
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json)
Hash identifier: HCqx9CI2y4ANLSJVyc4UPBgRLyUM7Bex5slwT9iUTag=
Subject key identifier: 1F:0A:FE:2A:3D:BA:93:BF:FF:D7:41:E5:D2:59:10:94:24:89:DE:83
Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
Manifest number: 025F
Signing time: Sat 19 Sep 2026 02:25:00 +0000
Manifest this update: Sat 19 Sep 2026 02:24:59 +0000
Manifest next update: Sat 26 Sep 2026 02:24:59 +0000
Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: MlKFBqCBmPD5Z1mrfiQfGqQetjkpzBjWHv+HC4KiJ28=)
2: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=)
3: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Validity
Not Before: Sep 19 02:24:59 2026 GMT
Not After : Sep 26 02:24:59 2026 GMT
Subject: CN=6aadf27c-0709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:d3:b1:26:6a:1e:8b:52:e7:86:2e:30:8e:
cb:4b:d6:70:4e:ba:fc:06:d9:ca:40:5c:cc:ec:68:
32:9d:22:b8:26:bd:a1:f7:7f:02:75:78:38:23:c2:
60:1f:3e:e1:3d:44:58:05:0b:b3:ed:46:17:7f:6a:
c6:f9:e3:9a:83:be:5e:4a:a3:b3:fa:54:66:6d:95:
61:1f:cb:ad:28:35:1c:a5:7d:a6:29:d5:59:80:85:
34:c8:c0:7c:f3:4d:4d:93:e3:fe:bc:75:fc:90:93:
af:77:51:8e:98:a9:b9:23:99:dd:26:0b:49:1a:29:
56:07:8e:27:68:33:c8:cd:07:99:0a:f8:78:eb:2a:
8c:ea:0d:a8:fb:2a:e7:89:24:d2:be:d1:e6:4e:a3:
2f:fe:8c:66:c9:0d:e0:fa:66:cd:b5:4c:27:03:eb:
f4:ca:75:e0:9c:8c:28:d1:8f:cf:f8:a1:28:04:f8:
9e:95:d4:7e:89:77:6c:36:b9:28:e5:5a:62:3e:54:
35:54:0e:cc:7d:e5:59:e3:a6:3e:dc:4c:14:60:8e:
55:a7:10:3b:7d:62:2c:a9:b2:ad:b9:97:cc:04:9c:
d3:69:2b:61:21:52:9f:c1:6f:89:55:83:29:9f:f1:
97:91:80:34:3c:eb:09:e3:ed:9a:6c:bd:fe:cd:dd:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:FE:2A:3D:BA:93:BF:FF:D7:41:E5:D2:59:10:94:24:89:DE:83
X509v3 Authority Key Identifier:
keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:c8:06:c9:25:a2:eb:80:de:77:5f:f2:34:45:4c:83:94:f7:
91:10:93:fa:27:40:55:d4:67:2d:4b:21:e1:77:83:f8:b3:30:
00:e0:c4:03:cc:12:20:d7:5a:69:72:88:f8:79:f2:a7:7e:a8:
ff:17:29:57:bf:d6:44:c7:d3:70:cd:94:6b:58:de:c1:57:16:
a9:3d:72:21:8f:ec:58:9f:70:66:79:87:ba:3a:d6:99:f6:23:
65:e9:9b:74:0c:63:b0:0c:c0:8e:90:b1:37:0b:03:65:3b:5c:
48:3f:b7:15:a2:08:3e:67:f0:5a:f5:3b:ed:01:4e:20:9e:df:
d2:85:00:47:39:83:fa:6a:64:b5:9b:54:e3:4b:f2:c1:f5:b0:
24:2c:b1:dd:ac:a0:d0:99:c0:16:c9:ee:85:38:d1:6e:d6:ae:
fb:80:45:d7:3f:9a:66:f3:23:f6:a4:a9:5f:7e:9f:29:92:ef:
bf:90:18:ee:03:90:95:77:b3:ce:6f:7b:8b:20:77:f6:4a:42:
c3:8b:ba:67:98:47:64:40:cb:bc:c7:79:21:ff:b7:ff:d5:d0:
51:6d:6f:5b:aa:4c:a7:7a:80:c6:14:21:4e:7d:f3:a4:30:6e:
d8:92:55:5c:08:f9:26:60:7a:87:af:5a:c5:2a:67:f4:16:d7:
6d:f9:4c:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE
QzQ5QUM1OUMwHhcNMjYwOTE5MDIyNDU5WhcNMjYwOTI2MDIyNDU5WjAYMRYwFAYD
VQQDEw02YWFkZjI3Yy0wNzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzsTTsSZqHotS54YuMI7LS9ZwTrr8BtnKQFzM7GgynSK4Jr2h938CdXg4I8Jg
Hz7hPURYBQuz7UYXf2rG+eOag75eSqOz+lRmbZVhH8utKDUcpX2mKdVZgIU0yMB8
801Nk+P+vHX8kJOvd1GOmKm5I5ndJgtJGilWB44naDPIzQeZCvh46yqM6g2o+yrn
iSTSvtHmTqMv/oxmyQ3g+mbNtUwnA+v0ynXgnIwo0Y/P+KEoBPieldR+iXdsNrko
5VpiPlQ1VA7MfeVZ46Y+3EwUYI5VpxA7fWIsqbKtuZfMBJzTaSthIVKfwW+JVYMp
n/GXkYA0POsJ4+2abL3+zd0QPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8K/io9
upO//9dB5dJZEJQkid6DMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC
OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT
QkhiMk84WUo5VlRjU2F4WncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFcgGySWi64Ded1/yNEVMg5T3kRCT+idAVdRnLUsh4XeD+LMwAODEA8wSINda
aXKI+Hnyp36o/xcpV7/WRMfTcM2Ua1jewVcWqT1yIY/sWJ9wZnmHujrWmfYjZemb
dAxjsAzAjpCxNwsDZTtcSD+3FaIIPmfwWvU77QFOIJ7f0oUARzmD+mpktZtU40vy
wfWwJCyx3ayg0JnAFsnuhTjRbtau+4BF1z+aZvMj9qSpX36fKZLvv5AY7gOQlXez
zm97iyB39kpCw4u6Z5hHZEDLvMd5If+3/9XQUW1vW6pMp3qAxhQhTn3zpDBu2JJV
XAj5JmB6h69axSpn9BbXbflMSA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:24:30 2026 by rpki-client