
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json)
Hash identifier: NPF3g7DllGb5IucB1uTddTz9CAvSqNsVM4xzEN9gz74=
Subject key identifier: D4:60:DD:37:67:62:BB:B0:86:D8:9E:DF:47:BB:38:8A:7E:17:A8:49
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial: 084F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
Manifest number: 081C
Signing time: Tue 06 Oct 2026 21:21:04 +0000
Manifest this update: Tue 06 Oct 2026 21:21:03 +0000
Manifest next update: Tue 13 Oct 2026 21:21:03 +0000
Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: xTEdh5d5C+Ov7AfqZUIOlOY/UMsTtq6Cb5jhn7WvEqY=)
2: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: wOEYlAAobb9nCZWU7ILmmI4WtLWkbwGu6k9TfmwOgrw=)
3: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: pdKfh0rHk6MsKSq/P/C5bZ/12KI4D++yBlGSjUNlgck=)
4: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: 8wPCikKi+MQL34SMZFG04z7KedSfiNcxZCrwRnt7vrA=)
5: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: Z9Aj+lSx9qfZY/JZ1gYb96BwZ7DAL++xryjqUPWEopY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Validity
Not Before: Oct 6 21:21:03 2026 GMT
Not After : Oct 13 21:21:03 2026 GMT
Subject: CN=6ac56640-9ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:5d:84:e0:b9:0b:14:98:00:47:40:df:6f:
de:d1:5b:93:35:71:1b:7b:e6:91:2c:50:7e:af:97:
cf:4a:06:f7:e9:71:df:80:63:0c:ca:2a:4b:65:63:
f1:b7:ad:71:83:41:84:ce:70:33:af:29:dd:9c:7a:
da:52:65:c5:cd:34:88:8b:b3:56:00:50:6e:bd:3d:
3d:21:9a:6b:35:53:5e:0c:08:bb:27:7b:c1:7f:01:
d6:fd:de:d7:7c:75:9d:1d:87:6a:75:96:05:2a:dc:
ba:92:fd:b7:04:2e:f6:a2:75:0f:90:4c:d7:9b:b9:
26:21:19:bc:77:e3:af:4e:0e:7d:93:77:8b:42:08:
ff:e4:e7:6c:30:ec:7c:af:6a:83:2c:c7:97:ff:33:
18:48:69:8b:92:3d:b6:22:47:0d:61:77:8c:a8:56:
5f:ff:85:ef:bc:f4:57:b8:16:72:b4:6e:6a:a5:0f:
ab:ca:c7:26:1c:a1:c1:b5:eb:b8:35:9c:40:36:9b:
37:cc:12:77:0b:f7:a4:ca:e4:dd:50:0a:ca:50:89:
e7:12:60:a9:c0:91:ef:c7:ef:3e:94:54:a0:88:cf:
7e:e4:46:7c:21:19:9a:d6:1d:6a:9a:0c:c4:4c:0f:
c6:ec:64:35:87:ad:6e:9a:0a:2c:6b:79:b3:cb:18:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:DD:37:67:62:BB:B0:86:D8:9E:DF:47:BB:38:8A:7E:17:A8:49
X509v3 Authority Key Identifier:
keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:9a:30:76:bc:67:0b:02:5b:c4:6f:60:d4:a1:0b:e2:65:b3:
3c:4a:c1:9b:48:47:9d:84:ad:ce:4c:16:ca:c3:d8:8d:c6:4c:
6b:ef:9c:92:27:33:88:ec:91:c1:0c:64:60:31:c4:76:0f:1d:
15:80:8c:d0:1f:03:06:11:c6:2b:e4:3a:f3:70:c7:80:20:0c:
ca:c8:f4:c2:ef:c4:99:03:ed:27:20:79:cc:f4:22:f1:e1:44:
31:39:30:d3:f6:6d:0a:cb:39:b1:e0:64:ee:88:da:17:a7:a9:
50:57:aa:13:df:09:67:67:55:e4:88:2b:84:c5:a5:5a:37:31:
c8:46:83:99:67:bd:67:94:5f:fc:a6:b1:ec:a4:43:7f:2b:d4:
c3:14:0c:51:0d:54:4f:0f:1e:1e:91:84:c5:f1:a3:9f:f0:4e:
23:71:ec:66:c6:35:e6:91:46:1b:6a:67:ec:c1:3b:c4:6c:a8:
c1:f4:50:8a:73:62:24:11:d7:55:b3:81:ed:70:3a:8e:f3:d4:
27:f4:3c:f6:6e:f4:b8:16:cd:f5:b7:9e:dd:ee:04:2b:1c:e6:
78:ef:f5:50:8a:4c:8c:f0:f7:46:07:8f:3a:66:3e:e8:67:f0:
92:1f:27:5f:94:b4:30:7a:ef:4e:d0:03:7a:30:f1:da:b0:d3:
75:4e:1d:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy
NEVDMjRFOTIwHhcNMjYxMDA2MjEyMTAzWhcNMjYxMDEzMjEyMTAzWjAYMRYwFAYD
VQQDEw02YWM1NjY0MC05ZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuPRdhOC5CxSYAEdA32/e0VuTNXEbe+aRLFB+r5fPSgb36XHfgGMMyipLZWPx
t61xg0GEznAzryndnHraUmXFzTSIi7NWAFBuvT09IZprNVNeDAi7J3vBfwHW/d7X
fHWdHYdqdZYFKty6kv23BC72onUPkEzXm7kmIRm8d+OvTg59k3eLQgj/5OdsMOx8
r2qDLMeX/zMYSGmLkj22IkcNYXeMqFZf/4XvvPRXuBZytG5qpQ+ryscmHKHBteu4
NZxANps3zBJ3C/ekyuTdUArKUInnEmCpwJHvx+8+lFSgiM9+5EZ8IRma1h1qmgzE
TA/G7GQ1h61umgosa3mzyxguzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRg3Tdn
Yruwhtie30e7OIp+F6hJMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF
QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m
WVpISmVEUGR2ZFlrN0NUcEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKJowdrxnCwJbxG9g1KEL4mWzPErBm0hHnYStzkwWysPYjcZMa++ckicziOyR
wQxkYDHEdg8dFYCM0B8DBhHGK+Q683DHgCAMysj0wu/EmQPtJyB5zPQi8eFEMTkw
0/ZtCss5seBk7ojaF6epUFeqE98JZ2dV5IgrhMWlWjcxyEaDmWe9Z5Rf/Kax7KRD
fyvUwxQMUQ1UTw8eHpGExfGjn/BOI3HsZsY15pFGG2pn7ME7xGyowfRQinNiJBHX
VbOB7XA6jvPUJ/Q89m70uBbN9bee3e4EKxzmeO/1UIpMjPD3RgePOmY+6Gfwkh8n
X5S0MHrvTtADejDx2rDTdU4dqQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 01:13:18 2026 by rpki-client