
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
File: XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft (raw, json)
Hash identifier: TTgeWyAr4KW8I2gNxk42it+tDElN76NvE8cWCayCtrI=
Subject key identifier: F9:E4:90:3F:10:BF:D1:FC:44:B8:FA:2E:CE:BE:D7:55:01:2B:8C:C0
Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5
Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
Manifest number: 74
Signing time: Sat 13 Jun 2026 07:54:34 +0000
Manifest this update: Sat 13 Jun 2026 07:54:33 +0000
Manifest next update: Sat 20 Jun 2026 07:54:33 +0000
Files and hashes: 1: XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl (hash: un9AihPRajly6MJFYkWTpSXQ0pv0TpJNKOKG8h/4azI=)
2: 6273B5964F6411F1B5990A8BC5833773.roa (hash: y3V7Ac3VRTVKkf/zwxo2Yj3w4U6T8D7jfnzMbqhRIFA=)
3: 40506BD64F6311F1B33586E9C4833773.roa (hash: /xujX/eflt5wRcWaBi7MbQ6JbnMkzZt1Nfl3vZK9gwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl
rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5
Validity
Not Before: Jun 13 07:54:33 2026 GMT
Not After : Jun 20 07:54:33 2026 GMT
Subject: CN=6a2d0cba-5250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:f7:b1:ae:81:3c:c2:30:1f:63:57:4d:90:
c3:4a:1a:ca:69:3b:f5:66:92:9c:74:67:94:46:7c:
b8:e5:71:62:5e:44:6c:3e:18:8b:7d:e2:33:aa:ad:
8f:47:83:2b:2c:d5:13:74:c3:05:21:86:da:59:53:
27:d5:46:6a:ee:2a:58:23:b1:aa:65:07:59:a3:f4:
a1:2f:ab:26:eb:c7:f8:2e:74:78:b9:2d:1b:00:39:
d6:da:f5:e9:6f:57:17:c0:95:b7:59:ac:7f:5f:3d:
d1:cb:1d:68:93:9d:16:30:cf:f8:3e:63:ed:54:56:
3e:e6:a3:c2:d7:d0:ee:19:21:5a:14:b2:94:24:73:
1e:58:ea:28:92:de:63:5e:64:64:e9:2a:c4:99:b5:
41:42:94:56:64:46:cb:02:59:88:fe:ca:b1:c6:6a:
3b:21:f6:f1:ef:d4:61:f9:db:8b:aa:c3:28:f8:f7:
46:6d:39:4f:d2:12:7c:e7:42:77:0c:1d:28:08:43:
aa:65:8d:c2:61:dd:86:0d:8d:15:7e:39:e7:ef:49:
0e:fd:fa:5c:ca:da:c7:53:82:9e:c8:66:ec:eb:a6:
7b:d9:8f:3f:7e:d8:34:73:b6:66:74:e5:af:fe:1a:
36:be:e0:23:78:c4:4e:60:c8:bf:8e:dd:c1:83:57:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E4:90:3F:10:BF:D1:FC:44:B8:FA:2E:CE:BE:D7:55:01:2B:8C:C0
X509v3 Authority Key Identifier:
keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:db:72:ba:ae:eb:d7:42:ae:eb:e3:cf:d1:60:bd:ad:3b:04:
c6:ea:56:51:31:e1:65:59:84:d4:74:03:96:a7:72:23:63:6f:
df:4e:ce:2b:66:f5:e0:c7:4d:82:18:ef:98:2b:74:12:09:a8:
29:ec:fd:2c:ea:4d:c2:78:6a:ad:75:24:45:1c:56:79:5c:78:
e7:4f:17:cc:30:7f:c3:37:3b:98:7f:ea:4d:7f:cb:4d:68:b6:
32:6e:bd:c8:27:38:8e:62:6d:20:8b:cd:81:bd:99:48:42:30:
1d:c5:66:c2:df:c0:3d:5d:2a:ac:9a:cf:8f:8b:be:d6:45:e7:
86:6f:df:62:d9:77:eb:fc:59:5f:cd:15:6e:44:da:70:9f:9f:
d0:ef:14:a5:be:1c:ca:dc:5f:6a:09:39:6d:7f:dd:37:28:5a:
25:e0:ce:bf:e1:61:31:df:77:7f:f4:9c:ce:e1:ab:9a:b2:31:
2d:c8:85:99:4e:3a:98:2f:7e:4a:62:50:5f:4a:93:61:41:6b:
2a:57:b8:d3:5c:61:36:6e:ff:e8:31:91:b8:ca:7a:f9:d7:5a:
97:f0:48:f0:34:e9:62:bd:c9:3e:59:c4:cb:4b:f4:38:75:1f:
84:b9:ae:8e:bc:ff:b1:93:ce:c5:79:15:5c:20:31:d1:8a:45:
22:e5:1d:69
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
Q0E1QjExMC8GA1UEBRMoNUQ0RjQxMkFFNDgwMTBGRTU0ODdGMDE4RjE3MUE5QzY0
NjlEOUFDNTAeFw0yNjA2MTMwNzU0MzNaFw0yNjA2MjAwNzU0MzNaMBgxFjAUBgNV
BAMTDTZhMmQwY2JhLTUyNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuUfexroE8wjAfY1dNkMNKGsppO/Vmkpx0Z5RGfLjlcWJeRGw+GIt94jOqrY9H
gyss1RN0wwUhhtpZUyfVRmruKlgjsaplB1mj9KEvqybrx/gudHi5LRsAOdba9elv
VxfAlbdZrH9fPdHLHWiTnRYwz/g+Y+1UVj7mo8LX0O4ZIVoUspQkcx5Y6iiS3mNe
ZGTpKsSZtUFClFZkRssCWYj+yrHGajsh9vHv1GH524uqwyj490ZtOU/SEnznQncM
HSgIQ6pljcJh3YYNjRV+OefvSQ79+lzK2sdTgp7IZuzrpnvZjz9+2DRztmZ05a/+
Gja+4CN4xE5gyL+O3cGDV2OlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+eSQPxC/
0fxEuPouzr7XVQErjMAwHwYDVR0jBBgwFoAUXU9BKuSAEP5Uh/AY8XGpxkadmsUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQTVCL0QyNUQ4NjhFQzAz
QTExRjA4OEEzNDYyQ0M0RjlBRTAyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1z
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWFU5Qkt1U0FFUDVVaF9BWThYR3B4a2FkbXNVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD
QTVCL0QyNUQ4NjhFQzAzQTExRjA4OEEzNDYyQ0M0RjlBRTAyL1hVOUJLdVNBRVA1
VWhfQVk4WEdweGthZG1zVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBD23K6ruvXQq7r48/RYL2tOwTG6lZRMeFlWYTUdAOWp3IjY2/fTs4rZvXgx02C
GO+YK3QSCagp7P0s6k3CeGqtdSRFHFZ5XHjnTxfMMH/DNzuYf+pNf8tNaLYybr3I
JziOYm0gi82BvZlIQjAdxWbC38A9XSqsms+Pi77WReeGb99i2Xfr/FlfzRVuRNpw
n5/Q7xSlvhzK3F9qCTltf903KFol4M6/4WEx33d/9JzO4auasjEtyIWZTjqYL35K
YlBfSpNhQWsqV7jTXGE2bv/oMZG4ynr511qX8EjwNOlivck+WcTLS/Q4dR+Eua6O
vP+xk87FeRVcIDHRikUi5R1p
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:51 2026 by rpki-client