
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json)
Hash identifier: DccVVr/WS/EQrIApc9ouGGnhmmkp46M1ukGJ7GebiME=
Subject key identifier: DE:2F:36:4F:C3:A4:C2:15:2D:0D:93:54:3D:47:C2:50:4C:D7:A1:11
Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B
Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B
Certificate serial: 017D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
Manifest number: 0173
Signing time: Thu 15 Oct 2026 05:51:09 +0000
Manifest this update: Thu 15 Oct 2026 05:51:08 +0000
Manifest next update: Thu 22 Oct 2026 05:51:08 +0000
Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: 0pv4SE+8D47vRsFi/+NWQCYQxe67zqsMQN0/ajxEFMQ=)
2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: N8subGTXgSFo4mT5pf8HJvgdyU5Rcsjvn4+t6H3QhDo=)
3: 6D79D956EF8E11F0A4EF9B52626F56BC.roa (hash: 4G7rkAOPzZxy6QxlsO0//em4aGUKuTqPaZNaxC3+I/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl
rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 05:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B
Validity
Not Before: Oct 15 05:51:08 2026 GMT
Not After : Oct 22 05:51:08 2026 GMT
Subject: CN=6ad069cd-32a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:9e:74:94:c5:54:f1:6f:f8:1f:58:a4:df:
d5:26:1d:02:a5:b8:83:32:0c:a6:39:9a:5e:77:91:
25:da:78:e9:67:52:4d:9e:fa:6a:93:32:a6:9c:e2:
b5:c8:3a:2b:71:26:a9:ef:b8:73:c8:0d:f9:50:4b:
42:fc:be:b8:df:91:0e:e0:fc:29:80:e4:9d:23:da:
f7:15:e6:c1:fa:2c:4e:86:7f:98:bf:f8:4f:f8:b4:
3d:d1:9f:99:1c:97:48:22:37:1a:5c:17:ea:59:3e:
e7:7f:ff:3a:13:51:de:0d:d0:fd:43:ff:89:47:7c:
24:ea:b0:43:75:b1:16:ff:71:26:2c:4c:96:74:a3:
4f:a1:44:8e:8c:a9:55:7e:a8:fa:24:0d:54:a1:83:
d9:a9:c1:eb:59:47:e0:9d:38:ed:da:a2:dd:01:bc:
d8:64:e5:92:37:db:47:6d:24:e7:06:4a:47:50:54:
28:9e:9e:8b:00:6b:b8:b3:46:a1:e6:f0:ab:da:f9:
5d:9c:61:7c:b6:e8:b6:5f:f8:46:ab:cf:b3:f0:ce:
92:a3:3c:b2:df:d1:e7:89:38:d3:bc:c0:e5:22:e3:
95:00:34:9a:6e:6b:b7:f0:3c:f1:71:9c:b7:22:ce:
2f:85:6f:33:6d:8a:24:f1:5b:bf:7d:5d:05:f0:6c:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2F:36:4F:C3:A4:C2:15:2D:0D:93:54:3D:47:C2:50:4C:D7:A1:11
X509v3 Authority Key Identifier:
keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:8f:b7:8e:b6:1e:e9:75:c7:71:68:6c:0d:89:e2:90:c4:46:
38:c2:f1:c5:83:53:cf:af:f5:51:5a:a9:e8:45:87:dc:9d:c4:
bb:73:e8:56:db:7e:f3:7c:fa:4f:f7:57:39:5a:c5:f0:d8:68:
bd:f1:f2:9b:03:4f:c5:e6:e7:08:7f:6f:46:d7:40:72:24:68:
97:a3:69:cb:fc:00:81:f7:69:1b:49:c8:1e:93:10:6b:ec:f8:
bb:0c:80:ab:da:01:dd:fc:a5:45:62:5f:3c:8b:ab:72:ba:df:
2e:67:6e:4f:f4:94:23:dd:28:e3:48:a4:75:58:31:80:f8:e9:
80:eb:40:ef:2b:28:c1:16:ea:b6:a8:2e:62:48:34:a6:04:9f:
9e:97:77:40:56:f2:b9:7a:aa:22:25:e0:77:a8:4f:6a:d4:3b:
fd:52:e3:8c:9e:d9:37:0b:7f:ac:88:0c:34:93:78:42:ed:9f:
bf:36:b4:3a:f8:3b:a1:34:7f:83:7f:3d:65:b9:04:0a:80:ee:
ca:df:bf:fc:4d:2d:1e:b5:21:21:e9:1e:58:cc:8a:8a:7f:28:
21:78:c8:c7:3a:b5:48:3a:df:30:04:e3:59:58:3f:6e:ed:e4:
39:4a:ff:f3:0b:c9:60:12:9e:ac:8b:32:57:b9:da:3d:cd:bb:
d7:20:62:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC
NjI4OTE3MUIwHhcNMjYxMDE1MDU1MTA4WhcNMjYxMDIyMDU1MTA4WjAYMRYwFAYD
VQQDEw02YWQwNjljZC0zMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAijCedJTFVPFv+B9YpN/VJh0CpbiDMgymOZped5El2njpZ1JNnvpqkzKmnOK1
yDorcSap77hzyA35UEtC/L6435EO4PwpgOSdI9r3FebB+ixOhn+Yv/hP+LQ90Z+Z
HJdIIjcaXBfqWT7nf/86E1HeDdD9Q/+JR3wk6rBDdbEW/3EmLEyWdKNPoUSOjKlV
fqj6JA1UoYPZqcHrWUfgnTjt2qLdAbzYZOWSN9tHbSTnBkpHUFQonp6LAGu4s0ah
5vCr2vldnGF8tui2X/hGq8+z8M6Sozyy39HniTjTvMDlIuOVADSabmu38DzxcZy3
Is4vhW8zbYok8Vu/fV0F8GzWjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4vNk/D
pMIVLQ2TVD1HwlBM16ERMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE
ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTAyNS85NTZGNjYyQzlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlD
Wnk1bTh3QmZaR20yS0pGeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeI+3jrYe6XXHcWhsDYnikMRGOMLxxYNTz6/1UVqp6EWH3J3Eu3PoVtt+83z6
T/dXOVrF8NhovfHymwNPxebnCH9vRtdAciRol6Npy/wAgfdpG0nIHpMQa+z4uwyA
q9oB3fylRWJfPIurcrrfLmduT/SUI90o40ikdVgxgPjpgOtA7ysowRbqtqguYkg0
pgSfnpd3QFbyuXqqIiXgd6hPatQ7/VLjjJ7ZNwt/rIgMNJN4Qu2fvza0Ovg7oTR/
g389ZbkECoDuyt+//E0tHrUhIekeWMyKin8oIXjIxzq1SDrfMATjWVg/bu3kOUr/
8wvJYBKerIsyV7naPc271yBiSA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:32:28 2026 by rpki-client