
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier: 8ylBYiYjJ7CWTB1QaJJOhlZe4rkZvcjhHYvVNtp1pA8=
Subject key identifier: 86:D2:25:F9:87:0D:24:DE:4C:3E:AE:D5:BC:51:5E:E8:34:86:84:FF
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial: 0335
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number: 0324
Signing time: Sun 01 Mar 2026 01:56:32 +0000
Manifest this update: Sun 01 Mar 2026 01:56:32 +0000
Manifest next update: Sun 08 Mar 2026 01:56:32 +0000
Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: +Wx0WiihWNvFGIz4uaJeMpF5GE3ELUwbV26k/+D5dVU=)
2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: 5ddtdaIVi4uZX5Kvh4OHCGdOxyTvl3WbsBWufhivC2Q=)
3: 94584738031A11ED934E3D58C4F9AE02.roa (hash: cMcwlHYnO9+mh5veotjRirRXB4y0F0TlStRvvkDezXU=)
4: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ELuUl8jYoHQdUknrof/L+Xlspg+bgQj1KmK60+o/Jfs=)
5: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: KuSwuFXT3RlQeIGfpEWkiu/ifBNFInANnuYBrAg51Cc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821 (0x335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Validity
Not Before: Mar 1 01:56:32 2026 GMT
Not After : Mar 8 01:56:32 2026 GMT
Subject: CN=69a39cd0-bd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:d5:6c:c9:70:39:2c:25:cf:33:18:b4:42:
b5:ec:5d:01:28:2d:c5:b8:30:18:f8:e2:22:3c:6f:
5e:6f:f7:a5:ba:e1:79:ad:a6:b6:19:f7:60:01:b6:
f2:da:73:70:96:40:30:18:64:9f:bb:e1:a1:82:59:
d2:3e:97:64:29:bc:32:f7:6f:c9:d6:a8:70:35:16:
1e:37:85:d8:31:49:fe:31:92:4c:02:89:55:25:ff:
ba:a6:e8:6e:6c:06:3d:09:9f:44:cd:78:fa:a6:76:
a7:8f:46:97:28:b0:73:16:74:7e:7a:09:61:4f:db:
c1:eb:7d:a4:72:32:34:12:c4:59:a1:d6:c6:38:0b:
ff:04:f6:97:bb:4a:e4:c9:dd:b4:24:f8:c9:f4:c2:
24:e1:d3:0b:61:f5:c9:8b:b3:8c:47:cd:63:5d:a3:
dd:e2:e8:80:34:dd:c0:a4:ef:6a:96:7e:e9:76:8f:
17:fb:8f:1a:7e:f5:b7:f3:94:aa:5e:8a:d9:4c:1f:
e1:41:5c:20:fa:7a:2d:85:ae:54:17:95:ce:88:85:
6f:84:97:a0:c8:7e:ab:51:06:86:73:1a:40:e1:16:
1f:50:5d:dd:fb:42:74:64:7e:fd:9a:99:dd:f7:6d:
6a:db:2b:5c:95:1e:ee:bd:9d:2a:77:6a:db:ed:1e:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:25:F9:87:0D:24:DE:4C:3E:AE:D5:BC:51:5E:E8:34:86:84:FF
X509v3 Authority Key Identifier:
keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:df:9a:d8:9c:57:35:d2:28:73:be:cb:a1:44:e4:91:7a:05:
6e:90:31:73:d5:f6:cf:07:4d:ef:8c:b2:6f:2f:dd:14:45:f1:
e8:6c:c2:70:23:c6:a9:11:e9:6c:e3:88:b4:95:7b:e2:cc:99:
7a:0a:98:4c:7d:a5:dc:8c:0a:76:a2:c1:d3:c0:e5:82:14:ce:
77:c4:b8:fb:eb:da:a0:af:24:54:ac:f3:c6:89:2c:ac:e5:64:
f5:3b:97:41:3a:3b:18:85:ff:62:78:7c:47:3e:c3:00:62:1a:
fc:49:0d:39:af:f5:21:48:d2:59:84:cf:80:3d:78:e2:b2:fb:
a4:0a:5c:82:2d:87:08:ac:ed:c2:fb:fd:d5:b6:0a:9b:c0:71:
5e:a8:04:90:fe:d4:87:04:14:56:65:f8:42:70:df:b7:d8:6c:
93:ee:68:b4:67:00:62:73:39:8b:de:6d:41:c1:93:9e:b4:b6:
19:42:d9:e7:97:46:7d:5e:2f:e7:74:fd:d6:82:f9:51:0d:31:
58:43:96:40:3e:73:0e:75:c2:2d:4b:35:7b:79:e3:b5:0f:d7:
40:48:75:9b:6b:23:d2:7e:1b:8e:15:0c:c3:46:2c:70:ab:b7:
e6:7b:e7:62:99:d2:f5:32:5a:71:37:b4:a1:d9:48:70:2b:2d:
5a:29:79:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE
MzUxRDIzMkYwHhcNMjYwMzAxMDE1NjMyWhcNMjYwMzA4MDE1NjMyWjAYMRYwFAYD
VQQDDA02OWEzOWNkMC1iZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz0rVbMlwOSwlzzMYtEK17F0BKC3FuDAY+OIiPG9eb/eluuF5raa2GfdgAbby
2nNwlkAwGGSfu+GhglnSPpdkKbwy92/J1qhwNRYeN4XYMUn+MZJMAolVJf+6puhu
bAY9CZ9EzXj6pnanj0aXKLBzFnR+eglhT9vB632kcjI0EsRZodbGOAv/BPaXu0rk
yd20JPjJ9MIk4dMLYfXJi7OMR81jXaPd4uiANN3ApO9qln7pdo8X+48afvW385Sq
XorZTB/hQVwg+notha5UF5XOiIVvhJegyH6rUQaGcxpA4RYfUF3d+0J0ZH79mpnd
921q2ytclR7uvZ0qd2rb7R5V4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIbSJfmH
DSTeTD6u1bxRXug0hoT/MB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz
MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTU3Ny85MDNFNEM3ODAzMTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmho
RXh2TV9xSDN0NnZUVWRJeTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXd+a2JxXNdIoc77LoUTkkXoFbpAxc9X2zwdN74yyby/dFEXx6GzCcCPGqRHp
bOOItJV74syZegqYTH2l3IwKdqLB08DlghTOd8S4++vaoK8kVKzzxoksrOVk9TuX
QTo7GIX/Ynh8Rz7DAGIa/EkNOa/1IUjSWYTPgD144rL7pApcgi2HCKztwvv91bYK
m8BxXqgEkP7UhwQUVmX4QnDft9hsk+5otGcAYnM5i95tQcGTnrS2GULZ55dGfV4v
53T91oL5UQ0xWEOWQD5zDnXCLUs1e3njtQ/XQEh1m2sj0n4bjhUMw0YscKu35nvn
YpnS9TJacTe0odlIcCstWil5jA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:36 2026 by rpki-client