
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json)
Hash identifier: 55tma62eMfQXlpPrLtCAeXaP+hvW6P4Bm203x6V6elY=
Subject key identifier: 6D:BE:C4:A0:93:94:0D:04:EA:1E:89:9B:E5:DD:89:19:62:7B:10:69
Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
Certificate serial: 1FB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
Manifest number: 1FA2
Signing time: Mon 02 Mar 2026 01:47:52 +0000
Manifest this update: Mon 02 Mar 2026 01:47:50 +0000
Manifest next update: Mon 09 Mar 2026 01:47:50 +0000
Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: +6XUca7Zb6NHp+yQBnNgOKANWNiFd/yHrFqHF7Bkwgo=)
2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: W76e9AIVTyaTFBKFcxkBKNy/Y9c3O96EbBTxmYrNiiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl
rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8113 (0x1fb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
Validity
Not Before: Mar 2 01:47:50 2026 GMT
Not After : Mar 9 01:47:50 2026 GMT
Subject: CN=69a4ec47-6067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:c4:19:39:bb:2f:f4:57:b9:0b:0e:51:c9:
39:69:12:0c:cb:51:72:81:ec:13:31:e0:51:67:9f:
90:9f:8b:e5:c0:e7:f1:d9:c2:45:8a:c7:b1:2c:bc:
e3:f0:f0:9e:a2:8d:6a:ee:34:c1:f1:25:06:ab:0c:
d7:cb:57:75:34:20:4a:46:b3:d8:ca:89:e5:d9:97:
dd:94:5b:6d:b4:a4:7d:5e:94:b5:1e:4a:86:13:9c:
c8:a6:9c:df:3a:c6:b4:71:70:4c:2f:71:2e:33:3d:
f1:15:97:b7:4b:ac:bd:58:3e:f9:67:69:d2:6b:40:
15:93:f7:e1:c5:6e:ea:01:3f:75:e3:3a:fc:ac:e0:
79:ea:a1:b3:6c:47:6b:a9:0c:63:90:2d:29:6f:ca:
17:4c:2a:05:3c:24:8c:9e:30:81:41:0a:ff:b8:76:
4a:86:7c:96:58:27:ac:f6:00:74:dc:81:a1:b4:22:
f7:84:3c:79:0a:c0:a8:ff:ed:fb:bf:5a:9d:57:69:
94:51:3d:5e:75:31:57:b0:e2:e5:96:70:c6:61:13:
4d:06:68:6b:7c:2c:c9:44:02:a4:f2:93:b9:39:f9:
91:94:d5:b8:7f:ed:11:3f:b5:19:0f:d2:e4:1e:b7:
05:fa:cd:9f:61:7c:b7:36:18:6f:23:2a:6a:e9:d4:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BE:C4:A0:93:94:0D:04:EA:1E:89:9B:E5:DD:89:19:62:7B:10:69
X509v3 Authority Key Identifier:
keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:21:eb:9b:4c:11:cc:d3:66:91:fc:b3:e8:0a:3b:e4:1b:f5:
74:cd:0a:35:ff:55:a7:24:db:30:20:66:c3:6c:9e:94:0c:da:
e9:ca:52:a5:3f:8b:4f:f6:5a:ec:aa:0c:35:14:6a:ed:18:6c:
dd:92:73:9f:38:cb:6f:59:18:18:bf:bd:53:59:71:76:e9:ca:
f8:e8:c2:5b:52:05:db:8b:0a:4b:9b:2e:0f:17:94:28:49:27:
5b:f3:84:39:bf:45:67:25:0a:cd:3b:d3:34:91:bb:45:39:d3:
bb:c2:c4:09:ea:cf:87:b6:a1:bb:50:bb:f5:8e:f9:8a:2f:5a:
e1:1a:d4:2e:a2:14:e5:f7:b0:14:cd:87:d4:b7:71:4e:48:99:
98:03:9f:db:a0:47:fa:31:58:c2:d7:e6:65:0b:9c:cb:95:9e:
0f:ba:08:e0:06:94:61:85:82:53:77:d7:ed:f0:af:39:32:3f:
dc:ff:ff:11:bc:e9:b9:48:cb:41:11:ab:73:e7:46:f8:88:a4:
9c:b0:4e:37:af:c1:60:fd:ab:9b:25:c1:1e:2a:4a:40:ea:19:
f7:12:3a:21:39:2c:56:42:38:f2:5b:98:2b:39:ff:e3:4c:c7:
2a:43:b4:3f:93:6c:cb:30:21:be:b2:fb:87:1a:72:75:3e:ce:
fb:d1:3d:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4
QjY1NzZDNzAwHhcNMjYwMzAyMDE0NzUwWhcNMjYwMzA5MDE0NzUwWjAYMRYwFAYD
VQQDEw02OWE0ZWM0Ny02MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzAXEGTm7L/RXuQsOUck5aRIMy1FygewTMeBRZ5+Qn4vlwOfx2cJFisexLLzj
8PCeoo1q7jTB8SUGqwzXy1d1NCBKRrPYyonl2ZfdlFtttKR9XpS1HkqGE5zIppzf
Osa0cXBML3EuMz3xFZe3S6y9WD75Z2nSa0AVk/fhxW7qAT914zr8rOB56qGzbEdr
qQxjkC0pb8oXTCoFPCSMnjCBQQr/uHZKhnyWWCes9gB03IGhtCL3hDx5CsCo/+37
v1qdV2mUUT1edTFXsOLllnDGYRNNBmhrfCzJRAKk8pO5OfmRlNW4f+0RP7UZD9Lk
HrcF+s2fYXy3NhhvIypq6dQonQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2+xKCT
lA0E6h6Jm+XdiRliexBpMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1
MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK
dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHyHrm0wRzNNmkfyz6Ao75Bv1dM0KNf9VpyTbMCBmw2yelAza6cpSpT+LT/Za
7KoMNRRq7Rhs3ZJznzjLb1kYGL+9U1lxdunK+OjCW1IF24sKS5suDxeUKEknW/OE
Ob9FZyUKzTvTNJG7RTnTu8LECerPh7ahu1C79Y75ii9a4RrULqIU5fewFM2H1Ldx
TkiZmAOf26BH+jFYwtfmZQucy5WeD7oI4AaUYYWCU3fX7fCvOTI/3P//EbzpuUjL
QRGrc+dG+IiknLBON6/BYP2rmyXBHipKQOoZ9xI6ITksVkI48luYKzn/40zHKkO0
P5NsyzAhvrL7hxpydT7O+9E9iQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:09 2026 by rpki-client