:68:08:dd:59:ba:bf:b4:90:1c:
65:e1:a6:a8:de:66:5c:0c:cc:56:ed:c4:e7:9f:b7:45:79:3d:
c7:58:ba:0e:ce:00:37:a5:7f:68:89:af:78:34:9d:d5:d7:2c:
9a:f9:ce:6f:c5:77:2a:46:b8:65:a4:23:67:c1:6a:3d:6f:80:
58:b5:a4:12:f1:e7:2f:d3:77:18:ed:b7:c9:e6:25:e2:a5:99:
e1:c3:ab:b6:0e:7b:05:13:ed:f9:e5:21:a0:a2:fc:98:f1:ad:
ca:bd:fd:21:da:c3:d7:83:47:5d:8b:3a:7f:6c:64:e7:81:0a:
f7:6d:c4:ef:63:3f:55:ab:d5:b3:8a:1e:1f:ce:5c:5f:a4:0d:
78:83:e4:d0:89:9a:52:1f:8d:c4:3b:fa:53:e4:35:20:04:07:
e5:44:db:61:41:60:fc:67:ce:cc:a1:06:c5:13:b6:68:d2:fc:
6c:71:9b:a0:8b:b9:21:6a:ac:5e:8c:44:5c:1a:7b:82:d1:91:
3e:7c:4a:ad:cb:ac:ce:36:96:c8:33:d6:8a:d9:f9:b4:6f:5a:
bd:ca:8c:1a:c1:57:a6:23:b9:8f:e2:01:99:5f:dc:77:86:92:
82:21:f2:3c:80:86:d7:0c:40:9d:a3:52:07:78:95:20:b7:e5:
5d:93:7d:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE
MkE3RDAxNkUwHhcNMjYxMDI4MjMyNDAwWhcNMjYxMTA0MjMyNDAwWjAYMRYwFAYD
VQQDEw02YWUyODQxMS1lYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtgvU6himLv0aEz/Z5IKd9jaYVD2Rw9vbOuuX2sMjpqZygEZ9S76D7Tobjo5w
rWwdn+rh62J636CTzmSawC38Sym/L7JYiBNUtjjvl60Aj/0CWm2RZgqtMQPF8xK+
9JVx6WaSJ3zRbTuVQTTzz874++PhdhdtBTACTKSGri8UokH7rGoSoCKGc7rHGKZ9
4iOwZjF0pJt70Ib9tysrxPYwEBp9RXcB/EhltXSiWsQ4i7lLduzh9wUbzb+yolZF
0Y1EU98odh2V/wvOCRKsJYOWohhc97Wctg8rIZUmMUuzk4cQ6/EH8qi+boqceF9p
dxNQreRPKJ6XKFTAGarw4ItVawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgEa5+W
B3gWxI5lyw/WvcjMoljpMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB
MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTc5MS8xOUM2OEQwNjNBMDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQ
WEJpU2NqTU52Y3JTcDlBVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtBGsMWU1R57qaAjdWbq/tJAcZeGmqN5mXAzMVu3E55+3RXk9x1i6Ds4AN6V/
aImveDSd1dcsmvnOb8V3Kka4ZaQjZ8FqPW+AWLWkEvHnL9N3GO23yeYl4qWZ4cOr
tg57BRPt+eUhoKL8mPGtyr39IdrD14NHXYs6f2xk54EK923E72M/VavVs4oeH85c
X6QNeIPk0ImaUh+NxDv6U+Q1IAQH5UTbYUFg/GfOzKEGxRO2aNL8bHGboIu5IWqs
XoxEXBp7gtGRPnxKrcuszjaWyDPWitn5tG9avcqMGsFXpiO5j+IBmV/cd4aSgiHy
PICG1wxAnaNSB3iVILflXZN9Tw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 14:49:10 2026 by rpki-client