
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json)
Hash identifier: Y+ADW1W9/QpGXxZpRiMt4GjPUn6L6C1sqaPLZJhSyrA=
Subject key identifier: 95:5B:38:79:3D:10:64:BE:35:19:07:5D:F6:A3:F5:9F:3C:24:04:3C
Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
Manifest number: 022B
Signing time: Tue 27 Oct 2026 02:57:04 +0000
Manifest this update: Tue 27 Oct 2026 02:57:04 +0000
Manifest next update: Tue 03 Nov 2026 02:57:04 +0000
Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: ltOg1dnLvbNBnim8MKbq33ceNmOQhv9j2sF/hJ18ahE=)
2: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: 9nJcymyhJdyjosWxKF37Ye2GxMONKGYPO84iI01RFGA=)
3: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: m2Uv3v7XUW3vXrCq6wyXHCyPqWh0u6BnyHOlUQ7XuZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Validity
Not Before: Oct 27 02:57:04 2026 GMT
Not After : Nov 3 02:57:04 2026 GMT
Subject: CN=6ae01300-2a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:20:05:71:ae:e4:09:b0:7d:9d:b6:05:3b:
11:96:40:b0:c6:b9:99:d8:19:b5:fb:1c:1d:81:9e:
78:ab:c4:45:2d:f1:12:c8:b6:39:be:e1:25:ce:f1:
2c:04:01:ca:0a:03:bd:6c:b6:ec:ca:ac:ab:95:82:
43:b4:31:3b:58:50:42:3e:13:de:71:8b:17:eb:20:
3c:2f:6a:5f:9f:dc:25:09:02:38:2d:2f:d3:f4:36:
ba:72:56:f9:a0:a8:f9:77:55:b7:67:d2:61:f8:91:
27:21:54:99:d8:c7:d8:f8:49:ec:73:5d:26:68:7a:
d4:ba:d9:bb:7e:36:b5:d5:42:a4:e4:cb:94:cf:4d:
02:68:e9:e9:89:2b:91:b5:45:af:35:ce:fc:99:7b:
fa:8e:42:42:3a:4a:75:ec:c6:c0:49:8c:44:c2:59:
83:23:ef:ec:88:ee:fd:82:66:fb:5c:13:30:aa:23:
fc:2b:18:6e:b9:c2:ef:31:1d:2f:e5:60:4d:43:e6:
0a:3a:33:d8:d4:ce:51:df:03:23:d5:59:89:e4:18:
c1:7f:83:41:9c:0a:3b:d0:4e:3a:55:41:06:73:41:
a9:38:c7:79:9d:5c:49:ba:99:13:9f:d6:f4:fc:8f:
aa:c4:9d:8d:27:8d:83:8b:c5:e7:d3:18:87:17:fd:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5B:38:79:3D:10:64:BE:35:19:07:5D:F6:A3:F5:9F:3C:24:04:3C
X509v3 Authority Key Identifier:
keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ba:8d:d9:c0:4e:09:d6:47:30:17:8d:4d:69:39:54:57:bc:
bf:0f:b2:f3:38:71:2d:11:f7:12:d6:94:4d:ff:2a:d0:8f:d0:
4e:43:d1:46:17:14:3a:ef:77:27:13:59:93:c6:c5:76:5b:0f:
74:a4:d1:96:b7:e6:2d:27:b1:3c:c9:96:7a:cd:8f:76:c1:08:
94:ad:2f:19:fd:6d:0b:bb:b3:82:e7:e9:a7:3a:88:5e:99:ab:
d1:ec:21:b7:b8:ae:84:79:96:03:be:26:44:e2:c8:bc:3e:9c:
91:ee:62:c1:ca:23:87:3a:3d:30:ed:2e:d9:30:d3:08:80:36:
89:ff:3e:60:9e:25:6b:f1:0c:e6:ef:b5:29:bf:39:ad:35:ee:
c5:ee:fb:3e:b2:37:26:03:31:63:b8:28:54:c6:8f:fd:7b:57:
02:b2:98:f4:26:a6:cc:91:2e:94:ff:c5:47:ad:dc:0f:08:4e:
dc:55:24:ea:ed:89:1f:98:95:4f:bc:99:24:b6:09:e6:54:7a:
bd:fb:e8:cb:12:84:30:47:32:43:9b:64:40:3e:47:70:65:9f:
f1:b5:f1:d7:bf:52:28:d5:9d:31:88:df:4a:28:83:e0:43:fb:
51:05:5f:e8:8c:6b:27:82:0c:9e:e6:10:d7:f9:2f:bb:24:32:
90:7d:9a:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC
RUFDQkNDMkQwHhcNMjYxMDI3MDI1NzA0WhcNMjYxMTAzMDI1NzA0WjAYMRYwFAYD
VQQDEw02YWUwMTMwMC0yYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqVQgBXGu5AmwfZ22BTsRlkCwxrmZ2Bm1+xwdgZ54q8RFLfESyLY5vuElzvEs
BAHKCgO9bLbsyqyrlYJDtDE7WFBCPhPecYsX6yA8L2pfn9wlCQI4LS/T9Da6clb5
oKj5d1W3Z9Jh+JEnIVSZ2MfY+Ensc10maHrUutm7fja11UKk5MuUz00CaOnpiSuR
tUWvNc78mXv6jkJCOkp17MbASYxEwlmDI+/siO79gmb7XBMwqiP8KxhuucLvMR0v
5WBNQ+YKOjPY1M5R3wMj1VmJ5BjBf4NBnAo70E46VUEGc0GpOMd5nVxJupkTn9b0
/I+qxJ2NJ42Di8Xn0xiHF/0r+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVbOHk9
EGS+NRkHXfaj9Z88JAQ8MB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz
NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6
NzBoQjAtTklRb0Mtckx6QzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGrqN2cBOCdZHMBeNTWk5VFe8vw+y8zhxLRH3EtaUTf8q0I/QTkPRRhcUOu93
JxNZk8bFdlsPdKTRlrfmLSexPMmWes2PdsEIlK0vGf1tC7uzgufppzqIXpmr0ewh
t7iuhHmWA74mROLIvD6cke5iwcojhzo9MO0u2TDTCIA2if8+YJ4la/EM5u+1Kb85
rTXuxe77PrI3JgMxY7goVMaP/XtXArKY9CamzJEulP/FR63cDwhO3FUk6u2JH5iV
T7yZJLYJ5lR6vfvoyxKEMEcyQ5tkQD5HcGWf8bXx179SKNWdMYjfSiiD4EP7UQVf
6IxrJ4IMnuYQ1/kvuyQykH2a3Q==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:50:01 2026 by rpki-client