
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File: X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier: XapcvU1FA//I2k8JICKd8nbOKpNA4DaP/tF8yNOhd84=
Subject key identifier: E7:82:F5:48:CB:64:CA:3E:0B:4D:A2:6F:20:8D:CA:C7:18:BB:A0:6F
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer: /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial: 0809
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number: 07F8
Signing time: Mon 20 Jul 2026 21:50:24 +0000
Manifest this update: Mon 20 Jul 2026 21:50:24 +0000
Manifest next update: Mon 27 Jul 2026 21:50:24 +0000
Files and hashes: 1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: frdlr4Erndlk7GW37GHgTWZzNuz/qgXWZceit6t5Y+w=)
2: FA93793637C011EB97405947C4F9AE02.roa (hash: ldXQuS9J+x+tniCGZo6XJVyJ4zu+DPyHUrx89zjZ/Vc=)
3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: FiJS4cFwnxf/JxN138pQZVaNHd2K178xuIIaltslIoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 21:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Validity
Not Before: Jul 20 21:50:24 2026 GMT
Not After : Jul 27 21:50:24 2026 GMT
Subject: CN=6a5e9820-a98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:e6:08:6a:8e:58:c8:eb:03:fd:f8:18:bc:
f8:35:b1:4e:06:10:b4:43:59:c3:21:04:04:b7:32:
07:57:9d:fb:8d:04:d1:ea:e2:3b:af:86:5a:83:37:
c1:ea:45:b1:9c:5b:ed:86:2f:31:6e:8d:a9:39:f0:
b0:4e:55:93:31:72:71:8f:ea:56:87:f8:b8:ff:74:
88:0c:55:8a:39:32:f3:59:fe:52:b0:39:0f:d9:93:
cd:b9:c0:4e:4e:f3:cc:2c:bb:11:2a:9d:ef:f2:8f:
10:51:ab:fb:68:e2:b6:95:09:4d:0d:f1:28:6b:5e:
4e:6d:78:b5:a2:da:4f:6f:a4:c0:3c:87:66:f0:12:
8c:f7:b6:dd:32:0a:0a:3b:06:43:17:37:fb:a1:11:
6a:4a:3a:e2:f8:e7:cf:e5:4b:fa:67:c6:e8:92:7e:
68:f7:82:5d:fc:09:67:f9:9d:60:8d:ca:f7:20:38:
06:6e:2a:78:9c:71:89:3d:cf:b4:8d:e8:eb:4f:a1:
95:96:65:d1:eb:9a:a0:c2:bc:5f:6f:40:5e:bb:02:
92:74:70:8c:c2:59:e5:55:8f:a0:01:b0:01:bc:fb:
63:93:3c:aa:8d:3a:89:62:7e:25:88:ab:aa:e5:31:
5e:7c:77:95:b8:f3:23:b7:57:4b:ba:e8:99:60:68:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:F5:48:CB:64:CA:3E:0B:4D:A2:6F:20:8D:CA:C7:18:BB:A0:6F
X509v3 Authority Key Identifier:
keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:6e:32:2b:99:82:00:b6:6c:c1:b6:33:b5:d7:a7:e8:7b:de:
24:2b:31:a5:5d:71:e5:5c:19:21:15:f5:7c:cc:49:59:b7:b8:
df:c0:e7:16:d5:cd:66:ec:29:4f:1e:aa:55:05:5c:32:b8:c9:
71:46:ee:d2:ab:dd:1b:b8:42:70:f0:e9:46:d1:9d:7e:66:1c:
17:e4:32:41:8c:66:26:cd:64:c3:62:61:b6:62:62:81:e7:49:
d9:06:ae:e9:a1:59:00:6f:46:0c:98:e6:fa:1c:5a:0e:be:40:
73:28:3e:54:8b:d7:af:34:4e:29:03:0f:06:7f:61:e6:82:04:
fb:48:1c:40:8c:34:f9:8a:ed:9e:fe:66:03:fd:cb:7b:64:59:
e8:b6:8a:a8:cf:f7:6d:9d:bd:7c:1f:25:35:99:ef:b5:26:75:
61:64:2e:eb:e0:9d:28:20:2a:77:a8:86:6a:55:b5:42:86:01:
ed:9b:d0:c9:a6:76:ae:1e:0f:12:d1:79:ac:ad:0e:d3:64:f1:
fc:a1:65:dc:48:e3:c1:72:fc:fe:39:40:c1:60:06:c2:41:84:
6f:b0:5a:79:32:2b:eb:8e:8e:80:23:0f:11:6d:57:dd:c0:f3:
80:f2:dd:3e:83:d3:0c:a9:67:9a:43:30:c5:a9:04:dd:d6:82:
d8:1d:f1:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA0OTExMTAvBgNVBAUTKDVGQzNFODZEQUU0MzUzMTU4OEVCMDE1RDUwMUUzMTcx
MjA1RjA4NTEwHhcNMjYwNzIwMjE1MDI0WhcNMjYwNzI3MjE1MDI0WjAYMRYwFAYD
VQQDEw02YTVlOTgyMC1hOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvsfmCGqOWMjrA/34GLz4NbFOBhC0Q1nDIQQEtzIHV537jQTR6uI7r4ZagzfB
6kWxnFvthi8xbo2pOfCwTlWTMXJxj+pWh/i4/3SIDFWKOTLzWf5SsDkP2ZPNucBO
TvPMLLsRKp3v8o8QUav7aOK2lQlNDfEoa15ObXi1otpPb6TAPIdm8BKM97bdMgoK
OwZDFzf7oRFqSjri+OfP5Uv6Z8bokn5o94Jd/Aln+Z1gjcr3IDgGbip4nHGJPc+0
jejrT6GVlmXR65qgwrxfb0BeuwKSdHCMwlnlVY+gAbABvPtjkzyqjTqJYn4liKuq
5TFefHeVuPMjt1dLuuiZYGhhOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOeC9UjL
ZMo+C02ibyCNyscYu6BvMB8GA1UdIwQYMBaAFF/D6G2uQ1MViOsBXVAeMXEgXwhR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQ5MS85MjlCREJDMjM3
QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4V0k2d0ZkVUI0eGNTQmZD
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g4UG9iYTVEVXhXSTZ3RmRVQjR4Y1NCZkNGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDQ5MS85MjlCREJDMjM3QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4
V0k2d0ZkVUI0eGNTQmZDRkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmW4yK5mCALZswbYztden6HveJCsxpV1x5VwZIRX1fMxJWbe438DnFtXNZuwp
Tx6qVQVcMrjJcUbu0qvdG7hCcPDpRtGdfmYcF+QyQYxmJs1kw2JhtmJigedJ2Qau
6aFZAG9GDJjm+hxaDr5Acyg+VIvXrzROKQMPBn9h5oIE+0gcQIw0+Yrtnv5mA/3L
e2RZ6LaKqM/3bZ29fB8lNZnvtSZ1YWQu6+CdKCAqd6iGalW1QoYB7ZvQyaZ2rh4P
EtF5rK0O02Tx/KFl3EjjwXL8/jlAwWAGwkGEb7BaeTIr646OgCMPEW1X3cDzgPLd
PoPTDKlnmkMwxakE3daC2B3xnw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:50:38 2026 by rpki-client