
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json)
Hash identifier: 5m6wFjVq/fkSJ0cYtxuCn5kx54BnrXQnmlCzx7+jwL4=
Subject key identifier: 7A:74:AC:34:14:78:DD:78:1D:10:4A:FA:D4:59:77:D7:2C:B4:DC:72
Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Certificate serial: 0384
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
Manifest number: 037B
Signing time: Sun 27 Sep 2026 00:51:01 +0000
Manifest this update: Sun 27 Sep 2026 00:51:00 +0000
Manifest next update: Sun 04 Oct 2026 00:51:00 +0000
Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: jl/akM7+HXABYPDE8TF893zgUAqJqksTfWDYT0XP+dU=)
2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: 6tX/ppxMQbPSi1+Z7rMVoOSNeQ/9yxMMZw0GpFlQ8jY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178ACB, serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Validity
Not Before: Sep 27 00:51:00 2026 GMT
Not After : Oct 4 00:51:00 2026 GMT
Subject: CN=6ab86875-03fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:3f:f5:e5:70:bc:7c:7e:2b:96:a4:12:14:
08:d8:ea:69:b9:c5:cf:5b:82:ef:4a:3c:81:1e:57:
37:43:fa:f1:b0:08:4b:75:e7:d1:7f:6b:ed:e2:d7:
d6:4e:c9:de:07:b0:22:1b:76:eb:26:a8:7d:43:3e:
4c:25:92:94:79:9e:4e:4b:6d:0f:e7:6d:4b:e9:ee:
05:cb:0d:f9:e8:0c:b9:8a:76:66:0b:e8:93:3e:00:
63:e6:5f:68:8c:f5:17:5b:a5:bf:ec:65:6f:7c:32:
02:21:f1:ec:28:86:a9:bf:e4:7b:d2:98:95:81:93:
0b:85:1b:67:d7:ec:c0:ce:df:6f:1e:d7:dd:7d:f0:
37:8a:6a:a9:8a:8c:17:73:84:85:3e:6b:26:30:84:
73:97:f8:69:22:9f:47:04:ce:61:bd:43:18:1a:32:
43:fd:ab:80:09:1e:d6:1a:52:9e:70:f4:8a:44:3f:
0b:09:88:b8:ed:75:8b:7f:6c:b5:a8:ce:01:e8:36:
37:f6:22:cf:38:c2:4e:65:64:59:5a:2a:8f:2b:8e:
ab:6b:d5:a0:03:6b:93:1f:63:93:dc:d6:fa:97:7e:
79:1e:f1:70:17:0e:65:68:8d:38:ef:82:3b:6d:57:
64:a8:55:9d:ab:18:02:87:67:42:40:48:0a:33:b3:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:74:AC:34:14:78:DD:78:1D:10:4A:FA:D4:59:77:D7:2C:B4:DC:72
X509v3 Authority Key Identifier:
keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:bd:2b:b2:84:c1:c5:21:f7:67:f0:b2:eb:f5:2d:40:30:b2:
31:88:f5:72:a2:01:ca:1b:96:30:3d:2d:5b:87:8a:a7:39:a8:
93:42:8b:56:f0:90:44:bc:64:1e:fe:37:e3:02:f7:eb:45:ca:
c4:38:f2:28:97:a0:03:bd:05:2b:e0:6c:be:d7:a4:db:4c:10:
7a:e9:11:2b:87:0f:fb:08:11:69:c0:a6:aa:23:67:4c:af:3c:
ee:d9:d3:07:59:e2:7d:d9:df:84:6e:03:5a:4d:3d:34:11:a2:
08:74:8d:75:2f:96:38:7a:39:f4:67:96:fb:a6:b0:a0:21:f0:
90:c2:c4:73:44:20:96:36:24:1a:5d:55:0e:76:b1:48:65:d1:
ea:bc:a0:45:b9:d6:4c:46:d2:2a:7d:e4:dd:e2:86:d2:8c:ab:
bd:86:b0:b3:b0:74:ee:76:77:db:8e:6c:54:72:43:3a:a0:3e:
20:1d:d9:0c:37:d3:cd:63:c9:7e:dc:16:54:fa:ef:40:de:1d:
eb:78:42:60:8e:51:72:ab:4f:bc:82:a9:b7:70:e8:80:1b:86:
a7:73:04:6c:92:68:13:b0:61:0e:00:b1:12:dc:f1:54:3b:7a:
f1:aa:6a:88:fd:17:74:0d:d4:26:df:92:9a:3d:e1:ef:19:86:
2d:49:a6:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBQ0IxMTAvBgNVBAUTKDVDMjdENTNEMEYyMzgxM0M4RUExNjM4QUYwNkM4RDM0
RDhGMkRGRjEwHhcNMjYwOTI3MDA1MTAwWhcNMjYxMDA0MDA1MTAwWjAYMRYwFAYD
VQQDEw02YWI4Njg3NS0wM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Bo/9eVwvHx+K5akEhQI2OppucXPW4LvSjyBHlc3Q/rxsAhLdefRf2vt4tfW
TsneB7AiG3brJqh9Qz5MJZKUeZ5OS20P521L6e4Fyw356Ay5inZmC+iTPgBj5l9o
jPUXW6W/7GVvfDICIfHsKIapv+R70piVgZMLhRtn1+zAzt9vHtfdffA3imqpiowX
c4SFPmsmMIRzl/hpIp9HBM5hvUMYGjJD/auACR7WGlKecPSKRD8LCYi47XWLf2y1
qM4B6DY39iLPOMJOZWRZWiqPK46ra9WgA2uTH2OT3Nb6l355HvFwFw5laI0474I7
bVdkqFWdqxgCh2dCQEgKM7P0YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHp0rDQU
eN14HRBK+tRZd9cstNxyMB8GA1UdIwQYMBaAFFwn1T0PI4E8jqFjivBsjTTY8t/x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFDQi81MjNBOEY1NjBC
QTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdUeU9vV09LOEd5Tk5Oankz
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hDZlZQUThqZ1R5T29XT0s4R3lOTk5qeTNfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEFDQi81MjNBOEY1NjBCQTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdU
eU9vV09LOEd5Tk5OankzX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANr0rsoTBxSH3Z/Cy6/UtQDCyMYj1cqIByhuWMD0tW4eKpzmok0KLVvCQRLxk
Hv434wL360XKxDjyKJegA70FK+Bsvtek20wQeukRK4cP+wgRacCmqiNnTK887tnT
B1nifdnfhG4DWk09NBGiCHSNdS+WOHo59GeW+6awoCHwkMLEc0QgljYkGl1VDnax
SGXR6rygRbnWTEbSKn3k3eKG0oyrvYaws7B07nZ3245sVHJDOqA+IB3ZDDfTzWPJ
ftwWVPrvQN4d63hCYI5RcqtPvIKpt3DogBuGp3MEbJJoE7BhDgCxEtzxVDt68apq
iP0XdA3UJt+Smj3h7xmGLUmmEA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:14:37 2026 by rpki-client