
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
File: XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft (raw, json)
Hash identifier: ng3kKIFVKp0GJMF42QTT3x79XKINJShH1Bje9HlnNsE=
Subject key identifier: 5A:1D:64:FD:20:1D:4C:0D:57:14:59:D4:F9:B0:F0:30:34:D5:6E:13
Authority key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB
Certificate issuer: /CN=A9162B98/serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
Manifest number: 90
Signing time: Mon 21 Sep 2026 07:31:25 +0000
Manifest this update: Mon 21 Sep 2026 07:31:25 +0000
Manifest next update: Mon 28 Sep 2026 07:31:25 +0000
Files and hashes: 1: XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl (hash: Y8moBqFKCQ4wkPI1FXhtvP0PIITWopzvBcZjlrqemq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl
rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
Validity
Not Before: Sep 21 07:31:25 2026 GMT
Not After : Sep 28 07:31:25 2026 GMT
Subject: CN=6ab0dd4d-8814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:c5:64:19:dc:62:2a:02:ea:2b:16:7a:e6:
7a:2a:ab:4b:79:47:a9:ff:07:35:0d:0b:29:b9:57:
d1:3b:87:61:5b:8e:81:7e:d6:7b:43:aa:1e:c8:6f:
dd:02:e9:e0:6f:aa:31:4c:be:e5:71:fa:8a:43:02:
44:f7:8d:a7:82:e3:17:27:b3:e5:81:ae:34:db:ee:
65:2b:50:f4:f8:a2:99:75:5f:ea:0a:1e:9f:0b:bb:
0e:56:5b:16:53:8a:a0:0b:8a:1f:02:6d:2b:83:48:
8c:93:59:7d:e9:d6:26:9d:1c:a1:3a:c5:d1:b9:48:
88:87:27:ea:27:35:5c:cf:9a:a7:0c:0c:c1:29:aa:
8c:64:d6:a2:03:5a:b1:a9:31:0e:ff:29:83:d8:6a:
59:e6:b1:5c:80:ef:92:af:c9:aa:56:b9:a0:2f:51:
93:22:6e:30:39:27:de:d8:49:54:57:a9:00:4f:8e:
a7:c1:3c:f4:eb:4e:2f:eb:76:0e:8f:30:e5:22:fb:
04:11:7b:47:29:6b:86:29:da:cd:99:9b:4c:f0:f7:
20:47:6f:ce:29:15:c8:1b:55:eb:f7:b6:63:3a:70:
62:6d:82:0d:66:c0:b5:af:b0:7b:6e:1f:8f:ab:b5:
77:73:05:75:cc:52:f9:4d:f0:ca:cc:da:28:fc:95:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:64:FD:20:1D:4C:0D:57:14:59:D4:F9:B0:F0:30:34:D5:6E:13
X509v3 Authority Key Identifier:
keyid:5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:35:28:13:da:87:b9:fa:55:b1:5f:da:28:90:e9:7f:7a:
43:0d:0a:f1:49:c0:36:28:da:e8:3e:23:5d:48:17:25:44:af:
a1:c2:f2:0a:0c:a5:eb:b8:54:de:fe:6d:3d:c1:54:e5:74:36:
0b:a8:e2:0b:b1:c2:bd:ce:52:a5:ea:da:31:d7:88:45:a0:f6:
37:0f:8d:b4:d0:40:1b:e9:fc:30:cd:b2:40:77:6a:46:d1:03:
0b:7d:b9:3d:45:64:ab:49:2b:c0:4f:e2:26:45:ab:66:5e:41:
87:57:fe:70:c5:b8:9b:83:7b:c4:f2:34:c2:17:63:c7:d7:d5:
81:5f:ad:fb:50:4f:29:10:b5:22:dc:7d:97:fc:e1:fc:62:c8:
22:1a:96:2e:06:88:07:5b:c4:1d:a5:b6:89:7a:f7:ac:3e:98:
bf:f0:c9:3b:38:78:6d:8f:f4:d1:2c:ba:0e:e0:45:08:25:5f:
a9:b4:13:9a:0b:cc:0c:d7:81:89:d2:7a:de:20:00:79:43:b8:
84:df:bc:8b:39:db:a3:27:28:cb:e4:37:2f:02:e7:98:0d:fe:
3e:0c:8d:76:ae:41:de:b1:ba:52:f0:a8:50:11:51:bc:e2:bc:
54:2e:95:cb:5d:cd:d6:f7:19:64:3a:85:02:c0:3a:80:b7:b0:
8f:dd:ab:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjJCOTgxMTAvBgNVBAUTKDVDMDNDNkM5QzcyNkZGM0QyMDI3NDcwQTE4QTBDODgy
MjJFQzY2RkIwHhcNMjYwOTIxMDczMTI1WhcNMjYwOTI4MDczMTI1WjAYMRYwFAYD
VQQDEw02YWIwZGQ0ZC04ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1oXFZBncYioC6isWeuZ6KqtLeUep/wc1DQspuVfRO4dhW46BftZ7Q6oeyG/d
Aungb6oxTL7lcfqKQwJE942nguMXJ7Plga402+5lK1D0+KKZdV/qCh6fC7sOVlsW
U4qgC4ofAm0rg0iMk1l96dYmnRyhOsXRuUiIhyfqJzVcz5qnDAzBKaqMZNaiA1qx
qTEO/ymD2GpZ5rFcgO+Sr8mqVrmgL1GTIm4wOSfe2ElUV6kAT46nwTz0604v63YO
jzDlIvsEEXtHKWuGKdrNmZtM8PcgR2/OKRXIG1Xr97ZjOnBibYINZsC1r7B7bh+P
q7V3cwV1zFL5TfDKzNoo/JVcTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFodZP0g
HUwNVxRZ1Pmw8DA01W4TMB8GA1UdIwQYMBaAFFwDxsnHJv89ICdHChigyIIi7Gb7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkI5OC8yMzlDQTIwRURD
OTMxMUYwOTk1RDg0RDkzRjZGNTZCQy9YQVBHeWNjbV96MGdKMGNLR0tESWdpTHNa
dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBUEd5Y2NtX3owZ0owY0tHS0RJZ2lMc1p2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MkI5OC8yMzlDQTIwRURDOTMxMUYwOTk1RDg0RDkzRjZGNTZCQy9YQVBHeWNjbV96
MGdKMGNLR0tESWdpTHNadnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj3M1KBPah7n6VbFf2iiQ6X96Qw0K8UnANija6D4jXUgXJUSvocLyCgyl67hU
3v5tPcFU5XQ2C6jiC7HCvc5SperaMdeIRaD2Nw+NtNBAG+n8MM2yQHdqRtEDC325
PUVkq0krwE/iJkWrZl5Bh1f+cMW4m4N7xPI0whdjx9fVgV+t+1BPKRC1Itx9l/zh
/GLIIhqWLgaIB1vEHaW2iXr3rD6Yv/DJOzh4bY/00Sy6DuBFCCVfqbQTmgvMDNeB
idJ63iAAeUO4hN+8iznboycoy+Q3LwLnmA3+PgyNdq5B3rG6UvCoUBFRvOK8VC6V
y13N1vcZZDqFAsA6gLewj92rxg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:33:44 2026 by rpki-client