
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
File: xWFyqoU5BINNkF08MAE0TdKhjp4.mft (raw, json)
Hash identifier: rPfHOsfdp7sMCjqMbQ+4yLs4WoQBI28IMm0O1b4brqQ=
Subject key identifier: 59:79:53:0D:8B:98:6D:7D:97:41:FA:99:F1:6F:89:7E:40:71:2E:E5
Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
Manifest number: 026C
Signing time: Sat 05 Sep 2026 01:58:48 +0000
Manifest this update: Sat 05 Sep 2026 01:58:48 +0000
Manifest next update: Sat 12 Sep 2026 01:58:48 +0000
Files and hashes: 1: xWFyqoU5BINNkF08MAE0TdKhjp4.crl (hash: V0/WIAU0orSYcRYZn0E9Lawl/CCWzE19gyneqt+5id0=)
2: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (hash: eaGxFY8RTe5k7ilxTYMhUBA+m98D8O0XIJkH+kWPdKY=)
3: 6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (hash: GdX/1GyvyH3vWVVaXnENxvzt2MHVbC1XIppJcDq7r98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Validity
Not Before: Sep 5 01:58:48 2026 GMT
Not After : Sep 12 01:58:48 2026 GMT
Subject: CN=6a9b7758-7ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:f4:93:6a:5a:2a:b7:24:03:87:a8:7c:9b:
3b:90:fe:94:77:92:0f:7b:b2:b3:1e:cd:65:24:e9:
4a:21:08:87:33:e1:3b:b8:74:1b:35:70:0f:c3:89:
b4:95:b5:a7:21:61:89:db:55:6e:43:a4:b3:a8:b3:
c0:6e:ff:04:9a:1f:21:5f:dc:67:61:b7:45:e4:29:
bf:c6:9c:f7:17:2c:c3:96:fe:b5:e4:a4:a7:92:79:
56:77:de:d3:d2:d8:cb:59:c4:72:3e:16:f9:cc:4b:
b8:10:c5:e6:7e:02:a3:ee:94:c8:bc:f4:c5:f3:23:
5d:d7:e8:29:67:58:7b:4a:61:5f:a0:49:29:e3:9b:
e7:4c:ac:5a:fe:7e:cc:25:e9:01:5a:82:1b:4d:2e:
1e:c0:f5:a0:94:c8:6f:8d:03:22:e5:72:c9:4f:5c:
34:31:c4:28:e8:fd:fe:80:e6:e8:3b:e9:10:e4:34:
fb:7f:34:4f:a2:d8:a6:b2:83:bd:ba:db:cc:9b:63:
ea:e6:4f:ea:da:26:ce:6e:04:52:2e:8b:4d:f9:39:
c1:bb:42:ab:64:aa:c8:e1:b3:a2:37:15:8d:68:24:
d6:a7:de:f9:1b:70:39:c9:e6:a0:a0:fc:08:17:4a:
9c:1d:ec:be:14:98:47:b4:9d:cb:d5:52:96:71:30:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:79:53:0D:8B:98:6D:7D:97:41:FA:99:F1:6F:89:7E:40:71:2E:E5
X509v3 Authority Key Identifier:
keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:ef:0a:b9:0d:6a:01:b0:f0:4b:97:fb:40:15:4e:a5:fe:
dd:88:a9:bb:29:ed:e2:ef:03:c3:f1:9e:76:cc:f9:27:09:c1:
c6:cc:03:95:d6:36:c5:aa:7f:27:ef:c5:b9:ad:09:42:b0:dd:
f4:4a:bd:6d:98:8d:cc:5b:75:b2:e6:c1:19:77:21:78:55:48:
c2:bc:9d:75:b5:1b:d4:d8:b1:fa:6e:19:f7:39:a9:31:94:03:
86:fe:c3:90:dd:c9:55:24:1d:47:0e:e5:70:81:4b:87:b2:85:
eb:fc:2b:a0:b3:07:58:16:e0:b8:20:f9:f0:bf:f6:59:b5:68:
86:0b:e8:8c:63:46:0f:9a:f3:2c:43:8d:79:29:0c:05:ee:67:
9f:06:12:3c:ca:88:dc:7e:20:b9:26:99:c5:18:b2:b2:5d:f5:
31:3c:56:a0:56:1f:88:7c:7b:bc:e5:5c:f9:88:42:96:32:18:
63:3c:13:61:59:19:81:31:01:bc:0d:11:c4:3d:57:7e:b8:48:
f5:25:36:18:0d:5f:d7:be:0d:b4:c2:b2:47:d6:73:33:b7:10:
d4:40:24:d5:d7:0a:7b:1d:59:9f:e5:9d:47:04:1d:49:67:18:
b1:5c:9d:d1:a5:91:39:09:91:f3:55:6c:78:9e:7a:51:1e:09:
95:4e:9b:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAzMjExMTAvBgNVBAUTKEM1NjE3MkFBODUzOTA0ODM0RDkwNUQzQzMwMDEzNDRE
RDJBMThFOUUwHhcNMjYwOTA1MDE1ODQ4WhcNMjYwOTEyMDE1ODQ4WjAYMRYwFAYD
VQQDEw02YTliNzc1OC03ZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttL0k2paKrckA4eofJs7kP6Ud5IPe7KzHs1lJOlKIQiHM+E7uHQbNXAPw4m0
lbWnIWGJ21VuQ6SzqLPAbv8Emh8hX9xnYbdF5Cm/xpz3FyzDlv615KSnknlWd97T
0tjLWcRyPhb5zEu4EMXmfgKj7pTIvPTF8yNd1+gpZ1h7SmFfoEkp45vnTKxa/n7M
JekBWoIbTS4ewPWglMhvjQMi5XLJT1w0McQo6P3+gOboO+kQ5DT7fzRPotimsoO9
utvMm2Pq5k/q2ibObgRSLotN+TnBu0KrZKrI4bOiNxWNaCTWp975G3A5yeagoPwI
F0qcHey+FJhHtJ3L1VKWcTCk3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFl5Uw2L
mG19l0H6mfFviX5AcS7lMB8GA1UdIwQYMBaAFMVhcqqFOQSDTZBdPDABNE3SoY6e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDMyMS81MkIyRTAxNjAw
QzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJTk5rRjA4TUFFMFRkS2hq
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hXRnlxb1U1QklOTmtGMDhNQUUwVGRLaGpwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDMyMS81MkIyRTAxNjAwQzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJ
Tk5rRjA4TUFFMFRkS2hqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKWDvCrkNagGw8EuX+0AVTqX+3Yipuynt4u8Dw/Gedsz5JwnBxswDldY2xap/
J+/Fua0JQrDd9Eq9bZiNzFt1subBGXcheFVIwryddbUb1Nix+m4Z9zmpMZQDhv7D
kN3JVSQdRw7lcIFLh7KF6/wroLMHWBbguCD58L/2WbVohgvojGNGD5rzLEONeSkM
Be5nnwYSPMqI3H4guSaZxRiysl31MTxWoFYfiHx7vOVc+YhCljIYYzwTYVkZgTEB
vA0RxD1XfrhI9SU2GA1f174NtMKyR9ZzM7cQ1EAk1dcKex1Zn+WdRwQdSWcYsVyd
0aWROQmR81VseJ56UR4JlU6bJg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:15:17 2026 by rpki-client