
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json)
Hash identifier: 1mqxBrDgRZZhe3UY4H0o6VSiV3AbIaqkcWPeH6LQyKw=
Subject key identifier: 1D:01:AA:D0:3D:EA:8A:A3:6A:36:AF:20:A8:FA:61:76:4B:A8:2B:14
Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
Manifest number: 010C
Signing time: Sun 20 Sep 2026 17:30:33 +0000
Manifest this update: Sun 20 Sep 2026 17:30:32 +0000
Manifest next update: Sun 27 Sep 2026 17:30:32 +0000
Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: TLn633p6XctALogOYwoOd2c0P9ieLI9392bu7WleQoE=)
2: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: 4a6PLPW/gOHUVu6+aFebgQ5/qx4vCQg4zTQoTmjp9Rk=)
3: 87087F00267E11F09183092AC4F9AE02.roa (hash: ZonpCT+5ZZuP5erM6WjI5zX2DJGXZb7/2jDh35lgn00=)
4: 79FB87E45BE811F1A1050E64C6833773.roa (hash: NWwclcZCcPG2TS1pQpW1RR20GoSP1Iy5BozZgf751Lw=)
5: E7E8471858BB11F1BAE21C4D9A833773.roa (hash: Tc3fcqpoYCzH1k3AQYmkHoaNjc5Waq991d+rce3j0bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Validity
Not Before: Sep 20 17:30:32 2026 GMT
Not After : Sep 27 17:30:32 2026 GMT
Subject: CN=6ab01839-1357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:8b:e8:c8:f7:7f:a5:54:3c:87:97:d9:6d:
6b:ae:1c:71:b8:d5:e9:2e:64:63:82:2d:a5:28:d1:
a2:a8:b0:10:0d:6c:5c:bc:c2:84:75:ec:d9:52:8d:
66:ee:34:0b:23:d3:0c:bf:28:9e:7b:72:f4:3f:7a:
ce:4d:c8:48:bd:34:fc:a8:7d:f0:9f:cf:15:07:12:
3a:75:ff:f7:ae:34:6f:31:9e:50:dc:ab:ee:fe:14:
fe:46:64:94:31:aa:e1:19:0e:e5:58:1d:76:67:8d:
dc:73:6a:26:16:00:3d:98:f0:df:e0:73:9e:74:81:
2b:8d:c6:2c:ed:7c:24:99:b9:a7:8b:a0:2b:e7:4a:
1b:88:81:d7:3f:a2:e0:af:d1:6a:40:7b:ac:d6:02:
d7:5d:23:11:f1:86:b9:60:d7:38:16:49:f4:79:32:
62:3a:87:27:b7:89:c4:5f:8a:8f:9a:14:17:09:42:
4b:43:a1:11:a2:75:83:a0:1e:b2:3a:ff:ef:68:05:
f0:8b:e4:77:96:58:d7:bf:2e:e3:86:46:47:b1:38:
cd:30:b2:58:d7:9f:07:3c:9d:0b:c4:17:62:3d:f8:
ea:5f:d4:05:3f:d6:19:52:d6:13:17:51:05:e2:c0:
8c:9d:68:e0:07:8e:d1:a6:6f:95:53:43:c5:6a:0c:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:01:AA:D0:3D:EA:8A:A3:6A:36:AF:20:A8:FA:61:76:4B:A8:2B:14
X509v3 Authority Key Identifier:
keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:96:a1:54:34:72:94:41:06:35:81:44:87:8c:da:39:78:91:
db:fc:b6:a5:9f:75:0d:ef:f4:f2:46:1e:90:b4:73:d3:ca:96:
16:e1:18:04:e2:c0:82:fb:db:9e:a0:90:e8:b7:d8:cf:d5:03:
c0:25:16:e4:d8:b1:2c:e5:4c:25:d5:ce:08:c2:b4:5d:ab:98:
19:45:52:13:36:77:95:22:76:5a:03:f3:7a:b0:31:02:ec:df:
7f:81:46:86:f6:b2:9d:10:d6:84:a6:0e:10:8f:a6:12:f1:de:
2f:bf:b8:ca:b2:30:0d:a3:e9:d1:95:9a:45:b3:4f:05:5a:37:
6b:f2:b9:81:da:3f:8d:85:19:af:cb:bd:f9:ea:70:bf:ae:41:
c0:dc:6f:fb:f4:33:7e:9f:1f:fa:eb:0e:8d:2e:0c:10:6a:5c:
d9:bb:e7:8e:76:ab:19:83:2b:b0:71:b0:78:cf:91:b5:3d:ae:
71:df:74:03:ab:97:79:52:b8:4a:19:c6:70:c4:22:a7:22:34:
ec:a3:22:e1:6d:8a:ea:0a:92:ee:de:98:03:27:3e:63:e7:d2:
06:b4:37:2b:67:0a:bf:11:cf:e6:3a:5c:4d:63:70:44:f8:22:
67:58:8b:4b:9c:36:6b:50:60:3b:f9:e0:0e:89:4b:52:d6:dc:
b9:6f:8d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:06 2026 by rpki-client