
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier: 6wpN+jgNTWupSlWWWP7CgOy4fMfP17+ySCqYfXr1hkk=
Subject key identifier: C3:AB:0C:1D:F7:96:67:95:5E:C1:7F:70:5F:71:D4:CF:84:94:68:91
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 0782
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number: 0772
Signing time: Fri 30 Oct 2026 21:45:10 +0000
Manifest this update: Fri 30 Oct 2026 21:45:09 +0000
Manifest next update: Fri 06 Nov 2026 21:45:09 +0000
Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: Wbi3VruqxBYn6iolH9MgwKJE8RLFU91eCpBfjzJT4+I=)
2: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: b8Yrg5yhwwS9mUXMLcQ3eIUl5GT4DbquZ+/h34i5hc0=)
3: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: C0leLcL5XAeuq6qwaXMLO1xziKzhUjhh+w08AfqJr64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 21:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Validity
Not Before: Oct 30 21:45:09 2026 GMT
Not After : Nov 6 21:45:09 2026 GMT
Subject: CN=6ae50fe6-cf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:91:a1:bd:21:08:cd:d1:b5:43:df:07:90:
8d:e2:a8:30:ce:1a:79:95:bd:d1:45:68:ba:37:0f:
86:45:e4:fb:d7:22:ed:fe:16:2e:61:cd:ec:3d:7f:
36:b7:6b:7c:c4:d0:8f:36:63:22:64:2c:cf:09:87:
80:37:c5:c8:5e:93:25:80:10:52:1a:a5:a0:d0:00:
fb:ee:9b:5b:da:af:c9:cd:5f:c3:34:8c:8b:7a:7d:
87:28:c2:ee:bc:c8:ea:ad:3b:dc:8c:e4:95:7f:9d:
93:c3:55:29:ce:50:ce:f1:4b:52:75:fc:e9:e8:4e:
d5:fe:3d:f7:56:e5:98:e2:78:32:3b:c3:22:68:30:
87:1f:bd:72:d8:fd:29:e1:8e:bb:b9:85:60:8d:ae:
d2:13:b9:ed:9c:6f:f8:ef:bb:be:b8:ca:02:9d:be:
c0:5c:0f:cb:f6:f8:4f:8b:bc:34:46:49:af:cf:13:
f4:28:5a:1b:5b:13:f9:0b:77:25:1f:fb:bf:bf:b3:
0b:94:58:91:a3:5d:3b:25:a9:c8:0b:e7:20:2f:2f:
56:ad:1f:3f:ba:47:9e:05:89:6b:ef:26:82:4f:45:
59:87:8c:dd:1f:97:1a:46:2a:7b:76:da:be:74:79:
fd:9a:c8:bc:6e:3b:96:d7:42:03:95:7e:10:95:7f:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AB:0C:1D:F7:96:67:95:5E:C1:7F:70:5F:71:D4:CF:84:94:68:91
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c1:18:57:c8:55:4f:26:3d:34:85:f4:73:41:36:92:b4:7f:
f8:bf:71:34:27:e3:7a:57:02:b9:9b:62:88:2b:f7:21:9d:8f:
87:0c:35:ca:ec:49:5d:1e:67:3d:50:63:23:7d:b1:49:50:5f:
b2:e7:68:44:5f:cb:ec:e9:29:a1:f1:0f:ff:4b:56:8e:84:4e:
ef:1b:e5:83:90:11:eb:8f:c4:6d:22:2b:da:9b:36:d8:cc:e5:
2e:2c:32:b8:4b:27:34:28:5f:e6:bf:d7:5b:a2:70:10:4c:ea:
b3:ae:f4:97:0a:6d:22:97:ca:31:71:ff:a2:26:05:9a:de:cf:
5a:63:52:93:42:12:24:a3:66:20:be:e8:f3:67:7a:e8:ad:d4:
ab:05:dc:7c:5f:1f:48:0a:8e:0d:c5:60:3a:c0:41:06:2a:68:
4b:82:ee:24:2e:94:80:fb:ec:e6:06:90:a2:d9:3c:30:20:5c:
7b:70:82:b8:1b:5e:65:55:ac:57:0a:0f:80:a6:c0:e3:cb:fc:
de:93:02:dc:ca:38:f8:a2:37:2f:89:38:8b:33:10:e3:3e:01:
31:a2:ee:42:b6:40:1d:c0:41:e7:00:7e:c5:5f:60:3d:27:e4:
96:a1:20:6f:01:01:78:97:ea:39:d8:b4:10:4f:4b:c0:cd:97:
17:55:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:21:41 2026 by rpki-client