
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json)
Hash identifier: o4/B6jJMsVNkbxueZXUS3AIFk9gLHq7QDeMH0p9VEmU=
Subject key identifier: 42:80:B8:E7:92:99:5B:02:38:E2:19:A1:DB:FF:B5:AA:12:17:1C:09
Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
Manifest number: 01E3
Signing time: Sun 25 Oct 2026 03:55:48 +0000
Manifest this update: Sun 25 Oct 2026 03:55:48 +0000
Manifest next update: Sun 01 Nov 2026 03:55:48 +0000
Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: zhE6g6HKIsuEkA2hUcLH1gcwTgr4Kc+fSD6tbuPbKsY=)
2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: H955n/7dglZtqfdGojSNMJAFJkmI9QdbLn1Kqy9frW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 03:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Validity
Not Before: Oct 25 03:55:48 2026 GMT
Not After : Nov 1 03:55:48 2026 GMT
Subject: CN=6add7dc4-8bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:6a:99:df:ca:59:f7:b0:48:3c:a9:27:63:
6b:4b:5d:c6:10:dd:6f:10:d0:32:c0:06:10:9e:09:
25:5d:8c:f0:66:22:82:a0:26:c3:b4:0d:d5:14:97:
63:f8:36:51:ae:e8:8b:2d:01:b6:e1:68:43:9f:d5:
e1:a5:39:cf:05:5a:1b:d2:a4:a0:ee:9c:21:b7:be:
cf:27:54:f8:31:41:b3:a9:76:aa:cb:ee:fd:94:fa:
57:3e:a9:84:52:9f:03:47:f1:b0:0c:85:63:c3:f2:
c0:65:6b:f0:39:fa:19:42:e2:52:84:ff:83:27:48:
9e:ae:d4:ca:b7:bf:72:f4:63:b2:2b:76:d9:82:41:
96:a5:ba:6b:39:42:b7:b6:ae:3f:d9:d5:5c:04:47:
4c:9c:25:39:f3:82:57:d4:1f:35:b3:8b:ad:83:2a:
d2:5d:d6:2e:1e:0f:b9:7a:b5:98:ba:af:f9:f5:09:
e5:06:93:d7:26:7e:66:6d:72:e9:1b:3f:52:25:b4:
65:60:98:b2:fb:cb:f7:83:12:0b:2d:4d:bb:82:1f:
87:2a:87:e1:b4:97:19:a4:66:97:d9:9e:fc:66:e2:
1f:b8:02:86:2e:1c:7e:8c:f9:1f:27:b7:a3:87:8e:
06:b4:7a:75:fb:3c:0c:f9:e6:31:ff:c0:5c:5a:c2:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:B8:E7:92:99:5B:02:38:E2:19:A1:DB:FF:B5:AA:12:17:1C:09
X509v3 Authority Key Identifier:
keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:11:8e:e2:a9:b8:c1:84:ad:d2:fb:e2:81:35:52:13:7f:63:
eb:9b:17:0b:a2:66:82:b5:32:00:9d:77:17:92:f9:0d:58:f5:
4e:8d:e9:f3:25:c8:53:bb:36:c2:0a:fc:d6:0c:b8:6f:d2:b4:
7c:d1:47:51:af:45:4c:f0:e3:a9:3f:31:a3:f4:a4:bc:bf:f0:
e3:6f:d5:06:d2:4a:63:91:d5:df:26:53:ea:f8:ea:9d:5b:9c:
a1:ab:15:bb:27:dd:ec:42:1a:59:a3:85:03:a1:ca:29:96:5b:
5b:9d:ac:83:1c:1b:23:6c:08:59:41:6a:71:ab:76:da:f9:d2:
15:ae:44:63:f0:f4:e7:07:be:2e:e5:b1:28:0b:e3:fa:c1:5f:
28:d5:ef:b6:c3:26:ea:94:ba:f9:a2:11:b8:14:ef:a4:7a:9f:
4f:19:10:b6:75:27:51:4b:e2:95:47:16:f1:af:2e:5d:87:e4:
af:af:48:36:14:f1:09:dc:c9:b6:8d:2d:a3:43:87:7c:a4:cc:
64:b2:dd:29:2d:42:85:44:e3:77:9b:a3:3d:2b:05:be:c2:08:
a7:47:79:ee:d5:b6:aa:60:58:0e:c9:56:b7:1b:3e:51:2f:3b:
ea:2b:5b:2b:84:09:75:5a:c3:4a:3f:b6:fa:95:45:0a:60:bb:
00:1f:8c:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy
MTg1MzBDNjUwHhcNMjYxMDI1MDM1NTQ4WhcNMjYxMTAxMDM1NTQ4WjAYMRYwFAYD
VQQDEw02YWRkN2RjNC04YmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtStqmd/KWfewSDypJ2NrS13GEN1vENAywAYQngklXYzwZiKCoCbDtA3VFJdj
+DZRruiLLQG24WhDn9XhpTnPBVob0qSg7pwht77PJ1T4MUGzqXaqy+79lPpXPqmE
Up8DR/GwDIVjw/LAZWvwOfoZQuJShP+DJ0iertTKt79y9GOyK3bZgkGWpbprOUK3
tq4/2dVcBEdMnCU584JX1B81s4utgyrSXdYuHg+5erWYuq/59QnlBpPXJn5mbXLp
Gz9SJbRlYJiy+8v3gxILLU27gh+HKofhtJcZpGaX2Z78ZuIfuAKGLhx+jPkfJ7ej
h44GtHp1+zwM+eYx/8BcWsJFIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKAuOeS
mVsCOOIZodv/taoSFxwJMB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy
MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH
a2t1N2xsWG40UGdoaFRER1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAChGO4qm4wYSt0vvigTVSE39j65sXC6JmgrUyAJ13F5L5DVj1To3p8yXIU7s2
wgr81gy4b9K0fNFHUa9FTPDjqT8xo/SkvL/w42/VBtJKY5HV3yZT6vjqnVucoasV
uyfd7EIaWaOFA6HKKZZbW52sgxwbI2wIWUFqcat22vnSFa5EY/D05we+LuWxKAvj
+sFfKNXvtsMm6pS6+aIRuBTvpHqfTxkQtnUnUUvilUcW8a8uXYfkr69INhTxCdzJ
to0to0OHfKTMZLLdKS1ChUTjd5ujPSsFvsIIp0d57tW2qmBYDslWtxs+US876itb
K4QJdVrDSj+2+pVFCmC7AB+MJQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:56:45 2026 by rpki-client