
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
File: _xOUBaa6BoyBp0rTX-yUkYJp2OE.mft (raw, json)
Hash identifier: JsJAfO0HueYMtuDub6sF5M+mBUPUSd4GnMPTbcXzG+Y=
Subject key identifier: C6:34:73:29:BB:1A:D0:06:EE:B7:99:0F:32:6B:36:BD:B6:44:59:7A
Authority key identifier: FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1
Certificate issuer: /CN=A9139D67/serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
Manifest number: 0D
Signing time: Wed 19 Aug 2026 09:52:13 +0000
Manifest this update: Wed 19 Aug 2026 09:52:12 +0000
Manifest next update: Wed 26 Aug 2026 09:52:12 +0000
Files and hashes: 1: _xOUBaa6BoyBp0rTX-yUkYJp2OE.crl (hash: xusAS9hxJXYG7pUQaw2gSqTaaxNRgvUF9Sks6s4C4FI=)
2: FC3ECAC88BC111F190F2EAA86C11F970.roa (hash: 4889GaDsygj/hBcnFh0j5KUrF53rJ0JxKKaFI2ZWHR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.crl
rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139D67, serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1
Validity
Not Before: Aug 19 09:52:12 2026 GMT
Not After : Aug 26 09:52:12 2026 GMT
Subject: CN=6a857ccd-4435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:72:47:5f:6a:1f:5b:76:8f:5c:f3:33:ca:
d2:b0:0d:b6:bb:f3:e2:a3:2f:e4:6c:9b:79:d9:e3:
ce:b6:ab:f9:d4:b6:b6:2e:99:35:e5:18:1d:d6:d8:
57:9a:4c:7b:4c:57:fd:df:57:07:62:2e:9e:38:96:
c9:6a:65:1d:f5:75:d6:be:08:4f:1c:18:7b:31:79:
40:51:e9:4b:73:92:cf:0c:34:5e:3e:6b:75:70:60:
03:9a:23:08:b3:90:23:c1:41:79:20:3d:61:55:2a:
6c:73:1d:64:1f:ec:bc:c8:a5:07:25:28:bc:9a:76:
45:b2:90:e6:b4:c7:dd:41:df:f0:f2:6b:2a:11:b3:
2e:ff:1e:a6:7f:0f:ed:0f:04:cc:b5:3a:7f:0a:6f:
98:d6:02:d5:c5:c1:a0:84:df:54:37:4c:e0:b1:96:
26:21:e8:85:fc:3f:b4:c4:23:d0:fa:13:8f:84:03:
11:94:5f:8b:1c:c5:a9:0f:0e:74:0a:95:84:1b:9e:
06:62:9f:89:91:c7:d8:ff:55:69:33:ad:5e:f3:20:
01:87:97:70:5a:02:d8:ac:03:69:99:c3:7b:1d:af:
21:97:1b:0f:94:52:6b:10:df:5f:76:f0:41:68:db:
ea:b3:ea:17:8f:0b:43:f3:b5:77:31:4b:6d:14:ee:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:73:29:BB:1A:D0:06:EE:B7:99:0F:32:6B:36:BD:B6:44:59:7A
X509v3 Authority Key Identifier:
keyid:FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:7b:94:89:08:36:50:75:28:61:d3:62:b5:8b:28:7a:75:f8:
c2:21:3c:b8:a3:58:da:46:12:b0:24:97:9a:1e:ad:84:6b:91:
75:73:32:be:a0:d7:8d:c3:7a:72:3c:bd:0c:5b:06:70:dd:39:
45:1f:61:5a:d6:47:61:07:bb:37:d4:7c:6f:6a:eb:5f:45:25:
b4:19:72:95:47:a6:31:ae:31:14:1d:4f:83:d1:e9:3e:01:8a:
28:98:30:cd:1a:4a:48:f0:b0:11:f2:a5:de:6b:af:95:1f:09:
aa:34:e4:67:ab:fb:ad:f1:e8:7e:a2:18:f4:fe:99:fd:a8:ae:
b1:05:b0:a1:db:f7:9c:fe:de:93:a0:6d:1c:f0:da:2f:51:54:
90:44:5d:cd:96:94:45:4e:92:f4:c0:b0:9a:3f:d4:95:b4:3d:
db:02:ad:ad:98:78:29:e2:cf:86:93:08:29:24:fc:7f:a1:9f:
45:d8:3d:bc:09:3e:b7:ea:db:cc:8c:65:0c:a5:f8:33:cf:eb:
28:69:11:5c:a8:33:88:0e:88:b6:0f:ee:bb:91:ae:39:26:6c:
b6:85:41:1a:86:8e:6e:ae:e4:6a:97:bd:bf:c9:23:f4:b7:fb:
6e:0a:d8:1e:6d:3a:98:33:bf:c3:3d:e1:c5:e9:7f:91:73:ca:
ef:a2:f1:ab
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
OUQ2NzExMC8GA1UEBRMoRkYxMzk0MDVBNkJBMDY4QzgxQTc0QUQzNUZFQzk0OTE4
MjY5RDhFMTAeFw0yNjA4MTkwOTUyMTJaFw0yNjA4MjYwOTUyMTJaMBgxFjAUBgNV
BAMTDTZhODU3Y2NkLTQ0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNdHJHX2ofW3aPXPMzytKwDba78+KjL+Rsm3nZ4862q/nUtrYumTXlGB3W2Fea
THtMV/3fVwdiLp44lslqZR31dda+CE8cGHsxeUBR6Utzks8MNF4+a3VwYAOaIwiz
kCPBQXkgPWFVKmxzHWQf7LzIpQclKLyadkWykOa0x91B3/DyayoRsy7/HqZ/D+0P
BMy1On8Kb5jWAtXFwaCE31Q3TOCxliYh6IX8P7TEI9D6E4+EAxGUX4scxakPDnQK
lYQbngZin4mRx9j/VWkzrV7zIAGHl3BaAtisA2mZw3sdryGXGw+UUmsQ31928EFo
2+qz6hePC0PztXcxS20U7nuxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxjRzKbsa
0Abut5kPMms2vbZEWXowHwYDVR0jBBgwFoAU/xOUBaa6BoyBp0rTX+yUkYJp2OEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RDY3LzkyNDUwOTY2OEJD
MTExRjFBNTIwNEQ4ODZDMTFGOTcwL194T1VCYWE2Qm95QnAwclRYLXlVa1lKcDJP
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvX3hPVUJhYTZCb3lCcDByVFgteVVrWUpwMk9FLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5
RDY3LzkyNDUwOTY2OEJDMTExRjFBNTIwNEQ4ODZDMTFGOTcwL194T1VCYWE2Qm95
QnAwclRYLXlVa1lKcDJPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBwe5SJCDZQdShh02K1iyh6dfjCITy4o1jaRhKwJJeaHq2Ea5F1czK+oNeNw3py
PL0MWwZw3TlFH2Fa1kdhB7s31HxvautfRSW0GXKVR6YxrjEUHU+D0ek+AYoomDDN
GkpI8LAR8qXea6+VHwmqNORnq/ut8eh+ohj0/pn9qK6xBbCh2/ec/t6ToG0c8Nov
UVSQRF3NlpRFTpL0wLCaP9SVtD3bAq2tmHgp4s+GkwgpJPx/oZ9F2D28CT636tvM
jGUMpfgzz+soaRFcqDOIDoi2D+67ka45Jmy2hUEaho5uruRql72/ySP0t/tuCtge
bTqYM7/DPeHF6X+Rc8rvovGr
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:56 2026 by rpki-client