
$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
File: XUofz1MBwCdZyE7qVZFeJcFxpz8.mft (raw, json)
Hash identifier: eY6SrqExv9BUPX0/yx7afuEXIBE9BaYrMkRCblkTMUg=
Subject key identifier: D6:0A:8E:A8:36:6A:43:C8:F9:7F:D1:5A:66:2C:72:7F:4F:34:85:29
Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Certificate serial: 0358
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
Manifest number: 0350
Signing time: Sat 13 Jun 2026 00:58:45 +0000
Manifest this update: Sat 13 Jun 2026 00:58:44 +0000
Manifest next update: Sat 20 Jun 2026 00:58:44 +0000
Files and hashes: 1: XUofz1MBwCdZyE7qVZFeJcFxpz8.crl (hash: SO3BABfFoFgVU6U0ejlCFSE/PrsO9Nnytyngn30JSg8=)
2: 388802BC067711EDA1DEB529C4F9AE02.roa (hash: ZLrpjaK1+7gnd1piN93H0vUz3/K0I8ARXc+tRTMhSrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856 (0x358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Validity
Not Before: Jun 13 00:58:44 2026 GMT
Not After : Jun 20 00:58:44 2026 GMT
Subject: CN=6a2cab44-bcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:aa:71:0a:bb:5c:97:6d:ce:a2:1a:6e:46:
8b:5c:92:be:17:c0:2a:ee:9f:09:64:93:89:b0:5c:
9b:17:fa:8c:67:5b:a9:52:0f:26:bd:1b:11:19:85:
fa:d0:17:8a:7c:15:2b:52:06:2c:56:07:9e:6e:be:
06:6e:54:59:0b:5c:78:1d:b9:ca:c9:27:61:f7:0f:
d8:01:64:50:49:74:5e:10:b1:d5:47:9a:cd:85:8f:
d5:89:f1:f9:e3:44:e4:a0:b9:6e:e4:fb:03:aa:d9:
7e:42:8f:e8:7a:24:e5:79:15:57:05:52:82:4c:7d:
3a:89:cf:0f:a4:05:4c:18:23:b4:ed:9b:0e:b9:d3:
9f:f6:af:50:20:c2:9c:81:d0:ac:35:83:f4:e1:02:
e0:ad:83:73:bd:8e:2c:ae:c5:21:a6:c9:64:9c:ec:
c6:a2:5b:d5:7e:b3:aa:32:ab:7d:54:be:ce:aa:dc:
11:5a:53:60:94:47:2d:44:9e:65:77:6a:e8:40:66:
7c:1e:fc:3f:d6:29:11:6b:b3:bc:f6:29:21:c9:b6:
bc:71:a8:26:46:37:7a:c1:a8:23:55:f2:63:f7:c4:
40:2a:26:60:4e:76:36:5c:4f:9b:c9:09:97:b9:2f:
65:e0:91:33:be:08:56:35:c0:58:de:32:18:b8:63:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0A:8E:A8:36:6A:43:C8:F9:7F:D1:5A:66:2C:72:7F:4F:34:85:29
X509v3 Authority Key Identifier:
keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:c4:fe:d2:93:09:91:04:6d:5d:99:7c:c3:e6:ff:cd:7b:75:
97:1a:51:c6:63:76:40:18:97:1b:b4:e3:a4:5c:90:92:07:0c:
c8:d1:1a:5a:c8:20:8a:fd:e0:aa:de:b0:ba:df:e8:6a:73:13:
1c:7e:40:05:88:7d:65:92:69:ae:99:10:ff:38:9f:78:76:be:
59:d1:09:9e:88:ad:28:52:4d:7b:7f:35:36:43:d6:de:56:f5:
c8:43:29:b3:45:88:07:00:ae:ac:3c:80:82:18:d0:e2:b1:d2:
56:f8:26:9a:c3:84:8a:6c:6f:f2:6e:e6:44:e5:23:1d:c0:49:
e5:3e:e7:ed:19:6b:3f:72:4d:d1:58:32:fc:33:68:af:3b:62:
19:c1:62:20:62:27:2f:0a:a6:98:af:d9:5c:7c:22:76:ad:bd:
d5:0c:90:5e:4a:55:63:46:a0:c3:99:57:d0:44:a4:15:3b:2a:
d1:da:02:9b:26:9e:53:d3:bd:64:ca:e8:0b:67:c8:5f:3c:b1:
01:a2:b1:be:71:36:c0:65:8c:3d:05:9a:04:7d:2a:19:13:42:
59:c0:91:8d:72:8b:bd:b1:95:88:77:06:32:41:27:94:4b:3a:
b1:6d:20:ea:7e:89:5b:0c:d5:6c:b7:01:b7:8a:50:56:c5:45:
01:01:e3:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk0RTkxMTAvBgNVBAUTKDVENEExRkNGNTMwMUMwMjc1OUM4NEVFQTU1OTE1RTI1
QzE3MUE3M0YwHhcNMjYwNjEzMDA1ODQ0WhcNMjYwNjIwMDA1ODQ0WjAYMRYwFAYD
VQQDEw02YTJjYWI0NC1iY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtuuqcQq7XJdtzqIabkaLXJK+F8Aq7p8JZJOJsFybF/qMZ1upUg8mvRsRGYX6
0BeKfBUrUgYsVgeebr4GblRZC1x4HbnKySdh9w/YAWRQSXReELHVR5rNhY/VifH5
40TkoLlu5PsDqtl+Qo/oeiTleRVXBVKCTH06ic8PpAVMGCO07ZsOudOf9q9QIMKc
gdCsNYP04QLgrYNzvY4srsUhpslknOzGolvVfrOqMqt9VL7OqtwRWlNglEctRJ5l
d2roQGZ8Hvw/1ikRa7O89ikhyba8cagmRjd6wagjVfJj98RAKiZgTnY2XE+byQmX
uS9l4JEzvghWNcBY3jIYuGOxvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYKjqg2
akPI+X/RWmYscn9PNIUpMB8GA1UdIwQYMBaAFF1KH89TAcAnWchO6lWRXiXBcac/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTRFOS9DNUQ1RTRDQTA2
NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndDZFp5RTdxVlpGZUpjRnhw
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hVb2Z6MU1Cd0NkWnlFN3FWWkZlSmNGeHB6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTRFOS9DNUQ1RTRDQTA2NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndD
ZFp5RTdxVlpGZUpjRnhwejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkcT+0pMJkQRtXZl8w+b/zXt1lxpRxmN2QBiXG7TjpFyQkgcMyNEaWsggiv3g
qt6wut/oanMTHH5ABYh9ZZJprpkQ/zifeHa+WdEJnoitKFJNe381NkPW3lb1yEMp
s0WIBwCurDyAghjQ4rHSVvgmmsOEimxv8m7mROUjHcBJ5T7n7RlrP3JN0Vgy/DNo
rztiGcFiIGInLwqmmK/ZXHwidq291QyQXkpVY0agw5lX0ESkFTsq0doCmyaeU9O9
ZMroC2fIXzyxAaKxvnE2wGWMPQWaBH0qGRNCWcCRjXKLvbGViHcGMkEnlEs6sW0g
6n6JWwzVbLcBt4pQVsVFAQHjCA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:54 2026 by rpki-client