
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json)
Hash identifier: S1yt+lbe+0EmirXN1gwjHCKsy8QdUNjrEL1lRK/GIok=
Subject key identifier: CE:FD:F5:D5:FA:13:E4:C5:9D:3C:41:B3:BD:B3:C1:A9:65:49:13:61
Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Certificate serial: 02F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
Manifest number: 02E9
Signing time: Fri 09 Oct 2026 01:25:53 +0000
Manifest this update: Fri 09 Oct 2026 01:25:53 +0000
Manifest next update: Fri 16 Oct 2026 01:25:53 +0000
Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: tT28w1UVqv3K8jTxuv70HHUeRdvTYMeN2OhVBETPh1A=)
2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: oF8S7Pot7FDKo2GEEMdlADVMTbeltD2yj2mRKY200Ag=)
3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: uMB1cvVhprKp86XWev+HO3mpwPNrzk9do4ee899gfzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:25:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Validity
Not Before: Oct 9 01:25:53 2026 GMT
Not After : Oct 16 01:25:53 2026 GMT
Subject: CN=6ac842a1-320f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:d1:c6:1a:7d:d9:66:99:6d:ec:f1:74:82:
78:9d:e8:87:a7:22:7d:7a:cd:ee:0d:e0:31:b5:69:
11:89:71:6e:82:12:f5:1c:fc:91:12:51:08:fe:72:
e7:8b:72:a7:7c:01:00:90:87:e0:09:31:d9:82:cb:
6b:4a:da:7a:2b:34:c4:67:32:88:79:4b:56:29:eb:
a2:bb:ee:53:aa:cf:41:aa:16:8a:46:ed:aa:04:50:
19:e4:90:0a:8c:10:d5:30:07:96:9e:ef:86:04:81:
17:d4:ed:0a:e1:6c:a9:69:2c:e0:38:49:32:b2:64:
a0:e2:5d:46:00:fc:49:c4:44:b4:94:f3:1c:77:1e:
48:79:23:68:95:a1:a1:e0:7c:b4:97:1a:74:ad:df:
72:56:b6:3a:30:2e:b8:3d:d9:27:80:dc:99:33:ce:
96:d6:66:78:84:a1:72:ee:9c:2a:d4:00:49:1e:8e:
43:56:a6:a5:f1:d1:9f:1a:38:1f:51:1c:61:a4:dc:
d5:17:55:99:17:1b:51:4d:9a:df:2a:da:8e:ed:c4:
be:0c:96:70:43:6b:d9:94:bc:a3:9c:df:b9:fc:82:
f2:a5:03:e7:0c:f3:8f:d9:3a:4c:d9:2d:e4:7c:5c:
2f:6a:c1:dc:df:3c:01:4f:c3:e4:00:08:cd:22:3c:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:F5:D5:FA:13:E4:C5:9D:3C:41:B3:BD:B3:C1:A9:65:49:13:61
X509v3 Authority Key Identifier:
keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:90:6c:d2:39:56:77:ff:35:e2:78:ca:f2:4c:7a:c6:36:d4:
53:83:06:64:85:a9:1f:25:96:10:b0:96:0a:d7:1b:09:cd:1f:
06:49:7e:4b:2a:cd:51:f6:d6:fc:ee:49:b5:e7:dc:34:63:ed:
4f:fe:fe:37:2e:73:82:6d:35:5c:7e:5c:09:6c:2a:ab:f1:89:
2b:f3:75:51:b5:b8:76:78:b4:13:e6:34:ce:3d:78:e2:a6:b3:
15:f9:51:22:a1:fa:ec:42:90:a7:00:05:c8:af:be:68:46:b2:
78:f4:4b:85:f7:c1:11:e8:73:93:88:f2:e5:3b:00:ec:ff:39:
8d:69:f0:3d:b9:68:a3:3d:fc:81:29:86:60:e7:ba:78:3a:c1:
09:9b:01:35:47:b2:a6:10:50:9f:79:d0:fc:c8:22:ea:8e:eb:
1b:6a:de:96:a0:9e:c2:47:f0:71:99:b9:7d:b8:6b:ed:69:30:
e9:09:e8:58:ed:5c:10:b7:fb:77:10:53:d0:cf:e2:72:d4:bc:
b6:13:42:7d:16:6d:04:ad:3b:76:dd:08:99:e8:f1:fe:0e:b4:
80:ab:7d:de:03:08:20:fa:64:6e:2f:29:c8:86:57:43:45:ee:
ab:84:03:46:18:0d:a7:45:4b:51:1c:0a:28:80:43:60:68:10:
0b:8a:27:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0
MDMzQjM1MkQwHhcNMjYxMDA5MDEyNTUzWhcNMjYxMDE2MDEyNTUzWjAYMRYwFAYD
VQQDEw02YWM4NDJhMS0zMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA41rRxhp92WaZbezxdIJ4neiHpyJ9es3uDeAxtWkRiXFughL1HPyRElEI/nLn
i3KnfAEAkIfgCTHZgstrStp6KzTEZzKIeUtWKeuiu+5Tqs9BqhaKRu2qBFAZ5JAK
jBDVMAeWnu+GBIEX1O0K4WypaSzgOEkysmSg4l1GAPxJxES0lPMcdx5IeSNolaGh
4Hy0lxp0rd9yVrY6MC64PdkngNyZM86W1mZ4hKFy7pwq1ABJHo5DVqal8dGfGjgf
URxhpNzVF1WZFxtRTZrfKtqO7cS+DJZwQ2vZlLyjnN+5/ILypQPnDPOP2TpM2S3k
fFwvasHc3zwBT8PkAAjNIjwWHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM799dX6
E+TFnTxBs72zwallSRNhMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0
REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW
SlBXakhVY0M3eUZBTTdOUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgJBs0jlWd/814njK8kx6xjbUU4MGZIWpHyWWELCWCtcbCc0fBkl+SyrNUfbW
/O5JtefcNGPtT/7+Ny5zgm01XH5cCWwqq/GJK/N1UbW4dni0E+Y0zj144qazFflR
IqH67EKQpwAFyK++aEayePRLhffBEehzk4jy5TsA7P85jWnwPblooz38gSmGYOe6
eDrBCZsBNUeyphBQn3nQ/Mgi6o7rG2relqCewkfwcZm5fbhr7Wkw6QnoWO1cELf7
dxBT0M/ictS8thNCfRZtBK07dt0Imejx/g60gKt93gMIIPpkbi8pyIZXQ0Xuq4QD
RhgNp0VLURwKKIBDYGgQC4on4A==
-----END CERTIFICATE-----
Generated at Fri Oct 9 10:14:11 2026 by rpki-client