
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
File: XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json)
Hash identifier: Tbah2oJGmO0a0ud6PNMjSWz5ukc0GMH2Tartz9AdXc8=
Subject key identifier: C3:8A:7E:20:1B:01:43:1F:F8:EF:46:2F:BB:5D:B9:0E:74:9B:45:33
Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Certificate serial: 05A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
Manifest number: 0583
Signing time: Tue 20 Oct 2026 23:25:39 +0000
Manifest this update: Tue 20 Oct 2026 23:25:39 +0000
Manifest next update: Tue 27 Oct 2026 23:25:39 +0000
Files and hashes: 1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: SOJs5gl85+WHnWb5viSq87kyUFR3aevfyBQIcWGwDjI=)
2: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: TtIgh6p3MeT87i0AxcRjiCaJmw5Zn2R/2iZkAkCBffQ=)
3: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: YlLnh1haCAguuDMWLHxz+klHykWczeyMGFHRpbzDxJg=)
4: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: xF2IvoVXmAincHuvdv8xT2emt6/vG3hUCriU6a0X2F4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl
rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 23:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1444 (0x5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Validity
Not Before: Oct 20 23:25:39 2026 GMT
Not After : Oct 27 23:25:39 2026 GMT
Subject: CN=6ad7f873-72d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:6b:22:1e:ba:f2:e3:f6:46:9f:2a:e9:8d:
9c:7a:c7:2c:cb:0a:d2:6c:7b:1d:30:94:9c:41:99:
fd:16:c1:af:8b:fd:05:91:af:6d:b2:a3:ca:58:50:
26:d9:9c:56:8c:f9:43:19:4b:ba:c6:2e:69:ae:91:
30:64:1e:55:0d:4a:87:96:a3:47:fd:61:c5:3c:2e:
0e:3e:6e:8e:60:ae:eb:96:10:e5:15:34:c6:db:53:
4a:2e:00:e3:c4:3a:4b:fc:f2:69:5d:8f:c9:c5:d9:
73:a0:6d:70:8d:e1:34:10:6c:be:de:4a:ba:19:79:
9a:9f:20:8f:49:94:c2:14:47:e5:d0:51:cd:73:23:
6f:36:23:4b:66:d8:a6:05:ce:20:f1:30:d5:5c:0f:
bf:1a:0d:e5:30:6d:b4:20:c0:22:f9:c4:1e:ef:80:
84:39:ee:ee:b8:91:bf:bc:92:b5:c9:3e:bb:a1:fb:
d1:99:f4:72:a5:52:3b:e4:0b:59:ef:9d:e1:28:75:
1b:55:4d:ed:f6:91:58:be:73:aa:46:8c:d6:5e:e3:
fd:cd:92:58:65:9e:e3:6f:71:e5:4b:63:fb:1f:c6:
5c:f9:2e:92:3d:19:ba:46:65:8a:ae:c9:f8:12:fa:
8a:ed:af:93:7f:ac:36:c6:14:7f:e6:72:5e:81:eb:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8A:7E:20:1B:01:43:1F:F8:EF:46:2F:BB:5D:B9:0E:74:9B:45:33
X509v3 Authority Key Identifier:
keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:89:11:db:f6:00:89:79:26:97:26:a2:d8:9b:45:d0:52:66:
81:02:b2:26:26:c9:f9:f0:14:f0:16:d4:df:17:96:53:6e:a6:
7b:6f:fe:2c:3b:ab:61:b0:2e:d7:d5:df:82:95:a5:40:bf:24:
ce:ee:5c:ff:0a:6c:71:24:06:d0:8b:e2:f3:74:04:41:89:f4:
58:51:42:93:bc:40:b2:a6:04:02:41:0e:21:b1:79:60:ec:b6:
95:72:64:af:5c:f1:8e:57:8b:c9:f8:b6:f3:bf:0d:87:05:55:
65:a4:2b:d7:67:6b:7c:7f:cd:33:93:32:0a:82:d3:6e:1f:07:
e0:a4:7d:c5:13:16:3e:a3:5b:1c:f3:6b:1b:3c:4a:94:15:20:
5d:d9:69:c6:0d:f9:6d:63:55:25:ff:28:4d:c3:9c:a3:c9:a7:
f1:1d:40:7c:bf:c4:06:f9:83:14:fd:bf:e0:37:62:db:41:88:
73:23:8b:67:79:d2:50:0c:5e:50:41:b5:08:0b:06:99:9f:08:
ef:37:86:f1:0b:ee:d5:ef:94:6f:69:35:cd:0f:f6:32:0b:00:
ae:9f:90:01:4e:40:b5:ad:04:c4:49:c7:4f:58:4a:80:1d:04:
6e:c3:92:29:b1:49:77:fe:d5:a4:31:03:ab:67:a6:97:4a:bc:
a7:65:7d:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC
NzQ1NkI3MTMwHhcNMjYxMDIwMjMyNTM5WhcNMjYxMDI3MjMyNTM5WjAYMRYwFAYD
VQQDEw02YWQ3Zjg3My03MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4QBrIh668uP2Rp8q6Y2cescsywrSbHsdMJScQZn9FsGvi/0Fka9tsqPKWFAm
2ZxWjPlDGUu6xi5prpEwZB5VDUqHlqNH/WHFPC4OPm6OYK7rlhDlFTTG21NKLgDj
xDpL/PJpXY/JxdlzoG1wjeE0EGy+3kq6GXmanyCPSZTCFEfl0FHNcyNvNiNLZtim
Bc4g8TDVXA+/Gg3lMG20IMAi+cQe74CEOe7uuJG/vJK1yT67ofvRmfRypVI75AtZ
753hKHUbVU3t9pFYvnOqRozWXuP9zZJYZZ7jb3HlS2P7H8Zc+S6SPRm6RmWKrsn4
EvqK7a+Tf6w2xhR/5nJegeveVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOKfiAb
AUMf+O9GL7tduQ50m0UzMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2
QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0
eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0NDNS8yQUM0RDMzRTQ2QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0
QWVwVUdMejZOUEczUld0eE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyIkR2/YAiXkmlyai2JtF0FJmgQKyJibJ+fAU8BbU3xeWU26me2/+LDurYbAu
19XfgpWlQL8kzu5c/wpscSQG0Ivi83QEQYn0WFFCk7xAsqYEAkEOIbF5YOy2lXJk
r1zxjleLyfi2878NhwVVZaQr12drfH/NM5MyCoLTbh8H4KR9xRMWPqNbHPNrGzxK
lBUgXdlpxg35bWNVJf8oTcOco8mn8R1AfL/EBvmDFP2/4Ddi20GIcyOLZ3nSUAxe
UEG1CAsGmZ8I7zeG8Qvu1e+Ub2k1zQ/2MgsArp+QAU5Ata0ExEnHT1hKgB0EbsOS
KbFJd/7VpDEDq2eml0q8p2V9xQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 03:17:30 2026 by rpki-client