
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json)
Hash identifier: EWrqGaPhohYALX3AwqT4ecnU57Guc8r2w8GpqJyq4ko=
Subject key identifier: 93:70:7E:A4:99:30:C9:9B:3D:92:D6:7C:19:A1:CD:47:D8:CF:0A:9A
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
Manifest number: 01F7
Signing time: Sun 15 Nov 2026 03:34:12 +0000
Manifest this update: Sun 15 Nov 2026 03:34:11 +0000
Manifest next update: Sun 22 Nov 2026 03:34:11 +0000
Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: lMOIL32VyWx6WvO20A+0xY6FBfG4+73VnNbNqUO51Q8=)
2: 1481122880F311F186C940A665A30FBC.roa (hash: PMTOPNCvK275VS9T+ov9NkbHzoz5VMbfUd/+yh/SAV0=)
3: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: UDpxRFFH79in54JQo9jdMcxjvxE/p6jYvLLseV3aVBE=)
4: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: At643elqRJd2BjPQAPdTeEaxQov7oAvsnBfXaIpuNvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Validity
Not Before: Nov 15 03:34:11 2026 GMT
Not After : Nov 22 03:34:11 2026 GMT
Subject: CN=6af92833-374c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:56:70:92:57:fb:32:b9:7b:e7:4a:ed:e6:
39:d3:73:6b:c4:de:6c:95:1f:f2:b1:1d:ee:bf:3a:
fc:c6:30:81:58:ea:59:6d:00:d2:fd:f4:15:8e:b8:
b1:ff:ae:61:d5:c1:c5:c6:90:a0:38:1e:ba:0a:69:
4a:26:2a:11:bb:8e:f7:50:95:58:ea:4e:1e:0e:50:
16:2a:57:c5:70:b1:9e:a9:98:22:21:a3:d4:ba:57:
d6:92:b0:95:af:0a:c8:ef:30:e3:14:18:48:07:2d:
59:bc:6b:31:13:cd:25:d4:cf:a4:77:d5:00:c8:ee:
e1:8a:c8:14:b7:a4:c9:27:22:bf:b6:3c:52:70:a7:
bc:c8:66:a4:2c:7f:29:89:8a:64:4d:99:2e:4d:80:
9b:20:d5:32:00:19:f9:5e:a4:7c:0b:50:7f:60:cf:
62:af:07:1d:c1:e5:84:91:94:d6:43:17:75:dc:73:
53:04:2e:21:17:46:a5:22:e3:c8:e2:75:8b:77:88:
e1:27:a4:99:d3:fd:97:4c:50:ee:47:da:26:fb:d9:
f0:7f:68:02:29:4e:7f:d1:8a:11:20:f9:94:53:d0:
b8:09:4d:e0:ab:a2:0a:77:08:d9:37:af:d3:1d:62:
56:41:ea:16:fb:54:ed:64:18:ed:16:22:36:75:30:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:70:7E:A4:99:30:C9:9B:3D:92:D6:7C:19:A1:CD:47:D8:CF:0A:9A
X509v3 Authority Key Identifier:
keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:84:6c:50:53:bd:02:4d:fb:2e:16:96:97:d4:d8:e2:4f:e3:
a0:a0:1b:37:f5:2f:70:00:5c:65:28:47:6c:cd:54:0b:14:65:
96:2a:f4:69:2a:48:79:6e:7b:fb:10:25:f9:6c:e1:aa:11:68:
48:42:82:b2:96:af:d0:f8:f5:0a:b5:57:d0:51:4a:8f:8c:bc:
05:c4:78:f8:5f:c6:e5:cc:46:61:a9:f7:b5:47:7e:ab:a1:47:
d8:b0:41:36:e2:6d:f6:7a:a3:39:d7:08:46:ad:10:b8:fa:93:
cb:5b:7d:d8:a5:a5:6c:0f:62:fa:91:82:ca:f1:84:da:63:62:
26:f0:02:fa:47:52:54:10:83:24:f2:de:ca:2b:1a:2d:f2:ac:
87:b8:f5:86:57:2d:1a:16:8c:a5:65:d1:71:8f:ff:1e:51:0a:
c0:ef:88:97:08:86:da:59:c0:18:02:3b:b9:05:78:ab:2d:ea:
eb:91:fa:db:11:db:5c:75:db:15:c5:14:53:0a:49:13:73:1f:
c7:1a:92:7b:8e:29:97:23:8d:62:31:ee:81:79:55:1c:4f:53:
61:35:93:28:4a:e5:27:29:6f:b1:14:a3:ee:88:a5:99:ab:a3:
15:0a:a0:5e:98:38:a0:8c:40:78:8d:2b:67:d8:c6:2b:a7:a6:
ba:4f:1b:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF
RTFEOTM1Q0YwHhcNMjYxMTE1MDMzNDExWhcNMjYxMTIyMDMzNDExWjAYMRYwFAYD
VQQDEw02YWY5MjgzMy0zNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuANWcJJX+zK5e+dK7eY503NrxN5slR/ysR3uvzr8xjCBWOpZbQDS/fQVjrix
/65h1cHFxpCgOB66CmlKJioRu473UJVY6k4eDlAWKlfFcLGeqZgiIaPUulfWkrCV
rwrI7zDjFBhIBy1ZvGsxE80l1M+kd9UAyO7hisgUt6TJJyK/tjxScKe8yGakLH8p
iYpkTZkuTYCbINUyABn5XqR8C1B/YM9irwcdweWEkZTWQxd13HNTBC4hF0alIuPI
4nWLd4jhJ6SZ0/2XTFDuR9om+9nwf2gCKU5/0YoRIPmUU9C4CU3gq6IKdwjZN6/T
HWJWQeoW+1TtZBjtFiI2dTDWPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNwfqSZ
MMmbPZLWfBmhzUfYzwqaMB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4
MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO
YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0IyOS82MTdFOTQ0OEU4MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6
ZGZoRmFJWDJvUWZ1SFpOYzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd4RsUFO9Ak37LhaWl9TY4k/joKAbN/UvcABcZShHbM1UCxRllir0aSpIeW57
+xAl+WzhqhFoSEKCspav0Pj1CrVX0FFKj4y8BcR4+F/G5cxGYan3tUd+q6FH2LBB
NuJt9nqjOdcIRq0QuPqTy1t92KWlbA9i+pGCyvGE2mNiJvAC+kdSVBCDJPLeyisa
LfKsh7j1hlctGhaMpWXRcY//HlEKwO+IlwiG2lnAGAI7uQV4qy3q65H62xHbXHXb
FcUUUwpJE3MfxxqSe44plyONYjHugXlVHE9TYTWTKErlJylvsRSj7oilmaujFQqg
Xpg4oIxAeI0rZ9jGK6emuk8bkg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:52:06 2026 by rpki-client