
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json)
Hash identifier: irvbyJ+sHANQiygHJEF48D2ndc+qe4PboFzbHrtfozA=
Subject key identifier: CE:BD:10:E6:C3:7E:B9:E7:68:AC:39:67:86:14:E6:CB:D1:3E:82:03
Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8
Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
Manifest number: 0149
Signing time: Tue 29 Sep 2026 05:50:25 +0000
Manifest this update: Tue 29 Sep 2026 05:50:24 +0000
Manifest next update: Tue 06 Oct 2026 05:50:24 +0000
Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: lGbsbOHdX8t1FAj6/7pa/wTXg5JBhFOuol3wNfthL9g=)
2: 51AEB7D2836811F1A730906667A30FBC.roa (hash: w/8aO2cFZ6PvgX1rLpRaspZazjaxpcImO3eTh4c/56M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl
rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 05:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
Validity
Not Before: Sep 29 05:50:24 2026 GMT
Not After : Oct 6 05:50:24 2026 GMT
Subject: CN=6abb51a1-4160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:25:c0:62:69:ab:0e:94:85:98:53:6c:17:
25:2c:5a:30:d4:3e:6e:8e:4e:0a:46:71:ea:ad:b8:
0e:ed:1e:95:d0:64:84:ad:08:05:f5:bb:86:a1:96:
ae:8b:3f:df:e4:51:5d:71:9e:a8:68:76:6e:fa:e6:
04:c5:52:61:fa:41:ac:f2:76:be:5a:74:3d:c9:ae:
f6:79:27:6f:b8:e1:dd:9d:57:fa:19:bc:4c:1e:46:
f1:65:bb:bd:8d:2d:28:6a:0a:bb:ea:99:b6:5b:fb:
80:96:76:6b:9a:5e:d8:ae:44:bd:8f:b6:f9:28:6a:
6d:81:e1:0c:2b:bf:e4:46:76:73:7b:22:c8:81:e5:
89:4d:ea:d2:21:57:d7:ea:9d:60:56:9b:90:c4:b1:
c2:7e:3f:d4:61:d3:6d:5d:11:b2:69:a4:73:b2:38:
77:f4:c7:57:18:2e:2b:4a:ac:0b:d0:f4:dc:20:ab:
76:f8:1e:10:9f:b6:77:91:60:35:0e:ff:15:24:12:
1a:92:c2:7a:8a:9d:bc:1a:3a:8a:80:2a:27:24:79:
16:9b:f8:ea:37:b4:cd:b8:eb:d4:38:87:77:bd:7f:
48:79:66:64:62:ec:5c:6e:c1:ee:62:47:28:d6:95:
79:b5:ce:b3:5c:a7:09:c5:9e:c2:35:bd:46:8c:2c:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:10:E6:C3:7E:B9:E7:68:AC:39:67:86:14:E6:CB:D1:3E:82:03
X509v3 Authority Key Identifier:
keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:55:91:a5:92:e5:82:7d:00:8c:d3:01:70:b5:7c:c6:01:f6:
9f:f8:d8:e3:52:04:c5:b5:65:f0:db:80:65:d6:94:f4:89:d7:
6f:80:20:d5:d2:62:8d:e9:9c:c6:85:39:02:91:4b:d6:ad:fb:
64:0c:33:6c:c3:0c:9d:97:6d:a9:63:74:cc:c2:18:eb:17:70:
6b:d2:76:01:1a:b6:c1:86:ef:12:97:67:01:c7:71:72:d7:ec:
8d:5b:7f:38:56:60:91:cc:f2:59:e8:e6:1c:c9:03:c6:bc:d9:
ee:07:0e:55:d7:34:15:f2:1e:61:95:5f:81:60:78:dc:3f:fb:
8b:65:9a:f1:4f:21:a5:05:39:01:4b:5b:dd:7e:64:10:49:df:
ff:65:4f:32:07:cb:67:dd:54:4a:36:7c:d1:4d:c3:16:6e:c8:
9a:4a:f1:57:05:7d:0e:7b:b9:20:5f:5b:5b:6f:f3:1d:a0:26:
f7:60:94:4b:80:4c:6f:fd:b8:80:e9:e9:ad:30:fb:b7:4d:63:
5c:62:51:4b:79:84:5b:33:9e:ac:42:cc:64:5a:92:d5:80:bb:
ca:18:3a:e5:9a:08:98:4e:4c:1c:74:56:0b:e9:cd:e7:33:3d:
2b:77:ea:d6:87:cb:e0:8e:45:0c:06:f3:22:1d:d1:a4:79:d8:
14:f6:f4:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG
NUUxOUNBRTgwHhcNMjYwOTI5MDU1MDI0WhcNMjYxMDA2MDU1MDI0WjAYMRYwFAYD
VQQDEw02YWJiNTFhMS00MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxaQlwGJpqw6UhZhTbBclLFow1D5ujk4KRnHqrbgO7R6V0GSErQgF9buGoZau
iz/f5FFdcZ6oaHZu+uYExVJh+kGs8na+WnQ9ya72eSdvuOHdnVf6GbxMHkbxZbu9
jS0oagq76pm2W/uAlnZrml7YrkS9j7b5KGptgeEMK7/kRnZzeyLIgeWJTerSIVfX
6p1gVpuQxLHCfj/UYdNtXRGyaaRzsjh39MdXGC4rSqwL0PTcIKt2+B4Qn7Z3kWA1
Dv8VJBIaksJ6ip28GjqKgConJHkWm/jqN7TNuOvUOId3vX9IeWZkYuxcbsHuYkco
1pV5tc6zXKcJxZ7CNb1GjCzqxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM69EObD
frnnaKw5Z4YU5svRPoIDMB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC
NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3
Qm5HUkdUdER1YkwxNFp5dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANlWRpZLlgn0AjNMBcLV8xgH2n/jY41IExbVl8NuAZdaU9InXb4Ag1dJijemc
xoU5ApFL1q37ZAwzbMMMnZdtqWN0zMIY6xdwa9J2ARq2wYbvEpdnAcdxctfsjVt/
OFZgkczyWejmHMkDxrzZ7gcOVdc0FfIeYZVfgWB43D/7i2Wa8U8hpQU5AUtb3X5k
EEnf/2VPMgfLZ91USjZ80U3DFm7ImkrxVwV9Dnu5IF9bW2/zHaAm92CUS4BMb/24
gOnprTD7t01jXGJRS3mEWzOerELMZFqS1YC7yhg65ZoImE5MHHRWC+nN5zM9K3fq
1ofL4I5FDAbzIh3RpHnYFPb0GQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:57:30 2026 by rpki-client