
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier: tl03l9u38JEb6d9sJFtJm6k+6LeBJNx2dRzyi64aL4I=
Subject key identifier: FF:89:EC:F2:2C:FB:6F:2F:64:C1:D2:F6:85:14:3A:9F:10:AB:A7:30
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number: 0278
Signing time: Fri 09 Oct 2026 02:26:29 +0000
Manifest this update: Fri 09 Oct 2026 02:26:28 +0000
Manifest next update: Fri 16 Oct 2026 02:26:28 +0000
Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: z2aKsse5y2rcvM07SVbOhUk3Gkduyw6Q2/eQbU/81p0=)
2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: R5a6QMcMMM3E0jCOFVWDRS9Q/1dJvX8y7TpUdy+NpOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Validity
Not Before: Oct 9 02:26:28 2026 GMT
Not After : Oct 16 02:26:28 2026 GMT
Subject: CN=6ac850d4-0a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:f3:6e:8f:9f:0a:9f:b6:21:8e:41:e2:69:
4d:97:03:8d:af:e5:a2:5d:55:15:a8:dc:70:c4:9d:
6a:1e:2a:8e:b8:d0:ae:aa:85:98:0b:da:72:f6:53:
2d:aa:7d:2f:ee:2f:04:3c:0d:d3:b2:06:a3:ed:83:
37:15:42:fb:d9:31:b8:f6:09:10:47:30:92:03:fd:
b7:56:b3:62:50:c5:4b:e1:65:7f:b8:c2:a6:9a:b2:
fc:a9:c8:89:d9:64:3f:54:3b:8e:38:12:68:63:45:
d2:50:f1:30:fd:36:42:81:a1:cc:ee:b9:92:b3:c3:
db:60:0a:f5:6b:fc:d6:47:34:10:bc:cf:5e:44:92:
3b:ac:7c:39:7a:db:72:88:f3:2d:26:2b:6d:0a:f5:
4d:db:5a:fd:fd:6a:15:c1:1a:ec:61:44:fa:cd:02:
3a:5f:fa:1d:f5:6c:55:54:a9:bf:47:fa:9a:14:66:
70:55:89:81:4d:21:96:70:5f:94:14:16:ca:5d:00:
5d:89:68:21:97:4a:09:b1:ad:c2:6b:a8:c0:b3:f9:
a0:f4:bf:c6:b1:15:51:a2:70:cb:97:a8:72:ee:01:
b1:84:9a:5a:17:44:10:50:48:e0:84:d5:7f:f4:02:
02:70:cf:9d:16:20:5c:f1:6a:8e:6f:7a:8d:16:4c:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:EC:F2:2C:FB:6F:2F:64:C1:D2:F6:85:14:3A:9F:10:AB:A7:30
X509v3 Authority Key Identifier:
keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a7:bd:bf:9e:b1:2a:58:36:01:48:b8:86:f5:bc:82:8c:4b:
b2:f9:66:39:bb:be:28:dd:15:fb:de:1f:c2:f8:d4:fb:55:31:
7b:f7:a9:d8:e7:b8:58:d5:ab:49:8d:d5:fc:8c:ac:b1:3c:e3:
a3:7e:c5:26:15:fe:7f:00:4c:38:c2:f8:ca:79:ab:94:de:96:
8f:bd:15:f6:09:cc:40:86:9b:96:af:91:6e:0c:08:90:d6:c5:
0b:2b:de:16:9b:ce:30:8e:3e:81:ed:7e:30:88:12:fc:56:9d:
d8:7e:6c:f3:a3:80:87:de:4d:6d:3f:8b:d7:12:87:11:0a:b8:
45:f3:08:ef:1c:40:50:5a:87:65:bc:e5:d6:b5:06:85:30:9c:
3f:3e:a0:7d:5e:5a:db:4e:4b:a4:ef:dc:ea:e3:d2:73:6c:30:
04:8c:36:d8:53:5b:7a:18:a3:14:22:5f:be:9f:d5:0b:07:d9:
ed:3a:9c:97:c9:a7:55:80:99:da:ab:53:83:f0:23:65:f9:c4:
e4:73:c8:45:25:99:20:8f:5f:e3:1e:ac:b7:38:ce:1f:73:70:
e1:94:7e:dd:e1:30:d6:a9:70:19:50:c2:1f:77:5f:9f:20:63:
ba:cb:f2:db:a2:9e:cd:7d:c7:1a:13:8e:ea:e8:b2:a7:01:c5:
77:1d:7d:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3
ODkxN0UwRkQwHhcNMjYxMDA5MDIyNjI4WhcNMjYxMDE2MDIyNjI4WjAYMRYwFAYD
VQQDEw02YWM4NTBkNC0wYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxMzzbo+fCp+2IY5B4mlNlwONr+WiXVUVqNxwxJ1qHiqOuNCuqoWYC9py9lMt
qn0v7i8EPA3Tsgaj7YM3FUL72TG49gkQRzCSA/23VrNiUMVL4WV/uMKmmrL8qciJ
2WQ/VDuOOBJoY0XSUPEw/TZCgaHM7rmSs8PbYAr1a/zWRzQQvM9eRJI7rHw5etty
iPMtJittCvVN21r9/WoVwRrsYUT6zQI6X/od9WxVVKm/R/qaFGZwVYmBTSGWcF+U
FBbKXQBdiWghl0oJsa3Ca6jAs/mg9L/GsRVRonDLl6hy7gGxhJpaF0QQUEjghNV/
9AICcM+dFiBc8WqOb3qNFkxPOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP+J7PIs
+28vZMHS9oUUOp8Qq6cwMB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE
QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt
ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo6e9v56xKlg2AUi4hvW8goxLsvlmObu+KN0V+94fwvjU+1Uxe/ep2Oe4WNWr
SY3V/IyssTzjo37FJhX+fwBMOML4ynmrlN6Wj70V9gnMQIablq+RbgwIkNbFCyve
FpvOMI4+ge1+MIgS/Fad2H5s86OAh95NbT+L1xKHEQq4RfMI7xxAUFqHZbzl1rUG
hTCcPz6gfV5a205LpO/c6uPSc2wwBIw22FNbehijFCJfvp/VCwfZ7Tqcl8mnVYCZ
2qtTg/AjZfnE5HPIRSWZII9f4x6stzjOH3Nw4ZR+3eEw1qlwGVDCH3dfnyBjusvy
26KezX3HGhOO6uiypwHFdx191g==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:38:46 2026 by rpki-client