
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
File: XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json)
Hash identifier: +SDROOX/GoDBa3c+KAGm7wTRbJm7b/joXpdrp0bPQV4=
Subject key identifier: 47:39:59:B4:BD:83:1B:D4:43:20:D2:14:31:76:D6:EB:33:15:44:98
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
Manifest number: 0231
Signing time: Wed 29 Jul 2026 04:05:43 +0000
Manifest this update: Wed 29 Jul 2026 04:05:42 +0000
Manifest next update: Wed 05 Aug 2026 04:05:42 +0000
Files and hashes: 1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: PtWvu3aYh5HvSgBQ0Nr1CVpFYjs2QSLLt2/cfr0MRaU=)
2: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: kvLOqAvejoloIcBp8iOod+XLqcMm6Km2ICEQUCNEODY=)
3: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: d0JlKivvI0UuN/+g7FjPgsMv6qjwloa3O1BziCQ3cTE=)
4: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: CKjWrRKFrq5wIXerALs28X5SJv1uenx7ZdloeFQoUHo=)
5: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: sT56QjRFMA5RYNrfwK84aeqd2CWRIQx/z7cMGwk6r48=)
6: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: r/B/wTWM1e+RbFQV+OxoufBd8XhZQMs6+SrSBQGZEm0=)
7: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: yxoJxjt522RCtypxdpCWh8Ki8MQz+o9DlkQu175uTk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Validity
Not Before: Jul 29 04:05:42 2026 GMT
Not After : Aug 5 04:05:42 2026 GMT
Subject: CN=6a697c16-24eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:f8:09:d7:90:25:4e:74:4e:91:5b:25:58:
d3:ad:86:4f:9f:d5:24:05:d7:69:e0:27:c5:70:87:
2d:bd:19:00:4f:d5:e2:e3:18:6a:60:b8:fe:88:67:
da:77:83:03:aa:87:32:99:57:5f:41:a0:bf:e7:a8:
e7:7d:19:4a:a0:72:73:1b:cd:23:c0:ea:97:5a:6e:
ab:85:e3:88:96:46:1f:c5:a9:f6:d0:93:03:31:f3:
e3:8a:aa:f1:8c:23:b0:ed:81:4c:f9:08:5d:0b:17:
66:2b:5b:2c:64:9a:f8:25:3f:7b:6f:84:ab:87:1d:
7d:70:0d:d1:ef:49:8b:92:b2:4b:e2:15:e9:4f:41:
66:ef:20:2a:f6:71:cc:d4:01:3e:da:89:39:38:31:
d2:b9:b2:d1:09:4e:1e:78:77:c2:6f:29:3c:0e:35:
de:cf:e2:f0:10:5b:e8:d4:61:75:d3:b7:9f:d0:a9:
34:d4:38:35:74:30:53:7c:a3:cf:b2:5c:bd:71:bd:
0c:ab:1a:09:96:09:79:39:f8:a6:40:dd:37:2d:5b:
09:73:36:dc:b4:d7:bb:cc:97:3a:35:3e:64:09:61:
df:1c:be:a5:4e:df:f1:70:20:ec:a2:bd:b0:4d:ed:
15:62:8a:2f:4f:38:bf:5e:96:dc:d2:75:48:c8:14:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:59:B4:BD:83:1B:D4:43:20:D2:14:31:76:D6:EB:33:15:44:98
X509v3 Authority Key Identifier:
keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:30:9c:3d:33:c0:51:5f:31:ca:0d:63:71:2f:57:58:10:59:
42:ed:5d:b8:88:a6:4d:03:da:92:03:ee:00:0f:b1:8e:48:23:
50:fe:45:fb:d8:07:ae:46:1e:fc:c0:9e:94:31:95:52:42:fd:
f4:99:46:17:91:17:68:ce:2e:9c:49:13:34:88:b7:64:bb:e4:
da:d7:e1:ae:60:32:da:b9:05:5a:8a:6f:45:b0:fd:38:01:0e:
e4:08:27:b3:2d:24:f5:48:6d:8f:ff:ac:dd:20:41:ee:57:77:
a8:fd:e3:e0:d9:46:1f:8e:23:3c:92:0f:12:dd:73:6c:27:25:
cf:ba:ed:8e:a5:77:be:ff:4e:77:6f:6a:75:da:98:c8:9d:46:
14:bd:71:f0:34:5b:b1:7e:b3:61:0f:74:96:64:2a:84:71:9a:
2f:e1:28:e6:94:f2:b0:d8:4f:9b:50:90:f2:25:2d:1c:27:b5:
ef:e2:ff:13:86:43:b3:7c:1b:d3:d4:67:d7:72:f3:04:58:0c:
42:51:b2:db:7d:b4:c1:93:fd:41:25:b2:64:ce:97:1a:ba:55:
01:2f:8f:88:f5:2f:63:b3:de:14:ac:d9:7c:f0:c5:0e:5c:88:
76:7e:b4:39:0e:f4:49:0c:29:38:a6:62:1a:ef:24:d2:d4:6e:
95:e5:22:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz
RjQ5Q0UyOUEwHhcNMjYwNzI5MDQwNTQyWhcNMjYwODA1MDQwNTQyWjAYMRYwFAYD
VQQDEw02YTY5N2MxNi0yNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArPr4CdeQJU50TpFbJVjTrYZPn9UkBddp4CfFcIctvRkAT9Xi4xhqYLj+iGfa
d4MDqocymVdfQaC/56jnfRlKoHJzG80jwOqXWm6rheOIlkYfxan20JMDMfPjiqrx
jCOw7YFM+QhdCxdmK1ssZJr4JT97b4Srhx19cA3R70mLkrJL4hXpT0Fm7yAq9nHM
1AE+2ok5ODHSubLRCU4eeHfCbyk8DjXez+LwEFvo1GF107ef0Kk01Dg1dDBTfKPP
sly9cb0MqxoJlgl5OfimQN03LVsJczbctNe7zJc6NT5kCWHfHL6lTt/xcCDsor2w
Te0VYoovTzi/Xpbc0nVIyBRKewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEc5WbS9
gxvUQyDSFDF21uszFUSYMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz
NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUU4Mi9FQTdFNUZBNjYzNkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZq
TGwwel9zY3ZwME1fU2M0cG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARjCcPTPAUV8xyg1jcS9XWBBZQu1duIimTQPakgPuAA+xjkgjUP5F+9gHrkYe
/MCelDGVUkL99JlGF5EXaM4unEkTNIi3ZLvk2tfhrmAy2rkFWopvRbD9OAEO5Agn
sy0k9Uhtj/+s3SBB7ld3qP3j4NlGH44jPJIPEt1zbCclz7rtjqV3vv9Od29qddqY
yJ1GFL1x8DRbsX6zYQ90lmQqhHGaL+Eo5pTysNhPm1CQ8iUtHCe17+L/E4ZDs3wb
09Rn13LzBFgMQlGy2320wZP9QSWyZM6XGrpVAS+PiPUvY7PeFKzZfPDFDlyIdn60
OQ70SQwpOKZiGu8k0tRuleUi5w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:35:59 2026 by rpki-client