
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json)
Hash identifier: mrY+kmwH06kwIr4YUmsioWcxplwZs6qG6f6QIF4XQz8=
Subject key identifier: 43:DE:A0:4D:02:63:E2:31:10:E4:2E:C2:89:93:7A:0E:EA:C6:52:9C
Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Certificate serial: 0515
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
Manifest number: 0510
Signing time: Sun 01 Mar 2026 00:13:02 +0000
Manifest this update: Sun 01 Mar 2026 00:13:02 +0000
Manifest next update: Sun 08 Mar 2026 00:13:02 +0000
Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: 6IlJbiGp1mn5wmLeoW8SkBISSUChMCOQze3JzZxmCp4=)
2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: NDBRaEu7/3p0dY7kfIAusQPnP5MsQ4tVX9/7zI105Q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1301 (0x515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7E61, serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Validity
Not Before: Mar 1 00:13:02 2026 GMT
Not After : Mar 8 00:13:02 2026 GMT
Subject: CN=69a3848e-b9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:ff:5c:c6:7e:26:64:6e:a2:d7:2e:70:84:
ec:67:8a:c1:6e:42:93:9d:44:51:c2:05:4b:5a:f4:
ff:87:61:e4:dd:19:44:af:f0:d5:83:2c:73:41:88:
b0:f5:df:46:04:1e:6b:a6:54:9d:02:9e:38:84:75:
18:76:bd:ec:18:01:e8:6d:3f:5d:4a:27:a7:8a:01:
8a:79:1d:c4:b0:d9:33:a9:3a:1b:26:75:17:01:97:
83:b1:e3:ff:9e:32:de:44:39:bf:e8:5e:f7:9a:be:
cd:22:0e:f6:39:ad:5e:f4:8c:7f:42:02:d5:ac:60:
0f:d2:00:36:e7:34:ea:16:1b:49:f5:ef:92:c1:c4:
f4:2c:f5:34:dc:f3:78:07:27:6d:86:2e:65:28:e6:
82:e6:a3:b7:a1:6a:8e:f5:42:72:11:69:b2:24:c1:
9d:ee:80:21:eb:20:0f:8f:55:d3:23:b3:04:f9:6d:
23:9f:15:9c:c8:54:48:71:ac:85:d8:c2:4a:3e:2f:
cc:f7:5c:e7:c4:d9:d9:55:b2:25:bc:56:16:62:42:
9b:86:9e:ba:66:9c:78:fe:d9:5a:62:7a:51:c0:67:
a2:f5:6c:99:ba:8a:54:a8:c2:56:44:9a:d1:35:50:
f3:5d:ef:42:8b:72:f0:63:3b:ca:4e:06:2a:99:63:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DE:A0:4D:02:63:E2:31:10:E4:2E:C2:89:93:7A:0E:EA:C6:52:9C
X509v3 Authority Key Identifier:
keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:67:ef:04:c1:c6:61:63:2b:ea:78:14:6f:f4:eb:75:cf:e7:
d9:29:ac:66:55:c6:2c:a6:33:23:36:7a:ab:7f:3b:8b:98:53:
1b:17:7d:67:b3:fd:d4:5b:de:77:65:31:f0:b5:8a:0b:96:46:
dd:4a:ca:c6:b6:02:da:19:47:fd:23:b5:7c:82:90:c1:74:07:
8f:a7:f3:48:1e:36:0a:78:2e:74:57:6d:97:31:f4:13:1d:b5:
6f:eb:63:f2:f3:35:a9:de:77:d3:a0:b0:3b:92:ea:23:fb:e6:
80:d4:33:0d:b1:92:78:72:f9:cc:6f:fa:4f:ca:48:2a:ba:e7:
10:40:e0:02:d1:45:ee:c3:6d:39:90:5a:7c:9a:c9:39:2f:73:
87:dc:e8:8a:ca:2c:e8:b2:32:24:ae:34:6d:76:44:a9:9d:60:
32:84:63:2a:0a:50:31:71:99:8d:97:54:66:b0:2e:b1:ef:ba:
15:87:f6:9b:17:23:91:3b:b2:5e:74:e1:89:83:b1:1c:21:06:
f3:ba:4c:70:8e:40:99:da:fc:47:71:a8:38:31:b9:2d:6d:2b:
41:bb:18:96:47:9a:ac:fa:1c:b1:64:8f:c4:00:de:b2:47:92:
bf:1a:ac:61:7a:a4:56:7a:5d:e4:c1:f7:47:88:68:d5:61:85:
45:3a:97:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDdFNjExMTAvBgNVBAUTKEM2NDE4OUY1OENGNzJDMUY3M0JFQjI0MDdBNTIyN0I2
QTJDRTk2NjEwHhcNMjYwMzAxMDAxMzAyWhcNMjYwMzA4MDAxMzAyWjAYMRYwFAYD
VQQDDA02OWEzODQ4ZS1iOWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmyn/XMZ+JmRuotcucITsZ4rBbkKTnURRwgVLWvT/h2Hk3RlEr/DVgyxzQYiw
9d9GBB5rplSdAp44hHUYdr3sGAHobT9dSienigGKeR3EsNkzqTobJnUXAZeDseP/
njLeRDm/6F73mr7NIg72Oa1e9Ix/QgLVrGAP0gA25zTqFhtJ9e+SwcT0LPU03PN4
Bydthi5lKOaC5qO3oWqO9UJyEWmyJMGd7oAh6yAPj1XTI7ME+W0jnxWcyFRIcayF
2MJKPi/M91znxNnZVbIlvFYWYkKbhp66Zpx4/tlaYnpRwGei9WyZuopUqMJWRJrR
NVDzXe9Ci3LwYzvKTgYqmWNgrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPeoE0C
Y+IxEOQuwomTeg7qxlKcMB8GA1UdIwQYMBaAFMZBifWM9ywfc76yQHpSJ7aizpZh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0U2MS9GNTk0REM4MDQw
N0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xCOXp2ckpBZWxJbnRxTE9s
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hrR0o5WXozTEI5enZySkFlbEludHFMT2xtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
N0U2MS9GNTk0REM4MDQwN0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xC
OXp2ckpBZWxJbnRxTE9sbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANmfvBMHGYWMr6ngUb/Trdc/n2SmsZlXGLKYzIzZ6q387i5hTGxd9Z7P91Fve
d2Ux8LWKC5ZG3UrKxrYC2hlH/SO1fIKQwXQHj6fzSB42CngudFdtlzH0Ex21b+tj
8vM1qd5306CwO5LqI/vmgNQzDbGSeHL5zG/6T8pIKrrnEEDgAtFF7sNtOZBafJrJ
OS9zh9zoisos6LIyJK40bXZEqZ1gMoRjKgpQMXGZjZdUZrAuse+6FYf2mxcjkTuy
XnThiYOxHCEG87pMcI5Amdr8R3GoODG5LW0rQbsYlkearPocsWSPxADeskeSvxqs
YXqkVnpd5MH3R4ho1WGFRTqX9w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:32:15 2026 by rpki-client