
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json)
Hash identifier: /pteZQDeqCOwbX9Z1qGu+NQg7iUuyzQ2+3WH5zc8BZY=
Subject key identifier: 6B:C7:B9:6B:91:31:1B:DC:88:00:37:A7:C1:2B:27:88:5C:18:1A:B6
Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Certificate serial: 25C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
Manifest number: 25B0
Signing time: Sun 01 Mar 2026 23:32:54 +0000
Manifest this update: Sun 01 Mar 2026 23:32:52 +0000
Manifest next update: Sun 08 Mar 2026 23:32:52 +0000
Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: OvnnwO0tzKXX61r3+4ct3ZG+G4TEiEXVKByBhNORG6Y=)
2: 9461B15C144611EBA5418244C4F9AE02.roa (hash: 7pgMl5wJH137QshYHXwPE7o/xvV6r1Ih+WJdLlRyQ5s=)
3: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: JBL89dWtitdBoLgC+TScExrJHUYZ4Y9/ZvmW7eALzXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9666 (0x25c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Validity
Not Before: Mar 1 23:32:52 2026 GMT
Not After : Mar 8 23:32:52 2026 GMT
Subject: CN=69a4cca5-8912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:94:5b:3f:c7:09:b6:07:c5:be:9a:c0:0b:
93:2c:b0:62:fc:11:29:09:9e:27:6f:3d:5c:dd:e4:
03:de:ee:9c:b5:d7:20:53:4b:14:7f:30:40:28:86:
82:f1:f3:95:dd:7e:80:61:a5:9d:a6:06:9d:a8:34:
e2:4c:67:81:0a:b6:64:32:3d:75:f6:f6:7b:f2:bf:
7a:08:86:f4:d9:c2:a1:63:0a:39:d6:87:38:1f:d5:
95:50:81:58:72:8e:34:3a:28:64:eb:30:28:9c:5d:
52:41:57:39:59:9d:3e:90:fb:c1:2a:3a:ec:59:34:
b1:32:dd:ba:bd:90:21:3d:ed:fe:e7:31:ca:ba:40:
a5:09:cb:a5:a6:87:31:20:e6:94:a1:7b:90:d2:93:
a4:9e:f3:25:90:9d:9f:3f:07:4b:c0:fa:b2:5f:fa:
c8:b2:5b:1f:48:26:4b:91:01:f2:ee:cc:a0:5c:de:
a8:bd:b5:95:31:9f:cb:f9:dd:49:1f:d9:9d:f2:77:
c0:82:ee:18:56:ce:69:2a:d8:6c:a7:47:a3:fb:d9:
90:24:04:8d:fa:0e:48:72:e1:1a:54:f0:ad:bc:8e:
13:88:50:c4:f5:cf:6f:2a:2b:59:9c:99:ab:5c:3c:
03:fa:f2:9b:5f:70:39:77:a9:e6:7d:3f:42:a4:82:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C7:B9:6B:91:31:1B:DC:88:00:37:A7:C1:2B:27:88:5C:18:1A:B6
X509v3 Authority Key Identifier:
keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dd:05:1c:21:0b:cc:dc:18:32:7d:1e:98:db:13:2d:ab:be:
e3:26:38:8c:d3:21:3f:2b:67:81:c8:5f:2a:98:67:dc:39:a3:
8d:32:32:6c:a3:bb:6a:c9:e7:58:48:fe:26:bf:3a:42:e0:e6:
7d:c9:e9:c9:0d:db:05:ff:73:80:5d:e2:46:ff:5e:b8:18:2c:
f0:d9:1e:3c:bc:64:62:aa:35:b1:45:68:79:d8:d9:b9:91:92:
84:c5:94:13:10:5a:71:45:32:6d:fa:f8:9c:52:8b:12:de:e7:
71:29:40:a1:67:e5:9e:be:d8:55:66:b4:f1:fd:9b:21:9a:dc:
1b:dc:13:2a:0e:ad:ec:b1:6b:57:ee:b8:97:5f:3d:ce:27:04:
cf:bb:fc:c4:b3:9a:8b:bb:cc:86:10:8a:b1:10:ae:06:21:d8:
a9:5c:67:d9:03:9d:41:0c:48:4f:6b:29:50:12:73:67:52:e3:
ae:cf:83:12:ee:4b:10:60:95:4c:5f:99:2f:37:c0:25:25:f1:
8e:1b:01:c2:ab:84:72:c7:43:cc:bd:da:e4:d6:5f:dd:82:8b:
74:0f:66:18:ab:ac:7c:1f:df:57:a0:03:fe:01:a8:35:f3:95:
82:ae:20:74:83:c2:20:d7:2d:fc:b0:7e:be:0b:b8:e4:31:da:
3c:2e:cd:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND
MjdFQUQ4RUQwHhcNMjYwMzAxMjMzMjUyWhcNMjYwMzA4MjMzMjUyWjAYMRYwFAYD
VQQDEw02OWE0Y2NhNS04OTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtu+UWz/HCbYHxb6awAuTLLBi/BEpCZ4nbz1c3eQD3u6ctdcgU0sUfzBAKIaC
8fOV3X6AYaWdpgadqDTiTGeBCrZkMj119vZ78r96CIb02cKhYwo51oc4H9WVUIFY
co40Oihk6zAonF1SQVc5WZ0+kPvBKjrsWTSxMt26vZAhPe3+5zHKukClCculpocx
IOaUoXuQ0pOknvMlkJ2fPwdLwPqyX/rIslsfSCZLkQHy7sygXN6ovbWVMZ/L+d1J
H9md8nfAgu4YVs5pKthsp0ej+9mQJASN+g5IcuEaVPCtvI4TiFDE9c9vKitZnJmr
XDwD+vKbX3A5d6nmfT9CpIJgcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvHuWuR
MRvciAA3p8ErJ4hcGBq2MB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2
RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy
TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx
V2JBU3llaVpxdFBDZnEyTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqt0FHCELzNwYMn0emNsTLau+4yY4jNMhPytngchfKphn3DmjjTIybKO7asnn
WEj+Jr86QuDmfcnpyQ3bBf9zgF3iRv9euBgs8NkePLxkYqo1sUVoedjZuZGShMWU
ExBacUUybfr4nFKLEt7ncSlAoWflnr7YVWa08f2bIZrcG9wTKg6t7LFrV+64l189
zicEz7v8xLOai7vMhhCKsRCuBiHYqVxn2QOdQQxIT2spUBJzZ1Ljrs+DEu5LEGCV
TF+ZLzfAJSXxjhsBwquEcsdDzL3a5NZf3YKLdA9mGKusfB/fV6AD/gGoNfOVgq4g
dIPCINct/LB+vgu45DHaPC7Nxg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:39 2026 by rpki-client