
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json)
Hash identifier: RuC5R1yMDso0yx16AOMI3Bb3ZVqc5pg1bfNbRo9LhZg=
Subject key identifier: F2:57:FE:9A:4F:C6:1D:29:16:59:E2:A8:58:4F:33:D7:0F:0D:08:7D
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial: 055D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
Manifest number: 0556
Signing time: Sat 10 Oct 2026 23:27:54 +0000
Manifest this update: Sat 10 Oct 2026 23:27:53 +0000
Manifest next update: Sat 17 Oct 2026 23:27:53 +0000
Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: e1SzOl//HUqUG3e1Kkk2idOk+7qXXFijWowP3M19K28=)
2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: tzCOvyqYt7MFJ8SNbSmhb4aGjE+HioiUqoKryi7LaSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Validity
Not Before: Oct 10 23:27:53 2026 GMT
Not After : Oct 17 23:27:53 2026 GMT
Subject: CN=6acac9fa-743d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:a5:a3:96:0e:0d:f2:56:12:f7:6c:44:61:
77:fd:2e:57:d5:25:e9:64:c3:68:3d:16:f7:0e:aa:
b9:b8:47:ab:86:cb:de:ca:f8:0b:4e:85:ec:93:67:
fa:73:fe:ca:58:4b:9d:41:ef:ae:34:67:53:de:3f:
71:63:2a:86:f0:5b:12:74:bc:66:e7:8d:aa:51:11:
b6:25:c4:82:ab:13:71:55:95:5a:13:ab:5f:d4:12:
24:b3:ff:ac:83:47:d5:d3:f2:77:c2:e0:87:89:d1:
70:c5:73:b4:30:b5:83:cd:33:c3:5e:00:88:60:81:
d8:6c:b5:be:11:a5:b0:01:f1:91:0e:f8:70:04:e8:
93:19:65:5f:78:8d:6f:3b:69:5c:5c:00:12:d1:c4:
49:ed:6e:79:79:8b:e2:64:23:e2:86:bb:d4:34:b6:
ba:56:58:03:97:d8:16:6a:4b:1a:63:c4:41:3d:c2:
82:e1:d4:e3:67:d2:17:c0:8a:be:82:e8:33:20:9e:
36:44:32:99:95:42:ff:31:fe:8e:87:7f:ec:21:0c:
18:0c:88:02:51:bf:51:b0:b9:44:28:ed:7c:ec:fc:
69:9b:4c:a8:35:d0:be:63:28:d5:31:e3:d7:93:ec:
01:18:63:e8:60:3f:c1:ce:b3:00:fd:3a:6f:1e:7c:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:FE:9A:4F:C6:1D:29:16:59:E2:A8:58:4F:33:D7:0F:0D:08:7D
X509v3 Authority Key Identifier:
keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ca:d0:a8:e2:bf:3c:b3:57:a2:71:2b:92:c8:d3:4b:d0:ab:
97:8d:34:73:3d:24:1b:37:82:62:68:2b:c7:72:ec:7f:56:eb:
a5:38:bb:31:87:4f:b5:65:3a:9a:84:30:74:57:9a:44:cd:9e:
05:de:68:5c:11:b3:19:13:b6:e1:68:a1:04:7d:a0:38:04:b9:
68:ed:83:03:fd:62:5d:78:d2:1c:cb:0b:5f:f6:bb:8c:3d:b6:
6c:cc:53:88:9e:63:2b:7b:40:a3:66:cb:3d:79:ea:92:43:e7:
73:5f:27:f9:ca:91:5d:d7:25:08:9d:85:80:fe:f7:c7:c8:be:
af:06:47:49:7d:0a:69:bd:33:37:fe:2b:bf:19:83:b9:ba:32:
34:bd:70:25:7d:62:44:e6:f4:56:88:ad:c1:73:1d:aa:ae:ec:
bd:2e:8f:9c:98:eb:e8:b6:d3:c4:e5:85:01:72:9d:0a:d2:90:
5a:d5:30:d8:19:c1:b0:5b:58:d1:ad:8d:36:a6:45:d9:4c:fa:
f3:da:ed:5b:eb:9a:51:57:82:ec:d1:15:e6:80:b3:11:9a:e7:
51:1a:a8:57:32:62:1f:f5:8e:2f:1c:2b:a9:60:c8:3e:3c:0d:
5f:96:f3:88:04:8a:2e:8e:76:1b:67:f8:4e:79:c3:2b:57:a7:
9d:63:fc:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD
QjdCRDM0MEUwHhcNMjYxMDEwMjMyNzUzWhcNMjYxMDE3MjMyNzUzWjAYMRYwFAYD
VQQDEw02YWNhYzlmYS03NDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlpalo5YODfJWEvdsRGF3/S5X1SXpZMNoPRb3Dqq5uEerhsveyvgLToXsk2f6
c/7KWEudQe+uNGdT3j9xYyqG8FsSdLxm542qURG2JcSCqxNxVZVaE6tf1BIks/+s
g0fV0/J3wuCHidFwxXO0MLWDzTPDXgCIYIHYbLW+EaWwAfGRDvhwBOiTGWVfeI1v
O2lcXAAS0cRJ7W55eYviZCPihrvUNLa6VlgDl9gWaksaY8RBPcKC4dTjZ9IXwIq+
gugzIJ42RDKZlUL/Mf6Oh3/sIQwYDIgCUb9RsLlEKO187Pxpm0yoNdC+YyjVMePX
k+wBGGPoYD/BzrMA/TpvHnxgQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJX/ppP
xh0pFlniqFhPM9cPDQh9MB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy
RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO
QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5
VXFZLXkwdzRhVFhMZTlOQTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAocrQqOK/PLNXonErksjTS9Crl400cz0kGzeCYmgrx3Lsf1brpTi7MYdPtWU6
moQwdFeaRM2eBd5oXBGzGRO24WihBH2gOAS5aO2DA/1iXXjSHMsLX/a7jD22bMxT
iJ5jK3tAo2bLPXnqkkPnc18n+cqRXdclCJ2FgP73x8i+rwZHSX0Kab0zN/4rvxmD
uboyNL1wJX1iROb0VoitwXMdqq7svS6PnJjr6LbTxOWFAXKdCtKQWtUw2BnBsFtY
0a2NNqZF2Uz689rtW+uaUVeC7NEV5oCzEZrnURqoVzJiH/WOLxwrqWDIPjwNX5bz
iASKLo52G2f4TnnDK1ennWP8vA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:45:33 2026 by rpki-client