
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier: 1vx+XItV4wIVj+0mkJfQyXU7C7zkfINahtBzMbo1K0U=
Subject key identifier: 5D:04:35:54:09:2B:DF:2A:81:CD:14:66:0D:6B:ED:1C:C8:5F:3B:40
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 3152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number: 30D5
Signing time: Sun 01 Mar 2026 23:11:51 +0000
Manifest this update: Sun 01 Mar 2026 23:11:51 +0000
Manifest next update: Sun 08 Mar 2026 23:11:51 +0000
Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: Vik+xpPRUWJGCAidcfsLcmM99SDp2t2zMiS0/zgUWnI=)
2: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: SmQ5CGEJCE3s9/YNxwJXtFcb33wFKBOX7DlFwf6j2G4=)
3: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: y5ciIKx3lqS7z/BR3HumcZnil59gOk0O6RNJFaL0JeY=)
4: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: gko9Q35KdBOiYMYQc7V0na7o/2+tf0Ti0oIVrHZBvXA=)
5: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: wmmz/QZK42uhoPNkWkDZAabuw7FDO3k7EWNvm0NWAOw=)
6: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: ZCk+fEsQHe2jlnBNkTm2b7TPnu7HbyKCFYwP585vSWU=)
7: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: tIuCeWt8loP5ZmBWFAM7052UGdSqIBcg6mUyDDDPLo0=)
8: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: BRSGBu/6q3GwQLt600UgprgrzUqX0i//fWpSz8ak1m0=)
9: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: ccU5A3TwZ5EmSAvHoBQM+S9rDORLffXDKuCFeSF3XaM=)
10: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: de2C8Xu2sn4wIkObgdX6KvmUkB+P2+zRTh51LUtEnFY=)
11: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: w6jopDYdBCSKneIqUB+uGylPK/ivurOX7DEN4AdjgnA=)
12: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wbfTUnUAKsJRrWfnHjlaeLodofy5Oo1bl9O6vPfn9a4=)
13: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: UIF18yXEMKB6Xi+ID1n3xjpnZMc0AimyXBIjScTOYBA=)
14: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: fcJYmXSZeVG/6eLQqu0NVh0YwupBcKyyjG3vFyzIP2U=)
15: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: Mu9rMlzhoKL6wcm2IQfT1fYiz3u1EpWT7mob7q7u//c=)
16: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: /FrpL0qVU1o4ddXI6hWw5Yj8pF2l/G6Nolhot450TQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12626 (0x3152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Mar 1 23:11:51 2026 GMT
Not After : Mar 8 23:11:51 2026 GMT
Subject: CN=69a4c7b7-9484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:12:52:7c:aa:9c:79:08:e5:fc:d4:10:ae:
8a:f6:06:20:ff:9b:be:8e:cc:f5:0b:6f:61:8b:36:
8e:36:38:a0:d4:b8:4b:3d:f5:e2:7c:85:bd:1e:8f:
4b:ff:26:ce:24:f0:0f:67:e0:14:50:b0:31:df:b3:
c3:12:e4:1b:f9:d4:dd:7d:5a:83:3e:89:bd:3f:56:
b3:7d:f9:11:e7:3d:31:33:21:92:93:f8:48:b1:b9:
93:be:b3:52:50:89:89:4f:51:33:2e:f2:df:1a:36:
80:2b:11:9a:26:c6:7b:92:da:dc:3e:37:de:c0:20:
4a:14:c6:9c:d8:a0:a7:af:35:d6:0a:96:40:f8:b7:
fc:82:6b:15:5b:32:db:df:00:0c:52:eb:b2:e2:d1:
a4:fa:47:2c:53:54:c7:fe:3b:6a:d2:b7:a9:bc:08:
94:71:44:e1:63:58:76:b4:37:94:8e:e1:b6:2e:df:
92:9b:01:cd:e0:99:b9:18:c2:4c:a1:3e:1a:b1:b4:
63:a7:d3:69:bc:59:1d:a9:c5:cc:bd:9b:36:fe:ce:
9c:78:5a:bc:de:03:7c:11:68:27:2b:86:55:e5:12:
fd:7a:46:5c:87:62:ab:f1:57:f8:68:24:6c:df:00:
2b:4e:47:ac:62:4f:e1:ac:b9:35:08:85:be:27:50:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:04:35:54:09:2B:DF:2A:81:CD:14:66:0D:6B:ED:1C:C8:5F:3B:40
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:01:4b:ac:58:b0:32:9a:d5:23:9f:19:fc:9c:04:ac:0c:f7:
6d:4b:a2:65:d6:1f:2d:e2:4e:13:e0:39:5c:5e:0b:53:9b:64:
eb:2f:75:a3:99:89:b9:2e:41:b2:25:bf:cc:fc:23:99:5c:6f:
11:6f:76:e9:06:57:ca:bd:86:4b:7b:e5:03:9d:ab:17:20:58:
bd:1a:15:ad:14:2e:8d:9a:b6:f8:b0:89:55:7d:a9:fd:07:c1:
55:e8:c7:20:b8:dd:41:8d:60:99:29:48:e9:eb:ee:87:40:57:
57:15:3a:ba:e2:58:3c:c4:b0:b1:81:c3:97:21:c6:d7:75:a6:
02:c4:0f:11:1f:99:30:3d:c7:b4:3d:75:31:95:68:26:50:c1:
54:f7:d1:62:7a:e4:08:a8:32:ce:e3:f0:24:b2:85:33:7f:61:
c4:90:ee:b7:da:5e:31:43:bd:5f:1c:ab:5c:36:66:51:fd:e3:
a8:d6:c5:5c:c5:9e:20:40:b8:da:26:28:1a:ad:f8:33:b5:05:
75:55:d2:ed:bb:ed:de:56:ba:2a:70:1b:9a:3c:3e:aa:a5:fe:
1a:7e:e8:28:4f:8d:ef:25:31:5e:e3:2d:37:23:f1:ea:2d:d1:
45:c5:ec:cb:3d:38:6c:9e:a7:d9:d2:e6:bd:04:41:c4:85:af:
b1:0b:08:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:04 2026 by rpki-client