
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier: 0g2W+JVrKN5vbtddi7megENPEl7OUApq2KOu0FoVq4w=
Subject key identifier: D0:C3:A2:14:D7:89:07:2A:64:5B:40:78:6E:8E:96:40:E4:AD:7B:E2
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 3198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number: 310C
Signing time: Fri 12 Jun 2026 15:25:54 +0000
Manifest this update: Fri 12 Jun 2026 15:25:54 +0000
Manifest next update: Fri 19 Jun 2026 15:25:54 +0000
Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: 5rSX0No5ZeKDlCXHq5O6OJFbkpOISfXT3c29Y4WpDBg=)
2: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: NR3htRP9a6F2ckA37vX/zVJgydrhk/y6ALKCOIGQr/c=)
3: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=)
4: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: LToWIQ1COMbsBcEbH54cRu/d6HNi0lrBivKKu1OeKJk=)
5: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: Hl3h+xajA6uyUcgR+szgYx0GkKpSQx8UaQOMAFI5mWs=)
6: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: aSXWB68fSWHHDo5FqMadmbWywQoiETk4RCpEwtCS3cM=)
7: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0AZBDmh8J9l8VOqehLNqWYnMqjkmPYEkpVJJP0YL/UM=)
8: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=)
9: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: 7qL24XtJJGYddBNzZ1f8/6sYDORXFfhTRLN+KXoF1UE=)
10: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=)
11: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: U3Ln4yzn8NQ06p1eFYCEFA90g6K7BH94tZxVPn7SxXk=)
12: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: Bh0KOlYAcUWAXt3WdoXHJOCw2Q1uBx39GJDLv8eD0T8=)
13: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: /ot5DoHQF40alQvvcmtFXp57ebCwbLGHhRnrByVbsDA=)
14: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=)
15: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=)
16: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12696 (0x3198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Jun 12 15:25:54 2026 GMT
Not After : Jun 19 15:25:54 2026 GMT
Subject: CN=6a2c2502-0879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:5c:ed:a4:6b:b9:c0:f7:d7:0f:6c:d2:7d:
5f:6b:73:16:33:f9:43:9b:33:0c:1a:36:2a:a8:b8:
dd:d0:91:e0:9e:23:6b:9e:a4:45:9c:44:c3:17:44:
94:94:56:68:e2:28:78:fa:a3:e0:47:98:dc:60:3c:
e3:12:60:3f:d7:a8:73:87:81:67:fc:9f:c1:51:6b:
5f:2a:51:73:44:5c:e2:f9:ad:f2:b8:0b:95:b6:4b:
37:fd:39:7f:ec:02:84:74:ed:5d:da:41:a6:54:9f:
73:76:bc:7f:44:1e:74:16:d0:e4:f4:97:69:8e:95:
c5:d9:5e:02:39:83:3a:ba:db:06:66:1d:8c:e2:3e:
12:48:6a:ed:5c:a1:dc:86:4c:ec:f0:39:74:9c:bf:
24:c8:e7:50:c9:17:f4:58:00:9c:6e:5c:71:79:85:
5c:e8:c1:7f:ef:10:15:83:37:69:97:a0:85:a2:ef:
9c:0c:39:b8:15:09:4c:f3:e1:4c:0c:9a:67:e6:87:
aa:f7:f0:24:0e:e6:d5:a9:6e:92:49:9a:29:e0:54:
a2:e8:e2:f5:d6:54:71:14:b2:b4:bf:9a:df:29:f7:
ab:74:0c:f5:b5:34:6e:5e:96:21:ac:a0:d7:d7:e4:
38:04:0f:13:b7:bb:1e:c8:5f:de:9b:00:6e:64:a4:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C3:A2:14:D7:89:07:2A:64:5B:40:78:6E:8E:96:40:E4:AD:7B:E2
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:dd:81:8d:c2:0b:6a:38:5f:10:2d:ca:b8:f6:f2:2a:9e:c6:
9f:7f:e9:c4:31:82:fb:2b:6a:a2:7c:c2:a2:91:c9:84:57:49:
5d:8e:19:7d:35:4b:5e:aa:94:3f:9c:02:e2:2f:68:e2:1a:3b:
ed:fe:00:9a:f9:3a:0a:e7:ff:7d:d4:b0:75:4f:a9:fa:80:d0:
79:a7:f3:fc:d0:4a:85:61:ae:50:5a:6a:92:37:ee:f4:11:2e:
26:bb:27:07:86:f5:64:b8:65:f8:5c:b4:63:c3:81:f3:d1:95:
61:26:75:27:68:91:f9:fd:80:22:7b:a9:f2:2c:9b:55:1b:be:
c3:5c:67:7d:34:05:f9:2e:3f:e7:72:3f:05:59:2b:1b:0a:0f:
c0:ab:78:13:9c:0b:d1:ac:9e:8e:6b:31:46:c1:1c:39:57:ce:
0a:6f:16:b2:cd:ff:d6:f8:57:d6:b4:d3:0f:bf:ba:a9:ee:3d:
46:b2:00:a0:c5:dc:73:cc:76:16:a2:8e:43:68:4b:b1:d4:8f:
5d:56:59:60:40:98:7e:ed:9a:54:e8:aa:9d:3d:ec:fe:f0:3b:
fb:4b:b6:e5:0d:27:4f:8b:39:37:6a:56:b0:ae:4c:3a:bc:f1:
f6:02:d0:ec:46:56:4e:77:7e:e5:0a:47:80:96:36:fb:e5:19:
71:c6:ff:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC
Qjk2NEY2NEIwHhcNMjYwNjEyMTUyNTU0WhcNMjYwNjE5MTUyNTU0WjAYMRYwFAYD
VQQDEw02YTJjMjUwMi0wODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjbZc7aRrucD31w9s0n1fa3MWM/lDmzMMGjYqqLjd0JHgniNrnqRFnETDF0SU
lFZo4ih4+qPgR5jcYDzjEmA/16hzh4Fn/J/BUWtfKlFzRFzi+a3yuAuVtks3/Tl/
7AKEdO1d2kGmVJ9zdrx/RB50FtDk9JdpjpXF2V4COYM6utsGZh2M4j4SSGrtXKHc
hkzs8Dl0nL8kyOdQyRf0WACcblxxeYVc6MF/7xAVgzdpl6CFou+cDDm4FQlM8+FM
DJpn5oeq9/AkDubVqW6SSZop4FSi6OL11lRxFLK0v5rfKferdAz1tTRuXpYhrKDX
1+Q4BA8Tt7seyF/emwBuZKRLfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDDohTX
iQcqZFtAeG6OlkDkrXviMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG
NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw
WjA5ZlhyX0wtakc3bGs5a3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAId2BjcILajhfEC3KuPbyKp7Gn3/pxDGC+ytqonzCopHJhFdJXY4ZfTVLXqqU
P5wC4i9o4ho77f4Amvk6Cuf/fdSwdU+p+oDQeafz/NBKhWGuUFpqkjfu9BEuJrsn
B4b1ZLhl+Fy0Y8OB89GVYSZ1J2iR+f2AInup8iybVRu+w1xnfTQF+S4/53I/BVkr
GwoPwKt4E5wL0ayejmsxRsEcOVfOCm8Wss3/1vhX1rTTD7+6qe49RrIAoMXcc8x2
FqKOQ2hLsdSPXVZZYECYfu2aVOiqnT3s/vA7+0u25Q0nT4s5N2pWsK5MOrzx9gLQ
7EZWTnd+5QpHgJY2++UZccb/Jg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:20 2026 by rpki-client