
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier: b9mby/PwXFq/njn/i28QP2KZYovKHHW6FuLOLDeplwA=
Subject key identifier: 99:03:E2:0C:87:8E:20:04:5C:EF:49:2E:ED:F6:E2:55:DF:9D:8A:28
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 316A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number: 30ED
Signing time: Thu 16 Apr 2026 15:25:41 +0000
Manifest this update: Thu 16 Apr 2026 15:25:40 +0000
Manifest next update: Thu 23 Apr 2026 15:25:40 +0000
Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: W0hCgXjkt0fIOyf1fHHssMJ8tatWw0Xxefnc7miy+rI=)
2: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: w6jopDYdBCSKneIqUB+uGylPK/ivurOX7DEN4AdjgnA=)
3: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: de2C8Xu2sn4wIkObgdX6KvmUkB+P2+zRTh51LUtEnFY=)
4: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wbfTUnUAKsJRrWfnHjlaeLodofy5Oo1bl9O6vPfn9a4=)
5: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: y5ciIKx3lqS7z/BR3HumcZnil59gOk0O6RNJFaL0JeY=)
6: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: fcJYmXSZeVG/6eLQqu0NVh0YwupBcKyyjG3vFyzIP2U=)
7: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: tIuCeWt8loP5ZmBWFAM7052UGdSqIBcg6mUyDDDPLo0=)
8: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: ccU5A3TwZ5EmSAvHoBQM+S9rDORLffXDKuCFeSF3XaM=)
9: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: Mu9rMlzhoKL6wcm2IQfT1fYiz3u1EpWT7mob7q7u//c=)
10: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: /FrpL0qVU1o4ddXI6hWw5Yj8pF2l/G6Nolhot450TQg=)
11: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: BRSGBu/6q3GwQLt600UgprgrzUqX0i//fWpSz8ak1m0=)
12: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: gko9Q35KdBOiYMYQc7V0na7o/2+tf0Ti0oIVrHZBvXA=)
13: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: UIF18yXEMKB6Xi+ID1n3xjpnZMc0AimyXBIjScTOYBA=)
14: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: wmmz/QZK42uhoPNkWkDZAabuw7FDO3k7EWNvm0NWAOw=)
15: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: SmQ5CGEJCE3s9/YNxwJXtFcb33wFKBOX7DlFwf6j2G4=)
16: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: ZCk+fEsQHe2jlnBNkTm2b7TPnu7HbyKCFYwP585vSWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12650 (0x316a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Apr 16 15:25:40 2026 GMT
Not After : Apr 23 15:25:40 2026 GMT
Subject: CN=69e0ff74-f858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:1b:69:db:86:8e:36:93:e5:13:68:c5:3e:
bf:7d:72:f4:d9:d3:ed:8f:05:8e:97:c2:d2:6d:17:
f2:54:9e:34:c0:28:af:34:6f:5f:67:82:85:98:b7:
78:57:da:9b:e3:20:1d:d5:98:ba:7e:b7:4c:a3:24:
36:51:fd:a4:1a:46:1d:0b:08:b8:af:58:2e:8f:8c:
de:3b:c5:02:29:e9:aa:6e:8a:21:06:f7:12:8a:b6:
bb:29:86:69:d7:5e:43:31:76:e9:01:35:35:ce:f6:
18:db:51:5b:d2:85:e1:46:ae:2d:2d:a8:83:90:c8:
7b:fc:90:68:b9:e9:51:87:52:71:ae:ee:b7:0e:c1:
1f:34:da:01:d8:15:b1:75:79:a0:1d:08:ff:72:f1:
2c:3b:76:bf:10:51:c6:72:cc:66:72:e3:a9:ee:d0:
64:88:b5:bd:4b:ea:7f:38:4b:58:94:ed:37:b8:7d:
66:4b:2c:9e:fe:5f:b9:f3:c2:ec:d8:ff:b5:03:6b:
98:7d:9b:6e:fc:b0:3e:8a:7a:6a:9c:96:ef:39:40:
c1:53:28:89:8f:20:e4:f9:34:31:11:6a:96:81:91:
4b:07:48:97:50:98:8a:86:74:4b:d4:b2:0f:1a:2c:
25:aa:b4:89:32:54:68:36:1d:9c:40:84:df:72:c9:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:E2:0C:87:8E:20:04:5C:EF:49:2E:ED:F6:E2:55:DF:9D:8A:28
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:cd:24:55:2f:7a:d1:27:c4:f3:ab:f0:fc:a3:42:b2:9b:60:
9f:94:07:af:83:65:09:db:ad:0e:9d:80:5b:b7:7a:96:60:55:
22:4c:18:35:49:2a:f4:98:0a:6d:56:43:a3:db:0e:b0:9d:7b:
83:bc:8e:cb:c9:d3:a4:61:58:84:c0:30:b3:fb:d2:2f:fc:b3:
10:cd:da:ba:d6:e9:d9:f0:18:f0:06:1c:10:3c:35:45:a0:8e:
d9:ac:9e:3b:23:26:75:5b:b1:23:2f:3a:51:c9:1e:45:e5:77:
f7:4a:29:f9:a5:f4:5b:7f:6b:90:1c:e1:08:42:14:95:06:c8:
be:1e:8c:a9:0c:0f:1d:9c:f1:34:d1:5b:c2:55:f6:49:4f:5c:
76:74:69:05:dc:bc:0e:8d:3f:c3:ec:27:fd:49:fd:b1:3b:1b:
c3:66:6a:8f:2d:c6:60:45:ec:e1:9e:5f:c3:46:b8:6f:ef:49:
d2:5e:af:82:f3:c4:2c:b1:76:a4:8e:d4:fe:75:e5:9e:89:b6:
bc:5b:9c:b4:51:1d:88:12:63:26:68:49:3d:b3:62:cb:18:8b:
3c:7b:7b:ad:79:36:c4:df:5c:fe:bc:82:27:bd:07:cf:6a:53:
86:08:f2:48:46:4a:9c:81:7f:46:26:94:00:24:0f:4c:d1:16:
81:13:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:49 2026 by rpki-client