
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft
File: XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft (raw, json)
Hash identifier: P2CgXAgH5NkQMGr/+QAWFFBV5NhKsoWfB6pxhqAwVAs=
Subject key identifier: 7A:AA:6D:B6:2F:87:33:14:BF:6F:2F:90:E3:B1:E3:7D:C2:55:0E:8B
Authority key identifier: 5E:F2:BC:76:FC:C3:FD:C9:79:57:9E:B3:41:9F:82:18:74:E9:60:67
Certificate issuer: /CN=A91230A3/serialNumber=5EF2BC76FCC3FDC979579EB3419F821874E96067
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft
Manifest number: 7E
Signing time: Sat 03 Oct 2026 08:29:42 +0000
Manifest this update: Sat 03 Oct 2026 08:29:41 +0000
Manifest next update: Sat 10 Oct 2026 08:29:41 +0000
Files and hashes: 1: XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl (hash: MMaWXVTaVUlCfza4IyQA1iyjbvZcrgdt9YJt1hKbyDs=)
2: 175E7E7A071011F19135264E253D8C67.roa (hash: yFSB05iQ3FLuwiQ0oQDl3ISNbrEcFFMS5/g24lUEvSU=)
3: 16AC8742071011F19135264E253D8C67.roa (hash: Ho7coqEarWJ9BJhEvGox/ePOuY1nkqkaNGKMo78IrM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl
rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91230A3, serialNumber=5EF2BC76FCC3FDC979579EB3419F821874E96067
Validity
Not Before: Oct 3 08:29:41 2026 GMT
Not After : Oct 10 08:29:41 2026 GMT
Subject: CN=6ac0bcf6-a79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:a4:ca:1a:c5:03:f2:45:a7:09:8f:43:50:
0b:12:ff:42:f3:02:c5:2b:fa:80:9e:37:a2:f4:05:
32:2d:66:1e:82:6b:27:4f:72:be:45:ab:4d:6a:a5:
eb:88:80:4c:9a:bd:13:00:60:5e:c0:c6:18:b8:2d:
ba:0b:b7:d1:64:7c:53:35:21:23:42:61:0e:3d:ff:
e3:5e:6a:9c:3e:cd:06:80:f6:30:a1:5c:77:ee:0e:
b1:9c:cd:2d:04:a6:bd:28:bf:14:cd:3b:cc:e8:b7:
65:ed:97:0e:4c:41:0c:52:13:26:f0:9f:ea:75:bd:
22:53:f7:d9:14:41:5d:fb:dc:3b:04:03:de:e5:97:
a9:ee:ae:d2:c4:52:19:99:75:68:35:48:da:2a:b4:
6b:4f:55:3f:50:ab:f5:9b:e4:09:bf:50:97:bf:44:
3d:7f:60:07:35:e9:8b:55:cf:72:73:f5:19:0d:33:
83:6c:9e:a9:a1:b1:d1:d4:41:88:d7:b8:1b:ae:fc:
81:52:89:ca:aa:8d:33:2a:f3:f2:3e:1e:0c:7b:89:
bf:7b:be:f0:ba:a2:9a:d7:b1:d6:36:9d:22:9e:30:
b5:81:a3:f5:ca:85:e1:7b:f7:e5:6b:99:b6:59:68:
85:aa:5d:db:f5:c1:6b:05:7b:2f:de:01:e8:ea:e3:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AA:6D:B6:2F:87:33:14:BF:6F:2F:90:E3:B1:E3:7D:C2:55:0E:8B
X509v3 Authority Key Identifier:
keyid:5E:F2:BC:76:FC:C3:FD:C9:79:57:9E:B3:41:9F:82:18:74:E9:60:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f9:e3:d6:5f:4b:e8:2b:45:27:bd:f7:a3:c1:ff:8f:e0:cf:
ed:b9:d0:e2:2e:a5:56:60:25:3c:b9:0e:85:1a:04:c3:cd:c9:
6b:a6:4b:90:2b:0d:39:b1:fd:4e:b9:32:33:cc:cb:62:90:ce:
3f:de:de:6a:91:08:8a:25:79:af:d2:3e:68:42:8e:79:bf:cd:
f7:98:08:3f:b6:d5:2b:29:92:29:10:eb:61:9d:5b:06:f5:6c:
7b:0d:a2:fc:4f:cf:b5:30:8a:c5:db:cf:2c:97:f0:85:b8:a9:
2a:a2:b6:b0:ca:66:b6:68:d1:d1:2a:31:02:d2:e5:50:f3:26:
63:09:e6:c1:fe:1b:02:c0:63:f9:0d:b4:08:56:46:a0:04:00:
10:37:7c:94:a4:14:37:70:1a:ce:e6:53:a2:9d:04:68:aa:50:
72:5b:d6:61:7e:0c:e7:c6:22:a8:77:7a:15:d0:77:47:59:87:
9f:27:c3:13:66:58:a2:4e:77:2e:34:0e:07:05:31:40:42:e0:
ee:dc:f1:9b:70:80:3d:09:ae:68:f4:fa:5c:6f:08:fc:ea:55:
96:f5:c3:9d:8e:73:2b:3b:a4:0f:97:71:9e:db:aa:41:b5:04:
28:48:41:b6:a1:20:12:ed:6d:c2:46:fe:a2:3e:07:df:6a:81:
d1:bd:51:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwQTMxMTAvBgNVBAUTKDVFRjJCQzc2RkNDM0ZEQzk3OTU3OUVCMzQxOUY4MjE4
NzRFOTYwNjcwHhcNMjYxMDAzMDgyOTQxWhcNMjYxMDEwMDgyOTQxWjAYMRYwFAYD
VQQDEw02YWMwYmNmNi1hNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4/KkyhrFA/JFpwmPQ1ALEv9C8wLFK/qAnjei9AUyLWYegmsnT3K+RatNaqXr
iIBMmr0TAGBewMYYuC26C7fRZHxTNSEjQmEOPf/jXmqcPs0GgPYwoVx37g6xnM0t
BKa9KL8UzTvM6Ldl7ZcOTEEMUhMm8J/qdb0iU/fZFEFd+9w7BAPe5Zep7q7SxFIZ
mXVoNUjaKrRrT1U/UKv1m+QJv1CXv0Q9f2AHNemLVc9yc/UZDTODbJ6pobHR1EGI
17gbrvyBUonKqo0zKvPyPh4Me4m/e77wuqKa17HWNp0injC1gaP1yoXhe/fla5m2
WWiFql3b9cFrBXsv3gHo6uPciwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqqbbYv
hzMUv28vkOOx433CVQ6LMB8GA1UdIwQYMBaAFF7yvHb8w/3JeVees0Gfghh06WBn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBBMy9GQjk4MDlBNjA3
MDMxMUYxQTgxMDVGNTUyMjNEOEM2Ny9Ydks4ZHZ6RF9jbDVWNTZ6UVotQ0dIVHBZ
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h2SzhkdnpEX2NsNVY1NnpRWi1DR0hUcFlHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzBBMy9GQjk4MDlBNjA3MDMxMUYxQTgxMDVGNTUyMjNEOEM2Ny9Ydks4ZHZ6RF9j
bDVWNTZ6UVotQ0dIVHBZR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApvnj1l9L6CtFJ733o8H/j+DP7bnQ4i6lVmAlPLkOhRoEw83Ja6ZLkCsNObH9
TrkyM8zLYpDOP97eapEIiiV5r9I+aEKOeb/N95gIP7bVKymSKRDrYZ1bBvVsew2i
/E/PtTCKxdvPLJfwhbipKqK2sMpmtmjR0SoxAtLlUPMmYwnmwf4bAsBj+Q20CFZG
oAQAEDd8lKQUN3AazuZTop0EaKpQclvWYX4M58YiqHd6FdB3R1mHnyfDE2ZYok53
LjQOBwUxQELg7tzxm3CAPQmuaPT6XG8I/OpVlvXDnY5zKzukD5dxntuqQbUEKEhB
tqEgEu1twkb+oj4H32qB0b1Rzw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:21:02 2026 by rpki-client