
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json)
Hash identifier: zc8jiJcoT00SLgpqseDOObIj9lEZi5ZY2Fu6O5EaGt8=
Subject key identifier: 06:E8:1D:44:EE:44:4F:E2:88:EA:F2:3A:DD:16:FC:00:75:F1:B8:DE
Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Certificate serial: 049F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
Manifest number: 048C
Signing time: Wed 07 Oct 2026 00:10:23 +0000
Manifest this update: Wed 07 Oct 2026 00:10:23 +0000
Manifest next update: Wed 14 Oct 2026 00:10:23 +0000
Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: kWAWp8sumTIrINyvA8tqC58+o0XVH+qmed65ET4edz8=)
2: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: C2xe2xSt+zG2ZuMpvD0jHOEIkW1+AE92r/FDO/VZFwY=)
3: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: US3zQpwIIKbs6wAdZrpkun85NZn/CcgVmY5RXTFLp6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1183 (0x49f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Validity
Not Before: Oct 7 00:10:23 2026 GMT
Not After : Oct 14 00:10:23 2026 GMT
Subject: CN=6ac58def-2bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:e1:b8:d5:fe:18:6a:a8:3e:8d:bc:fb:59:
bf:b9:02:e4:9a:23:10:a1:34:75:fe:16:1f:aa:b8:
9e:92:7e:d9:cb:85:2a:ef:46:fe:85:60:fa:41:d4:
63:97:60:06:22:76:aa:ff:0e:cf:cc:b4:5a:17:4c:
53:77:a2:cf:7b:b9:56:e1:8b:ec:2d:2b:c7:fe:a0:
6b:1f:8f:d0:c1:61:cf:56:95:03:82:5a:50:bd:96:
35:a5:fc:f4:51:b5:df:8a:4a:a1:99:5d:64:f5:b6:
b3:ce:6a:25:46:cf:28:1b:35:17:bb:82:fa:ea:20:
5d:84:28:8e:61:ad:50:15:62:73:2e:b7:a0:37:e5:
b6:67:35:06:fc:d4:46:4a:de:95:37:f2:ea:0c:4e:
f8:06:df:79:43:58:84:2c:70:f5:1a:4f:2e:ad:6c:
ae:9f:56:0f:5e:cf:84:fe:34:d8:60:cc:63:f3:75:
ef:97:60:62:89:b7:50:1a:1e:c9:9f:28:bf:60:9d:
aa:88:46:72:36:87:67:52:aa:df:64:bf:2b:23:12:
f6:40:b7:41:e2:cb:7a:dc:1f:84:d8:d3:f6:83:f1:
92:03:3e:b8:d1:61:e8:74:97:72:69:90:24:87:38:
15:74:0a:12:69:d4:c1:bb:4d:33:be:5c:52:5d:b0:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:1D:44:EE:44:4F:E2:88:EA:F2:3A:DD:16:FC:00:75:F1:B8:DE
X509v3 Authority Key Identifier:
keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:a5:2e:9f:9d:79:ec:f1:ab:4d:4e:a0:24:0d:e6:03:86:cf:
8d:8c:15:50:35:14:73:ce:ce:df:16:62:cc:7e:02:a3:7a:f1:
cf:23:9c:dc:62:49:33:8e:af:2a:06:72:75:df:45:40:84:13:
ba:74:7d:3b:99:c6:75:39:66:4f:79:cb:a4:75:32:aa:4c:db:
5c:53:14:56:87:46:5f:ef:24:ce:9e:25:50:39:27:9a:eb:33:
d3:2d:db:1f:4e:5c:09:47:db:81:c9:5e:90:ec:17:e2:6c:e3:
cd:be:8e:a1:47:26:54:a6:92:0f:83:fd:af:8e:00:a7:83:21:
46:3b:4d:83:e6:c4:88:05:21:6c:58:90:bd:64:f1:b5:8d:07:
3d:a0:ce:cd:eb:88:f9:44:de:5e:32:25:66:f0:87:9c:a2:1d:
85:a5:c6:59:70:e1:99:77:fc:52:e8:22:45:7f:13:ae:8d:d1:
d0:92:14:e8:8f:e1:4c:43:49:97:20:79:5d:74:05:55:9a:9a:
27:9d:85:02:ff:74:41:47:cc:8d:b6:29:1a:3d:c3:ed:89:23:
38:3c:f1:2c:66:89:78:16:3e:4d:7a:e3:e0:1a:bd:1c:0c:34:
58:bf:f0:12:2a:22:39:7f:5b:0a:ff:1f:eb:de:01:04:19:3e:
79:04:a8:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3
NkI0Nzg4NkQwHhcNMjYxMDA3MDAxMDIzWhcNMjYxMDE0MDAxMDIzWjAYMRYwFAYD
VQQDEw02YWM1OGRlZi0yYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshThuNX+GGqoPo28+1m/uQLkmiMQoTR1/hYfqriekn7Zy4Uq70b+hWD6QdRj
l2AGInaq/w7PzLRaF0xTd6LPe7lW4YvsLSvH/qBrH4/QwWHPVpUDglpQvZY1pfz0
UbXfikqhmV1k9bazzmolRs8oGzUXu4L66iBdhCiOYa1QFWJzLregN+W2ZzUG/NRG
St6VN/LqDE74Bt95Q1iELHD1Gk8urWyun1YPXs+E/jTYYMxj83Xvl2BiibdQGh7J
nyi/YJ2qiEZyNodnUqrfZL8rIxL2QLdB4st63B+E2NP2g/GSAz640WHodJdyaZAk
hzgVdAoSadTBu00zvlxSXbB2QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAboHUTu
RE/iiOryOt0W/AB18bjeMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0
NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT
b3FfdFJtWVNMOFYydEhpRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeKUun5157PGrTU6gJA3mA4bPjYwVUDUUc87O3xZizH4Co3rxzyOc3GJJM46v
KgZydd9FQIQTunR9O5nGdTlmT3nLpHUyqkzbXFMUVodGX+8kzp4lUDknmusz0y3b
H05cCUfbgclekOwX4mzjzb6OoUcmVKaSD4P9r44Ap4MhRjtNg+bEiAUhbFiQvWTx
tY0HPaDOzeuI+UTeXjIlZvCHnKIdhaXGWXDhmXf8UugiRX8Tro3R0JIU6I/hTENJ
lyB5XXQFVZqaJ52FAv90QUfMjbYpGj3D7YkjODzxLGaJeBY+TXrj4Bq9HAw0WL/w
EioiOX9bCv8f694BBBk+eQSozw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:24:52 2026 by rpki-client