
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
File: XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json)
Hash identifier: 8nUeBNgO9JQaizVfcKF0k2sYIGRVT8o1rLikc5JuyMk=
Subject key identifier: F2:B4:38:52:F6:90:A2:57:05:B3:58:AA:DD:C2:A8:89:62:27:86:0D
Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9
Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
Certificate serial: 0847
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
Manifest number: 083E
Signing time: Sun 20 Sep 2026 20:56:46 +0000
Manifest this update: Sun 20 Sep 2026 20:56:46 +0000
Manifest next update: Sun 27 Sep 2026 20:56:46 +0000
Files and hashes: 1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: bt0R9aNBWtbeN9JGr5R1dAkdkHlxr1uK+7c7VHDpvic=)
2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: A+lqHHILRck/15Y7Xtw67As0ESAMbuZbfeWoqwALbWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl
rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
Validity
Not Before: Sep 20 20:56:46 2026 GMT
Not After : Sep 27 20:56:46 2026 GMT
Subject: CN=6ab0488e-ef60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:a0:10:3a:1d:44:67:21:92:f1:b3:be:30:
f1:36:3f:7e:55:c3:2f:5f:a3:42:3e:40:4b:21:c5:
48:e9:75:de:68:05:6f:24:6b:a9:c7:3b:db:e9:29:
66:5c:c4:32:db:fb:ad:ef:45:21:7e:26:1a:19:5c:
ae:69:ad:f9:aa:f2:95:22:98:81:dc:0f:29:dc:81:
ee:08:e5:4d:2c:fb:5a:6d:50:d0:50:33:a8:4f:87:
1a:fe:37:cc:ec:00:85:76:98:39:5a:9f:0f:db:7f:
6e:4b:8c:69:7d:fd:f3:29:4c:fa:9a:3c:01:0e:40:
32:13:57:10:58:dd:f1:fb:1b:82:5e:a9:63:43:9c:
9e:c0:66:43:22:0d:0b:6e:11:2e:35:35:b6:76:f2:
02:8e:2e:04:e5:a4:77:dc:bd:66:f6:f8:51:27:1c:
4e:3c:96:71:6d:90:7d:b8:05:fc:b1:92:4b:60:3a:
17:87:4d:c6:80:ef:2e:44:54:cf:2d:1c:d2:63:ce:
5d:4d:71:e6:79:73:aa:99:de:34:c2:3a:26:08:02:
da:c1:f0:84:b1:15:ec:1f:51:cd:6e:86:88:9f:1a:
28:48:c5:46:43:1b:24:7a:18:32:90:46:83:75:fb:
82:a0:b7:e7:6f:3b:55:a5:4a:9a:c9:fa:f1:39:65:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:38:52:F6:90:A2:57:05:B3:58:AA:DD:C2:A8:89:62:27:86:0D
X509v3 Authority Key Identifier:
keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:3b:3a:88:f7:26:98:b1:79:43:eb:55:4f:c5:48:2c:35:59:
39:9f:ee:c2:db:f7:0d:f3:bd:2a:aa:f4:43:d1:0d:2b:9b:84:
4c:bc:e5:f3:8c:d3:81:4e:58:47:3f:5c:c5:5b:fa:96:c9:1d:
ba:cc:21:d0:0b:51:81:cd:2f:d1:13:ac:cd:0f:2c:90:9f:4f:
18:3a:0b:cc:ac:09:a6:47:51:07:88:42:db:cf:ce:8c:84:b8:
f7:25:e8:30:a3:8a:e1:de:96:a2:89:bb:e0:30:d0:84:33:da:
95:59:4e:5a:5d:0b:e2:43:cb:0b:5f:00:05:d5:6c:df:5f:d2:
ac:70:fb:15:b0:9f:7a:1a:a4:d6:1b:68:54:8a:cd:f7:45:58:
bc:e7:1b:ca:36:dd:9b:06:80:ba:ca:ea:e8:7a:63:0f:77:08:
e6:fb:a1:79:de:f1:42:2a:ab:44:2c:0a:c5:49:08:4c:ea:3c:
b4:9c:5e:e6:4b:1f:79:b2:9a:a2:49:79:d0:46:f9:23:cf:96:
db:8f:2b:78:c1:b4:72:5e:c1:19:63:63:64:ba:19:5e:67:2e:
a8:11:8e:c2:78:a7:f8:8d:c6:fc:44:6e:bc:89:c7:37:7e:f3:
18:a8:07:49:23:9c:5f:f4:ca:f8:af:7e:36:1d:75:ce:18:de:
8e:c3:c6:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3
QzcyMDVBQTkwHhcNMjYwOTIwMjA1NjQ2WhcNMjYwOTI3MjA1NjQ2WjAYMRYwFAYD
VQQDEw02YWIwNDg4ZS1lZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0FegEDodRGchkvGzvjDxNj9+VcMvX6NCPkBLIcVI6XXeaAVvJGupxzvb6Slm
XMQy2/ut70UhfiYaGVyuaa35qvKVIpiB3A8p3IHuCOVNLPtabVDQUDOoT4ca/jfM
7ACFdpg5Wp8P239uS4xpff3zKUz6mjwBDkAyE1cQWN3x+xuCXqljQ5yewGZDIg0L
bhEuNTW2dvICji4E5aR33L1m9vhRJxxOPJZxbZB9uAX8sZJLYDoXh03GgO8uRFTP
LRzSY85dTXHmeXOqmd40wjomCALawfCEsRXsH1HNboaInxooSMVGQxskehgykEaD
dfuCoLfnbztVpUqayfrxOWWllQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPK0OFL2
kKJXBbNYqt3CqIliJ4YNMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5
MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX
cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUU3OC9GMUY0RDNDRTI5MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5
TXBncUxMVGVWUE44Y2dXcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhTs6iPcmmLF5Q+tVT8VILDVZOZ/uwtv3DfO9Kqr0Q9ENK5uETLzl84zTgU5Y
Rz9cxVv6lskduswh0AtRgc0v0ROszQ8skJ9PGDoLzKwJpkdRB4hC28/OjIS49yXo
MKOK4d6Woom74DDQhDPalVlOWl0L4kPLC18ABdVs31/SrHD7FbCfehqk1htoVIrN
90VYvOcbyjbdmwaAusrq6HpjD3cI5vuhed7xQiqrRCwKxUkITOo8tJxe5ksfebKa
okl50Eb5I8+W248reMG0cl7BGWNjZLoZXmcuqBGOwnin+I3G/ERuvInHN37zGKgH
SSOcX/TK+K9+Nh11zhjejsPGMA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:06:47 2026 by rpki-client