
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json)
Hash identifier: ox1Dmm2IFW83K3yIqvIGev07No9izmJp469WHQxdAzU=
Subject key identifier: 9B:FF:EB:F7:51:6C:36:DE:1D:04:DF:4C:53:9B:A5:B2:45:96:5E:B0
Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
Certificate serial: 0630
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
Manifest number: 0628
Signing time: Tue 22 Sep 2026 22:44:30 +0000
Manifest this update: Tue 22 Sep 2026 22:44:29 +0000
Manifest next update: Tue 29 Sep 2026 22:44:29 +0000
Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: HFr8n+YX7kLq3m+ajfhReQM+aPkHDjKgYsYatiMG5NU=)
2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: Ba+7z84IeX93q9vbIwQtIGc3mekt1UL5FN0TgoRp8Ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl
rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
Validity
Not Before: Sep 22 22:44:29 2026 GMT
Not After : Sep 29 22:44:29 2026 GMT
Subject: CN=6ab304ce-8ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:22:44:6d:7e:09:53:05:97:9e:d0:6d:4d:
70:c1:cc:1b:60:e1:e1:02:c9:31:8b:68:e8:6a:84:
ff:e6:8d:78:b9:e6:84:54:ad:5a:47:9f:7d:74:a5:
4f:ac:c8:4f:ac:55:33:1b:25:6e:93:e0:56:9b:91:
c2:75:b7:23:94:ca:16:7a:93:81:96:01:04:29:5f:
16:a9:df:e4:62:ab:e1:f5:cf:b6:9b:51:8a:fe:b5:
aa:8d:c4:72:ca:34:c8:60:49:f7:6e:e6:b6:8e:4b:
ee:0e:17:8c:45:4d:cf:f5:50:fb:ec:60:48:49:c0:
be:36:1c:68:35:5f:0b:a5:8f:7a:74:62:18:45:a7:
94:0f:ea:c6:c1:f9:aa:d9:ca:78:e7:55:36:9a:99:
3e:12:43:19:82:2e:52:3d:71:01:76:9b:fa:8b:d5:
38:3b:76:e5:e0:5d:6d:f7:8c:ad:78:36:ea:dd:fa:
fe:8a:5d:be:77:6e:a1:89:62:12:40:bc:33:19:0d:
2d:bb:7e:25:93:cd:54:62:3d:65:d1:2f:ec:da:29:
53:e4:60:3f:d0:1e:50:f5:33:52:76:fd:f7:a3:c8:
33:0e:84:55:0b:1a:c5:fa:77:3d:a7:29:cd:cf:05:
e3:ac:62:e0:a8:ef:db:f5:2c:3c:82:98:75:39:ba:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FF:EB:F7:51:6C:36:DE:1D:04:DF:4C:53:9B:A5:B2:45:96:5E:B0
X509v3 Authority Key Identifier:
keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:49:20:80:0b:35:f7:6b:10:c7:a0:e4:8f:0a:93:c1:29:db:
48:74:1a:45:c5:18:f2:45:85:c5:61:f1:f8:db:87:17:be:e7:
5f:83:53:51:65:bc:a1:48:20:f9:9a:68:24:ac:41:bb:19:f8:
8e:3e:43:a0:10:49:13:e3:33:0c:9e:87:4e:2c:a1:20:13:0f:
b0:1a:11:07:85:36:a9:66:67:09:70:5c:27:ba:3d:f3:e7:6f:
74:62:81:40:1f:1e:fb:25:ff:68:1d:68:24:d3:7d:9f:19:10:
77:4f:93:f3:ab:d7:9e:b5:c6:66:58:4f:51:9a:4a:6e:a2:3d:
5e:8f:c9:3d:97:f9:77:07:1c:23:68:1f:79:17:64:20:51:45:
f8:90:e4:d9:62:48:1d:38:f3:3f:ed:9e:da:37:dc:96:53:f7:
a9:37:f0:9c:0a:b8:64:61:ec:59:94:3f:20:a3:59:67:b7:e3:
37:2c:f0:56:fd:fd:84:ea:aa:05:6c:f6:22:03:ce:ce:de:bf:
42:bf:09:f3:2f:fd:56:61:66:d5:d0:cd:5c:a1:3f:2b:57:59:
64:d7:29:ab:d1:c1:e7:8c:47:55:ab:c4:cd:5e:67:a8:2a:eb:
6c:ba:55:6e:73:cc:e2:d4:47:b9:d8:b7:9b:aa:ba:a3:0b:64:
7f:be:58:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG
NzAxN0RDQjgwHhcNMjYwOTIyMjI0NDI5WhcNMjYwOTI5MjI0NDI5WjAYMRYwFAYD
VQQDEw02YWIzMDRjZS04Y2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn5IiRG1+CVMFl57QbU1wwcwbYOHhAskxi2joaoT/5o14ueaEVK1aR599dKVP
rMhPrFUzGyVuk+BWm5HCdbcjlMoWepOBlgEEKV8Wqd/kYqvh9c+2m1GK/rWqjcRy
yjTIYEn3bua2jkvuDheMRU3P9VD77GBIScC+NhxoNV8LpY96dGIYRaeUD+rGwfmq
2cp451U2mpk+EkMZgi5SPXEBdpv6i9U4O3bl4F1t94yteDbq3fr+il2+d26hiWIS
QLwzGQ0tu34lk81UYj1l0S/s2ilT5GA/0B5Q9TNSdv33o8gzDoRVCxrF+nc9pynN
zwXjrGLgqO/b9Sw8gph1Obp78QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJv/6/dR
bDbeHQTfTFObpbJFll6wMB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB
ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz
TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq
UVhOLUlaNFZybWozQVgzTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJkkggAs192sQx6DkjwqTwSnbSHQaRcUY8kWFxWHx+NuHF77nX4NTUWW8oUgg
+ZpoJKxBuxn4jj5DoBBJE+MzDJ6HTiyhIBMPsBoRB4U2qWZnCXBcJ7o98+dvdGKB
QB8e+yX/aB1oJNN9nxkQd0+T86vXnrXGZlhPUZpKbqI9Xo/JPZf5dwccI2gfeRdk
IFFF+JDk2WJIHTjzP+2e2jfcllP3qTfwnAq4ZGHsWZQ/IKNZZ7fjNyzwVv39hOqq
BWz2IgPOzt6/Qr8J8y/9VmFm1dDNXKE/K1dZZNcpq9HB54xHVavEzV5nqCrrbLpV
bnPM4tRHudi3m6q6owtkf75Yhw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:23:51 2026 by rpki-client