
$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json)
Hash identifier: 3i0ML/NQFYPyv2FS5wOQdrVs9+MNfQX4+zt4ZMrAD1E=
Subject key identifier: C3:84:19:E8:4E:EC:CE:85:5F:F6:10:26:59:F2:C9:4B:5E:01:87:00
Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Certificate serial: 072C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
Manifest number: 0723
Signing time: Sun 01 Mar 2026 23:35:21 +0000
Manifest this update: Sun 01 Mar 2026 23:35:19 +0000
Manifest next update: Sun 08 Mar 2026 23:35:19 +0000
Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: oQifP2TdKe13mQQghTmnBN2ZShpzlxpASS+Is61pZWg=)
2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: 2wt6vNqEvH4JW05NYadR9a18IX9V4JqIFvFkbKuppv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1836 (0x72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Validity
Not Before: Mar 1 23:35:19 2026 GMT
Not After : Mar 8 23:35:19 2026 GMT
Subject: CN=69a4cd38-fb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:a1:6a:54:ac:1e:10:8d:27:b7:56:d9:2d:
ae:d2:88:8c:bd:5c:00:ca:6d:d2:b8:85:4e:82:29:
af:55:35:27:41:2e:2f:c2:72:21:b9:67:e2:f5:cf:
5d:69:7c:76:88:d2:6a:ec:74:77:03:07:8b:51:9d:
3a:d1:69:ac:7b:c9:7b:25:d0:60:7a:19:fd:69:f5:
a5:84:9f:63:1d:aa:dc:c3:09:f0:de:c0:d2:e4:8e:
8c:07:e1:66:bb:4b:31:eb:14:f9:2d:53:7f:09:0a:
6a:3a:50:03:e5:40:53:b3:e5:30:fc:6a:40:a1:2e:
9b:db:62:e1:15:69:c5:34:bc:21:21:15:b3:6c:6f:
3d:f0:0b:34:9f:61:ff:6b:00:2a:8b:b5:04:3d:46:
92:c0:ba:b2:78:b6:a3:59:d5:f0:14:6d:53:72:50:
6a:bc:bd:4d:10:b1:40:4c:6b:21:5e:de:57:6f:2f:
bd:a4:26:56:35:c8:e5:e1:27:a0:5a:c2:b3:d1:8e:
bf:9d:d1:06:48:9a:fc:9f:55:a5:b5:34:1b:96:7f:
46:05:f0:c4:08:2c:e3:c8:01:7e:c5:c8:bf:47:75:
21:5e:5e:10:b7:25:d2:46:67:d9:9b:e4:c4:3c:81:
48:c1:ac:e6:5f:b1:4b:fb:03:17:d2:f2:4b:d4:e7:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:84:19:E8:4E:EC:CE:85:5F:F6:10:26:59:F2:C9:4B:5E:01:87:00
X509v3 Authority Key Identifier:
keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:fc:dc:fa:fb:57:b7:dc:bc:8e:32:eb:0e:a8:81:9b:40:
29:b3:ca:80:8d:b7:7a:2f:96:3d:bb:78:86:e3:ff:ad:c9:cf:
3a:e4:7f:e6:08:7d:5e:43:0d:6d:22:6a:07:f7:18:d5:5b:de:
23:68:bf:f1:5c:32:67:d7:ca:b8:cc:d8:d2:6d:5c:2c:00:97:
b3:c2:cb:01:b8:c9:90:55:fd:ff:9e:30:cd:7d:de:be:a8:28:
b3:7d:0e:99:60:de:60:da:13:ee:f7:ae:bd:26:1f:92:7b:55:
5a:8c:a4:71:40:2b:13:b2:b5:7c:4a:cb:dc:5b:04:3a:47:1a:
14:dd:78:24:c1:0d:0c:d2:52:c7:ad:3c:97:97:78:53:02:53:
6b:e1:85:fb:79:3b:3b:1a:c7:0f:1c:c0:eb:3a:0d:0c:58:24:
ea:5b:8c:7a:69:3f:89:a1:3c:a7:1d:70:36:48:d8:47:aa:8c:
4e:a3:ca:c4:3a:88:1f:02:3e:eb:bb:c9:cd:5f:c1:38:0e:34:
a7:b6:c4:37:b7:06:27:6a:0f:23:cc:9b:cb:c7:04:f3:d1:59:
d8:22:a4:e3:d5:5d:a8:7d:e3:d0:56:62:72:23:77:53:e0:32:
a7:c8:9d:ab:e7:53:aa:da:b5:1f:d9:b1:28:36:71:f3:a7:46:
88:c2:51:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0
MDM1ODhGQzcwHhcNMjYwMzAxMjMzNTE5WhcNMjYwMzA4MjMzNTE5WjAYMRYwFAYD
VQQDEw02OWE0Y2QzOC1mYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzkihalSsHhCNJ7dW2S2u0oiMvVwAym3SuIVOgimvVTUnQS4vwnIhuWfi9c9d
aXx2iNJq7HR3AweLUZ060Wmse8l7JdBgehn9afWlhJ9jHarcwwnw3sDS5I6MB+Fm
u0sx6xT5LVN/CQpqOlAD5UBTs+Uw/GpAoS6b22LhFWnFNLwhIRWzbG898As0n2H/
awAqi7UEPUaSwLqyeLajWdXwFG1TclBqvL1NELFATGshXt5Xby+9pCZWNcjl4Seg
WsKz0Y6/ndEGSJr8n1WltTQbln9GBfDECCzjyAF+xci/R3UhXl4QtyXSRmfZm+TE
PIFIwazmX7FL+wMX0vJL1OeUqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOEGehO
7M6FX/YQJlnyyUteAYcAMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw
NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT
dXlBMU1jUmdTYTFBTllqOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIKn83Pr7V7fcvI4y6w6ogZtAKbPKgI23ei+WPbt4huP/rcnPOuR/5gh9XkMN
bSJqB/cY1VveI2i/8VwyZ9fKuMzY0m1cLACXs8LLAbjJkFX9/54wzX3evqgos30O
mWDeYNoT7veuvSYfkntVWoykcUArE7K1fErL3FsEOkcaFN14JMENDNJSx608l5d4
UwJTa+GF+3k7OxrHDxzA6zoNDFgk6luMemk/iaE8px1wNkjYR6qMTqPKxDqIHwI+
67vJzV/BOA40p7bEN7cGJ2oPI8yby8cE89FZ2CKk49VdqH3j0FZiciN3U+Ayp8id
q+dTqtq1H9mxKDZx86dGiMJR7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:06 2026 by rpki-client