
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json)
Hash identifier: j2PMbdze3GBYI7Lp0rnAmQdRF9gAnGBMBzQcKbcqmY8=
Subject key identifier: 20:0A:83:F2:7C:1F:C7:A0:FE:83:A5:BE:7A:C5:51:03:B1:F5:D1:AB
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
Manifest number: 018B
Signing time: Fri 17 Apr 2026 04:09:45 +0000
Manifest this update: Fri 17 Apr 2026 04:09:45 +0000
Manifest next update: Fri 24 Apr 2026 04:09:45 +0000
Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: cUiXkMeaSTW7gKfrhXmrT+Hn+CjLqCUaCrVWZ7daSd8=)
2: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: EZoQFirW5esN1VtBDXZEiHNnC8g7jkK9EPytiN1M6xw=)
3: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: ddXLbsnNUJaK9PsrG7ysG03ljzK1G3ktx48YRWrpG8U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Validity
Not Before: Apr 17 04:09:45 2026 GMT
Not After : Apr 24 04:09:45 2026 GMT
Subject: CN=69e1b289-92a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:02:e7:f9:33:af:a3:d2:e7:ba:64:5c:12:
74:61:86:1f:fa:5e:ea:5a:11:1b:d0:ba:36:fc:ad:
ab:45:39:12:62:6c:35:72:03:5a:c0:b8:bb:47:d1:
28:7a:70:89:13:68:75:95:b7:b6:5f:5b:06:1f:a7:
a2:3e:6d:f7:b9:b8:d1:2d:24:92:18:8b:d3:67:22:
14:bd:aa:72:3b:80:d8:56:a0:b5:cf:f3:60:4b:4f:
f6:f2:02:94:80:56:41:e0:1d:9b:4a:27:37:21:8f:
46:df:88:5f:03:37:15:2d:4f:8a:77:f0:1d:bd:4a:
95:ab:9d:bd:36:e0:7b:84:33:49:e2:d7:bd:65:66:
04:79:66:12:a2:20:65:c3:39:96:ba:b3:40:fc:b0:
28:fc:36:9d:61:7a:78:3a:1d:26:17:72:59:25:25:
64:23:1c:b7:38:37:83:2e:90:67:8a:bc:20:a5:cf:
93:8a:48:6c:0f:5c:e1:35:4c:af:b3:70:8b:f4:20:
d5:05:64:ae:53:59:e5:0d:58:a4:4b:15:86:0f:68:
7e:c2:3e:26:56:c7:e2:5e:6a:e2:dd:71:70:47:39:
e2:cf:25:da:de:8e:4d:e0:c9:3b:29:b9:c6:f3:ff:
1b:e7:97:3e:72:9e:39:f6:db:51:ed:69:2b:20:90:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:83:F2:7C:1F:C7:A0:FE:83:A5:BE:7A:C5:51:03:B1:F5:D1:AB
X509v3 Authority Key Identifier:
keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:b0:37:3c:fa:51:e0:4f:2c:a9:1f:8b:99:4d:4d:de:ef:5d:
2d:c9:c7:60:90:f9:3b:cb:95:28:a4:19:90:62:f2:71:fe:3e:
88:b2:99:cc:3e:f0:5f:85:c3:98:bf:b0:a7:35:78:51:5b:df:
f7:f7:19:93:ed:0f:06:9b:41:f1:dc:a6:50:b6:1b:c3:ca:c3:
88:61:8f:de:ba:6d:9a:c3:93:60:7c:f0:0a:4e:be:6c:ef:1c:
cb:49:69:8a:da:0a:87:f7:e8:f5:14:97:f2:2a:44:0c:a1:d1:
22:2c:ce:63:12:b0:7d:4c:5e:62:8e:2f:76:4a:4e:57:6e:85:
73:af:c8:ed:0b:d0:94:1e:81:33:e5:29:cf:11:c6:8b:72:98:
7c:51:2c:49:0d:ca:66:a5:92:a4:36:c5:d0:fa:e8:73:7a:e6:
c4:bd:26:bd:52:c0:7b:52:52:78:ab:21:94:0b:b7:2e:13:0f:
14:1e:45:35:92:48:8a:a7:dc:6c:99:e3:0e:0e:6a:ed:54:8c:
bd:c3:f2:38:35:45:7c:1c:99:dd:44:2e:09:9c:a8:8f:9a:85:
5b:5b:7b:25:90:cb:9d:3c:4e:23:bc:e9:5e:40:8e:c6:bc:35:
b4:18:e5:d1:fd:7b:82:b7:45:05:62:38:3f:a5:30:92:14:9a:
1a:b9:6e:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy
OTFDNDdCQUYwHhcNMjYwNDE3MDQwOTQ1WhcNMjYwNDI0MDQwOTQ1WjAYMRYwFAYD
VQQDEw02OWUxYjI4OS05MmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4UC5/kzr6PS57pkXBJ0YYYf+l7qWhEb0Lo2/K2rRTkSYmw1cgNawLi7R9Eo
enCJE2h1lbe2X1sGH6eiPm33ubjRLSSSGIvTZyIUvapyO4DYVqC1z/NgS0/28gKU
gFZB4B2bSic3IY9G34hfAzcVLU+Kd/AdvUqVq529NuB7hDNJ4te9ZWYEeWYSoiBl
wzmWurNA/LAo/DadYXp4Oh0mF3JZJSVkIxy3ODeDLpBnirwgpc+TikhsD1zhNUyv
s3CL9CDVBWSuU1nlDVikSxWGD2h+wj4mVsfiXmri3XFwRznizyXa3o5N4Mk7KbnG
8/8b55c+cp459ttR7WkrIJB/MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAKg/J8
H8eg/oOlvnrFUQOx9dGrMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx
MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw
UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmLA3PPpR4E8sqR+LmU1N3u9dLcnHYJD5O8uVKKQZkGLycf4+iLKZzD7wX4XD
mL+wpzV4UVvf9/cZk+0PBptB8dymULYbw8rDiGGP3rptmsOTYHzwCk6+bO8cy0lp
itoKh/fo9RSX8ipEDKHRIizOYxKwfUxeYo4vdkpOV26Fc6/I7QvQlB6BM+UpzxHG
i3KYfFEsSQ3KZqWSpDbF0Proc3rmxL0mvVLAe1JSeKshlAu3LhMPFB5FNZJIiqfc
bJnjDg5q7VSMvcPyODVFfByZ3UQuCZyoj5qFW1t7JZDLnTxOI7zpXkCOxrw1tBjl
0f17grdFBWI4P6UwkhSaGrluJA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:56 2026 by rpki-client