
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json)
Hash identifier: fd8G/LpSdK3ff2pKANSWAgKmqeaf+xIEgHl/jUsxh6s=
Subject key identifier: F5:9F:A9:7B:BC:C9:34:1C:85:50:8C:F7:AF:25:13:57:AF:60:82:20
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial: 07CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
Manifest number: 07B7
Signing time: Tue 06 Oct 2026 21:35:49 +0000
Manifest this update: Tue 06 Oct 2026 21:35:49 +0000
Manifest next update: Tue 13 Oct 2026 21:35:49 +0000
Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: YiNczmeZJp7jKElNIecvwvMnApf08iY/GYNw+PQ0lNA=)
2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: /W4EDzCJO28OAsl3pdvhn80k2j9lIQ5KcY8vtvKyWxM=)
3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: FGwdEm0SPNy0TpBINVzEc/flFNni0xPCsSoqxUh+Nr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Validity
Not Before: Oct 6 21:35:49 2026 GMT
Not After : Oct 13 21:35:49 2026 GMT
Subject: CN=6ac569b5-dff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:56:ec:41:e9:42:6e:2b:47:6f:77:01:0a:
dd:37:66:3c:cf:7c:88:61:11:f1:2f:6d:d9:b6:0a:
1b:9e:1f:67:0e:df:79:19:6f:4e:4b:07:43:f8:6f:
f6:55:7c:b3:d9:ed:0a:8b:de:ad:73:64:0f:32:82:
5f:01:27:96:fc:05:32:1f:67:e8:7c:bf:ee:7c:47:
fb:c9:91:dd:10:99:71:b5:a3:0a:3c:7d:d1:3d:e5:
5a:fe:79:40:70:d6:67:ed:2c:ff:f5:39:05:57:07:
ba:6e:2a:e7:e1:48:44:71:01:ca:b2:7d:1e:95:1f:
6b:68:1d:1b:87:69:81:ff:d6:86:d8:fa:33:cd:b0:
70:d6:20:50:a7:8f:a4:a0:ca:09:43:4c:6c:a9:47:
80:6e:27:a3:a2:78:97:b3:7e:b6:fa:10:41:87:5d:
35:63:f4:0e:c2:5e:ef:8d:ec:29:6d:b5:2b:81:aa:
c4:65:55:4e:f7:df:37:dd:83:4f:5f:dd:bc:60:c7:
47:c5:24:de:3b:a4:c0:3f:d7:b1:8d:23:44:c9:b7:
e4:db:ec:95:42:ce:86:19:20:bf:e4:29:0c:d7:2e:
63:b3:9a:34:1b:b1:1f:26:4d:5e:16:fa:8a:25:62:
08:28:e4:7b:a5:c2:03:cc:23:b4:a9:9c:41:c6:47:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9F:A9:7B:BC:C9:34:1C:85:50:8C:F7:AF:25:13:57:AF:60:82:20
X509v3 Authority Key Identifier:
keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:a6:af:c5:67:86:37:30:9e:20:43:6a:95:e2:d9:2a:64:f4:
80:9d:86:dd:df:33:e5:1a:be:91:37:bd:44:fa:2b:46:a0:f7:
a2:98:51:f7:2f:88:19:71:01:0d:52:9b:73:fc:61:99:9b:f1:
62:24:e8:35:86:93:9f:37:3c:7f:a4:67:fe:1c:6d:40:25:bb:
8a:e3:5f:34:9e:55:78:a4:f8:2d:fd:24:b0:45:6d:e0:3d:19:
38:1f:06:95:18:92:69:46:49:42:3f:62:22:9e:23:dd:d0:b6:
a6:73:c7:30:e0:9b:3d:be:44:68:86:61:36:59:0f:1c:7b:e9:
49:1c:15:1c:2f:87:7c:ea:92:d7:7e:27:15:5e:7e:f9:a4:80:
62:ff:7e:41:9e:7d:d0:97:c3:25:23:e4:3b:4a:00:f5:e9:c4:
38:6a:11:3c:b9:12:1a:bd:da:9d:e5:4a:2a:1f:5b:7c:b6:36:
87:55:3e:55:7c:73:6b:49:db:16:e0:ac:8f:94:cb:85:93:e7:
65:72:2e:78:e9:6e:9d:da:32:e7:1e:de:7c:40:68:e3:e6:21:
36:f2:fe:9b:34:b6:27:f6:96:bb:28:d0:9c:8e:75:23:28:de:
0f:18:6f:49:be:25:27:51:f3:82:b3:4e:6f:fe:be:82:87:13:
02:61:56:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx
NUY3MDA2ODQwHhcNMjYxMDA2MjEzNTQ5WhcNMjYxMDEzMjEzNTQ5WjAYMRYwFAYD
VQQDEw02YWM1NjliNS1kZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4HRW7EHpQm4rR293AQrdN2Y8z3yIYRHxL23Ztgobnh9nDt95GW9OSwdD+G/2
VXyz2e0Ki96tc2QPMoJfASeW/AUyH2fofL/ufEf7yZHdEJlxtaMKPH3RPeVa/nlA
cNZn7Sz/9TkFVwe6birn4UhEcQHKsn0elR9raB0bh2mB/9aG2PozzbBw1iBQp4+k
oMoJQ0xsqUeAbiejoniXs362+hBBh101Y/QOwl7vjewpbbUrgarEZVVO99833YNP
X928YMdHxSTeO6TAP9exjSNEybfk2+yVQs6GGSC/5CkM1y5js5o0G7EfJk1eFvqK
JWIIKOR7pcIDzCO0qZxBxkflnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWfqXu8
yTQchVCM968lE1evYIIgMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1
MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC
b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5
WDZPV2hCdTNjOW9WOXdCb1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhaavxWeGNzCeIENqleLZKmT0gJ2G3d8z5Rq+kTe9RPorRqD3ophR9y+IGXEB
DVKbc/xhmZvxYiToNYaTnzc8f6Rn/hxtQCW7iuNfNJ5VeKT4Lf0ksEVt4D0ZOB8G
lRiSaUZJQj9iIp4j3dC2pnPHMOCbPb5EaIZhNlkPHHvpSRwVHC+HfOqS134nFV5+
+aSAYv9+QZ590JfDJSPkO0oA9enEOGoRPLkSGr3aneVKKh9bfLY2h1U+VXxza0nb
FuCsj5TLhZPnZXIueOlundoy5x7efEBo4+YhNvL+mzS2J/aWuyjQnI51IyjeDxhv
Sb4lJ1HzgrNOb/6+gocTAmFWWA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:53:55 2026 by rpki-client