
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json)
Hash identifier: wHTz0/H74X1Zb3bxBs+owmO/kYXwCr+yvKyCO4H0OnY=
Subject key identifier: C2:F8:15:9E:C1:64:CC:44:FB:AA:9C:3F:71:5B:41:32:7F:D2:FA:91
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
Manifest number: 01A9
Signing time: Sat 13 Jun 2026 04:07:58 +0000
Manifest this update: Sat 13 Jun 2026 04:07:58 +0000
Manifest next update: Sat 20 Jun 2026 04:07:58 +0000
Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: 59SyXUBo86oRmSFIz5XeodQFJUZAKCR716+aVG+1e90=)
2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: dTKobTpgmqVlw9+3THmdhV/OqwJR2m6apo+OjMA3HTs=)
3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: 3E36B1MpZYDiaAYeovA9u0vflfKd+OIxRnYYoJKDjag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Validity
Not Before: Jun 13 04:07:58 2026 GMT
Not After : Jun 20 04:07:58 2026 GMT
Subject: CN=6a2cd79e-9016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:4d:4a:03:b6:70:1c:34:36:27:c8:e5:ad:
22:61:9a:06:06:00:ee:84:91:83:5d:8e:53:2f:05:
5d:80:e8:01:27:7a:37:58:8f:26:b2:28:d0:59:43:
1f:2d:90:24:04:e6:88:e5:bd:c6:ff:5e:f8:11:c8:
ef:01:bd:8d:05:55:de:a7:d2:18:ad:5f:b5:75:4b:
1e:4d:91:af:bb:a9:0a:d9:69:b7:2d:37:ea:2d:2d:
30:7d:82:75:38:eb:ff:62:c4:ae:61:12:ea:9a:c2:
ce:cd:db:83:0f:f0:46:d2:7d:cb:90:01:32:f3:27:
14:c7:8c:a9:b3:6a:1a:42:08:ee:ad:47:36:7d:6c:
e5:9f:b0:3e:73:5e:e6:44:31:16:9e:16:5e:35:16:
60:5c:ac:c5:f9:27:cb:24:13:4b:bf:97:86:3e:8d:
b1:d2:43:cc:b1:0f:9b:a7:a2:7b:a8:0d:b6:d5:1c:
ab:6a:b3:71:b0:05:ee:88:97:02:25:da:51:36:1c:
7a:25:8a:69:6e:55:b9:b9:86:c1:a8:5a:a3:91:11:
b5:ed:b3:98:8d:22:2a:3b:8b:2e:61:b4:15:4e:07:
7e:e1:7d:30:f2:d1:f0:1c:ed:87:93:d5:41:b3:08:
7c:b8:a4:67:b1:a6:30:6d:d5:2f:c6:ed:d3:9a:00:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F8:15:9E:C1:64:CC:44:FB:AA:9C:3F:71:5B:41:32:7F:D2:FA:91
X509v3 Authority Key Identifier:
keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:5e:da:44:ec:52:cb:32:2b:7e:38:02:bc:df:fa:9d:54:94:
09:ab:4e:9e:85:80:de:45:e3:25:77:9d:69:ff:1a:c8:85:51:
fc:f3:cd:ca:12:29:90:0d:2a:d2:ed:98:54:00:a0:69:02:c1:
9f:2b:75:9a:41:0f:36:52:a3:f1:62:c6:27:5f:56:6d:27:88:
6b:16:66:55:9d:26:b6:24:c7:88:4e:2f:e0:8b:ce:74:03:04:
28:47:1a:8f:5a:62:34:41:77:05:95:ad:f2:2d:4c:ec:71:8d:
fc:ff:ac:e5:5f:25:ff:bb:18:c8:73:e4:4b:39:2b:3d:64:fd:
e3:fb:0e:a1:33:38:ca:2d:25:a2:a8:a2:40:2e:dd:db:b7:fe:
38:9c:a3:8a:e5:d1:cf:93:cc:62:e8:54:65:21:f1:dc:f8:d4:
24:1b:c7:6a:28:1e:fd:8a:9f:82:71:bd:b0:0a:b6:18:fc:ec:
df:81:0d:9e:09:f6:ed:56:e0:2f:de:f5:36:c5:a7:9c:06:f9:
55:c5:64:47:6a:57:27:1b:d3:5c:9c:be:3d:47:44:36:6f:13:
e0:24:4c:40:b0:dd:49:9e:48:f0:93:74:45:5a:83:dd:51:ae:
4d:c6:cb:ad:b3:5f:b9:8f:ba:2b:a3:72:0a:41:4b:fa:13:85:
9d:cb:bb:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy
OTFDNDdCQUYwHhcNMjYwNjEzMDQwNzU4WhcNMjYwNjIwMDQwNzU4WjAYMRYwFAYD
VQQDEw02YTJjZDc5ZS05MDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoiFNSgO2cBw0NifI5a0iYZoGBgDuhJGDXY5TLwVdgOgBJ3o3WI8msijQWUMf
LZAkBOaI5b3G/174EcjvAb2NBVXep9IYrV+1dUseTZGvu6kK2Wm3LTfqLS0wfYJ1
OOv/YsSuYRLqmsLOzduDD/BG0n3LkAEy8ycUx4yps2oaQgjurUc2fWzln7A+c17m
RDEWnhZeNRZgXKzF+SfLJBNLv5eGPo2x0kPMsQ+bp6J7qA221RyrarNxsAXuiJcC
JdpRNhx6JYppblW5uYbBqFqjkRG17bOYjSIqO4suYbQVTgd+4X0w8tHwHO2Hk9VB
swh8uKRnsaYwbdUvxu3TmgDrYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFML4FZ7B
ZMxE+6qcP3FbQTJ/0vqRMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx
MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw
UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUl7aROxSyzIrfjgCvN/6nVSUCatOnoWA3kXjJXedaf8ayIVR/PPNyhIpkA0q
0u2YVACgaQLBnyt1mkEPNlKj8WLGJ19WbSeIaxZmVZ0mtiTHiE4v4IvOdAMEKEca
j1piNEF3BZWt8i1M7HGN/P+s5V8l/7sYyHPkSzkrPWT94/sOoTM4yi0loqiiQC7d
27f+OJyjiuXRz5PMYuhUZSHx3PjUJBvHaige/YqfgnG9sAq2GPzs34ENngn27Vbg
L971NsWnnAb5VcVkR2pXJxvTXJy+PUdENm8T4CRMQLDdSZ5I8JN0RVqD3VGuTcbL
rbNfuY+6K6NyCkFL+hOFncu7rg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:32 2026 by rpki-client