
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
File: xF0041r6UWc07r4-Xaxxv0jh1fM.mft (raw, json)
Hash identifier: Ehj1R8dnXFO5fugl+Hba2jfFW3eD9u9dQnCaQVQ6RdE=
Subject key identifier: FC:6A:64:5D:11:64:96:AD:2C:91:B1:EB:C5:91:FC:A8:57:E5:E6:76
Authority key identifier: C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3
Certificate issuer: /CN=A912A273/serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
Manifest number: 88
Signing time: Sun 11 Oct 2026 08:15:19 +0000
Manifest this update: Sun 11 Oct 2026 08:15:18 +0000
Manifest next update: Sun 18 Oct 2026 08:15:18 +0000
Files and hashes: 1: xF0041r6UWc07r4-Xaxxv0jh1fM.crl (hash: MXcGbzdt9kX8tQFhGRGummOPRlFAJLAaE6RyPLkSrFE=)
2: F7CC41D2FD9111F0AFA9C1725C6F56BC.roa (hash: ZVS5A/ssJ9e5s48dOy5KKX8LrbmgceLLERs2KPItheg=)
3: F3BA62BEFD9011F0AC0D2AEE5B6F56BC.roa (hash: fngJ91q3M8+ZvnNF07B50n4sFQUoH1YzhPTItYhTEoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl
rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 07:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A273, serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
Validity
Not Before: Oct 11 08:15:18 2026 GMT
Not After : Oct 18 08:15:18 2026 GMT
Subject: CN=6acb4597-109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:d4:25:bd:4c:63:b8:2e:8b:3a:34:02:10:
8e:01:62:b2:02:30:85:c0:c8:f0:31:bc:eb:e8:6f:
74:09:d4:14:6a:6b:4d:92:eb:58:8b:2a:fe:3f:4a:
07:85:d7:cc:fb:1b:f7:70:4f:c9:a4:42:08:f0:61:
3b:3f:90:09:81:da:1d:f8:ad:30:28:a5:a1:c7:bc:
c5:35:87:46:df:72:21:0d:88:cf:9b:05:cb:7a:b9:
95:98:02:50:8b:e8:2c:5f:b0:99:5e:8e:47:65:4a:
cc:fa:ff:82:73:10:88:c4:6d:6a:ad:6d:5d:b6:f8:
ea:fa:f5:8c:56:16:a6:25:6d:ea:17:f0:78:d2:bc:
4f:5f:c3:62:e9:f7:0f:17:b3:01:1f:5d:4d:a1:10:
b4:aa:4f:b8:47:82:57:f8:83:5c:e4:24:c1:2a:b8:
2a:44:70:0c:90:58:c0:89:b3:a2:dd:c6:17:60:4c:
9d:2f:34:e2:da:16:38:13:8d:49:9a:97:cb:fe:c9:
ae:e1:57:c3:15:2d:24:04:ed:31:6f:55:62:85:6c:
77:0d:6d:f8:e7:e3:73:7c:ff:3d:4f:e6:23:be:be:
89:9e:a4:92:6a:6a:82:d1:86:63:0b:47:7b:c8:58:
e2:06:62:03:8f:7a:5f:6b:2f:7c:cd:f3:f0:22:fc:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6A:64:5D:11:64:96:AD:2C:91:B1:EB:C5:91:FC:A8:57:E5:E6:76
X509v3 Authority Key Identifier:
keyid:C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:f3:be:71:11:1a:fd:37:bc:8b:b1:3f:03:b1:32:45:7c:5b:
66:67:8c:a0:34:ce:55:e1:97:50:ea:c4:8b:8f:84:82:fa:4c:
be:56:1b:01:a2:0c:db:39:6a:e6:b8:b8:d9:a4:63:f4:ea:45:
55:02:69:b6:2b:08:a6:29:c5:fe:7f:7f:24:64:dc:4b:b8:84:
6c:6d:b2:34:09:a9:70:58:50:fd:54:a1:68:1e:3e:38:57:9a:
6d:a5:e7:32:a5:f7:c8:6b:b3:62:54:f9:5c:ca:43:a0:c8:d8:
47:0c:34:c5:87:f3:70:dd:ee:4f:6e:4b:c4:cd:da:c0:93:33:
6a:4e:95:30:ca:ea:24:96:c4:2a:31:0f:24:8c:b3:ba:38:80:
ab:33:05:98:a1:07:ad:26:8f:09:cb:f0:12:1e:42:2b:7d:de:
d3:9d:50:39:d4:51:b1:56:d8:88:a4:41:3d:4c:a4:82:b5:75:
25:b3:27:5a:ac:55:a8:8e:72:7a:14:e7:9a:cb:5e:00:c8:95:
67:8f:ab:64:73:42:92:6d:26:96:93:8e:1c:81:bb:40:62:9f:
7b:61:62:8e:9a:99:41:a6:da:b0:22:b3:a6:a3:34:77:b5:37:
e3:05:aa:ef:31:29:93:f9:ab:3c:29:ef:c1:1c:c0:2c:ef:66:
2e:c2:f8:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkEyNzMxMTAvBgNVBAUTKEM0NUQzNEUzNUFGQTUxNjczNEVFQkUzRTVEQUM3MUJG
NDhFMUQ1RjMwHhcNMjYxMDExMDgxNTE4WhcNMjYxMDE4MDgxNTE4WjAYMRYwFAYD
VQQDEw02YWNiNDU5Ny0xMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtU3UJb1MY7guizo0AhCOAWKyAjCFwMjwMbzr6G90CdQUamtNkutYiyr+P0oH
hdfM+xv3cE/JpEII8GE7P5AJgdod+K0wKKWhx7zFNYdG33IhDYjPmwXLermVmAJQ
i+gsX7CZXo5HZUrM+v+CcxCIxG1qrW1dtvjq+vWMVhamJW3qF/B40rxPX8Ni6fcP
F7MBH11NoRC0qk+4R4JX+INc5CTBKrgqRHAMkFjAibOi3cYXYEydLzTi2hY4E41J
mpfL/smu4VfDFS0kBO0xb1VihWx3DW345+NzfP89T+Yjvr6JnqSSamqC0YZjC0d7
yFjiBmIDj3pfay98zfPwIvz3vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxqZF0R
ZJatLJGx68WR/KhX5eZ2MB8GA1UdIwQYMBaAFMRdNONa+lFnNO6+Pl2scb9I4dXz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI3My8xM0QzMjVEQ0ZE
OTAxMUYwOTlBQkNCMzk1QjZGNTZCQy94RjAwNDFyNlVXYzA3cjQtWGF4eHYwamgx
Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hGMDA0MXI2VVdjMDdyNC1YYXh4djBqaDFmTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTI3My8xM0QzMjVEQ0ZEOTAxMUYwOTlBQkNCMzk1QjZGNTZCQy94RjAwNDFyNlVX
YzA3cjQtWGF4eHYwamgxZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUvO+cREa/Te8i7E/A7EyRXxbZmeMoDTOVeGXUOrEi4+EgvpMvlYbAaIM2zlq
5ri42aRj9OpFVQJptisIpinF/n9/JGTcS7iEbG2yNAmpcFhQ/VShaB4+OFeabaXn
MqX3yGuzYlT5XMpDoMjYRww0xYfzcN3uT25LxM3awJMzak6VMMrqJJbEKjEPJIyz
ujiAqzMFmKEHrSaPCcvwEh5CK33e051QOdRRsVbYiKRBPUykgrV1JbMnWqxVqI5y
ehTnmsteAMiVZ4+rZHNCkm0mlpOOHIG7QGKfe2FijpqZQabasCKzpqM0d7U34wWq
7zEpk/mrPCnvwRzALO9mLsL4Iw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 13:50:34 2026 by rpki-client