
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier: KnToj++gzMjboo34F8Ylb5mjVslftGY4FVhDxSdGoCQ=
Subject key identifier: 63:80:E0:CE:FF:DB:38:AC:82:E2:7C:E7:FD:53:ED:81:A5:7E:AE:63
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial: 35C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number: 35A4
Signing time: Sun 04 Oct 2026 14:19:38 +0000
Manifest this update: Sun 04 Oct 2026 14:19:37 +0000
Manifest next update: Sun 11 Oct 2026 14:19:37 +0000
Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: CleHggrLjqcc3UBnqgZEFgdXylXDzO+u1FsjVkcTnvo=)
2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: HyRMO/pcIzGm5plPPapZZ07tr13jSP+aoFVCVKamf28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13760 (0x35c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Validity
Not Before: Oct 4 14:19:37 2026 GMT
Not After : Oct 11 14:19:37 2026 GMT
Subject: CN=6ac26079-01be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:b7:74:4f:20:41:c5:57:ed:f1:1e:30:13:
5b:6e:a8:ef:e6:70:bd:d4:b8:8c:93:2d:3b:63:76:
48:b3:7a:71:8e:64:1f:fe:94:5a:16:1d:1c:61:84:
77:19:2b:b2:fe:bb:8e:c2:5f:7d:e7:e0:97:42:a9:
9a:56:62:6a:25:25:99:be:8e:58:16:0a:ba:a4:c6:
39:4f:e3:2c:eb:bb:5a:5c:db:b7:9e:3a:0a:b8:6e:
fa:ab:21:da:76:a8:ad:11:3a:42:2d:14:d0:63:f7:
7e:11:e6:6c:ba:62:a6:68:39:02:61:3a:88:e4:95:
b6:60:47:e9:eb:cf:c2:85:10:8e:0f:98:1b:aa:73:
27:dc:78:f7:eb:2b:67:0c:47:dc:ab:fc:e7:b7:87:
eb:e9:60:70:de:4a:18:00:2b:57:3a:a0:a8:b9:dc:
48:ed:65:51:7c:0b:bc:a4:f5:72:3b:a2:a0:eb:4e:
f6:b6:30:4b:43:9e:0c:fb:61:c2:cb:84:bf:e2:fe:
90:14:5b:76:00:cc:44:d3:65:d8:78:dd:d1:d2:8c:
9b:cd:6b:6a:f5:65:26:41:b0:a8:d3:df:b9:39:0b:
6c:33:10:35:0a:7a:a7:b2:1a:a3:6d:50:9e:1a:9b:
f4:08:ef:c8:5a:c8:02:55:31:72:25:11:6d:55:e0:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:80:E0:CE:FF:DB:38:AC:82:E2:7C:E7:FD:53:ED:81:A5:7E:AE:63
X509v3 Authority Key Identifier:
keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:49:62:a3:59:cd:5e:43:a7:d7:61:41:41:19:f3:e5:7d:a8:
87:78:81:fd:e6:7c:23:7f:29:7f:60:4f:b9:4a:62:42:08:37:
8b:b1:bc:65:37:70:d9:53:ea:7a:25:93:d8:13:4b:6a:86:25:
9d:48:f1:e8:72:6e:2b:74:b1:8b:99:22:2a:44:55:7c:54:ff:
08:b3:c4:f6:62:1c:de:cc:d6:78:3e:e5:2a:e7:57:b3:85:1e:
34:cb:ce:eb:b7:18:da:7f:f9:5b:ce:4b:d1:9e:46:7e:11:6a:
d3:bb:17:e2:cb:d0:48:34:81:41:79:04:f3:31:27:c9:8b:b2:
19:91:d4:cc:4d:47:35:ba:9a:79:59:6d:33:f7:8e:0e:4c:2a:
56:de:0b:b6:21:e0:a5:6e:dd:77:d5:7c:68:7d:17:20:b0:6c:
d9:18:e2:60:7e:6b:a6:c1:8b:73:3b:64:4f:3f:85:7c:ba:76:
32:c9:18:9d:f8:cf:28:50:c3:d7:af:12:e9:dd:96:9c:0b:6e:
50:4e:4a:21:53:b0:a4:50:78:b2:d9:51:0f:79:ba:18:c6:ed:
4a:13:c9:de:a9:ef:98:4b:20:db:2f:63:69:76:4c:94:62:b8:
6d:06:ea:32:bc:2e:a3:c7:15:87:55:02:f1:93:ae:e8:ec:79:
6d:fa:a3:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3
N0RGQjIxQTMwHhcNMjYxMDA0MTQxOTM3WhcNMjYxMDExMTQxOTM3WjAYMRYwFAYD
VQQDEw02YWMyNjA3OS0wMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAst23dE8gQcVX7fEeMBNbbqjv5nC91LiMky07Y3ZIs3pxjmQf/pRaFh0cYYR3
GSuy/ruOwl995+CXQqmaVmJqJSWZvo5YFgq6pMY5T+Ms67taXNu3njoKuG76qyHa
dqitETpCLRTQY/d+EeZsumKmaDkCYTqI5JW2YEfp68/ChRCOD5gbqnMn3Hj36ytn
DEfcq/znt4fr6WBw3koYACtXOqCoudxI7WVRfAu8pPVyO6Kg6072tjBLQ54M+2HC
y4S/4v6QFFt2AMxE02XYeN3R0oybzWtq9WUmQbCo09+5OQtsMxA1CnqnshqjbVCe
Gpv0CO/IWsgCVTFyJRFtVeA5awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOA4M7/
2zisguJ85/1T7YGlfq5jMB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE
NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx
U0cybVFfajVOaHQzMzdJYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoElio1nNXkOn12FBQRnz5X2oh3iB/eZ8I38pf2BPuUpiQgg3i7G8ZTdw2VPq
eiWT2BNLaoYlnUjx6HJuK3Sxi5kiKkRVfFT/CLPE9mIc3szWeD7lKudXs4UeNMvO
67cY2n/5W85L0Z5GfhFq07sX4svQSDSBQXkE8zEnyYuyGZHUzE1HNbqaeVltM/eO
DkwqVt4LtiHgpW7dd9V8aH0XILBs2RjiYH5rpsGLcztkTz+FfLp2MskYnfjPKFDD
168S6d2WnAtuUE5KIVOwpFB4stlRD3m6GMbtShPJ3qnvmEsg2y9jaXZMlGK4bQbq
Mrwuo8cVh1UC8ZOu6Ox5bfqjMQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:59:35 2026 by rpki-client