
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json)
Hash identifier: VdQXvUEGSw7xqqwF53lqp624eSCNTqFCqE3PNALYvEU=
Subject key identifier: BC:01:A6:3F:19:A1:DA:FF:11:54:3F:64:93:15:44:DF:7D:4C:30:44
Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF
Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
Manifest number: 0219
Signing time: Mon 02 Mar 2026 01:22:17 +0000
Manifest this update: Mon 02 Mar 2026 01:22:14 +0000
Manifest next update: Mon 09 Mar 2026 01:22:14 +0000
Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: ybxLiuQgmUMcfBN+Ph54u6RbVvoT+dtLFrFoAvGNTDo=)
2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: l3+rbubcPMHtKSMQDJv+EJ3SUoMsXD+EmSrxxE3voR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl
rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF
Validity
Not Before: Mar 2 01:22:14 2026 GMT
Not After : Mar 9 01:22:14 2026 GMT
Subject: CN=69a4e648-5dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:d1:21:b2:94:dc:f8:75:69:42:56:ab:43:
00:05:4d:d4:96:1a:a3:78:a0:21:a0:3c:cb:2a:45:
4f:39:56:ba:e6:50:9d:c7:9f:68:94:13:66:07:0f:
f7:45:6e:d0:8a:e3:96:68:39:6c:e7:a6:9a:79:c9:
e6:e1:6b:6c:a3:0e:ab:ac:37:1b:39:7b:b9:4e:ce:
60:4f:da:83:32:84:68:76:50:52:ae:21:51:76:31:
4e:8c:28:12:7b:41:ee:a1:4d:61:02:2f:ff:05:e4:
2e:cd:7c:67:c1:60:41:fb:cd:45:6a:f7:c9:e9:64:
ac:92:1d:ea:a3:56:a6:20:4d:8d:b7:f0:e7:58:05:
dc:f4:93:25:bb:33:e7:60:f4:1d:9b:4b:79:43:a0:
26:50:a5:59:40:75:0e:e3:3e:de:0a:5f:ff:6c:ff:
96:48:a0:10:ef:45:e7:12:b6:57:43:b0:ef:ab:93:
ca:26:bf:49:df:7b:8f:82:dd:6f:89:5f:c4:48:78:
b4:c5:a3:f4:64:48:70:bf:fd:6f:d1:43:6a:d8:ab:
89:a0:3c:e9:dc:5b:64:27:f7:a6:8c:8e:07:00:43:
e0:15:96:61:dd:43:b5:67:78:cd:0f:d8:08:60:08:
07:e8:30:5f:15:05:cc:00:ee:c4:dc:eb:e3:53:e2:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:01:A6:3F:19:A1:DA:FF:11:54:3F:64:93:15:44:DF:7D:4C:30:44
X509v3 Authority Key Identifier:
keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:31:76:a2:c8:9a:63:60:c4:42:c4:ce:ce:b6:e1:b5:65:41:
10:91:54:97:ee:c5:c8:bd:89:cd:5c:ab:2e:4e:3e:22:99:3c:
ed:60:b2:b4:5f:3c:ab:42:73:59:38:0b:f2:31:8c:29:92:57:
e4:ef:bb:7f:10:7d:9b:18:99:bf:3d:1d:9a:c1:d3:3e:c0:d9:
b1:94:da:5d:c1:ec:41:9f:9d:13:a9:b7:36:1b:14:ba:c7:a6:
32:b3:59:0f:32:14:d2:9c:25:55:1d:8f:df:47:4c:0f:d0:80:
cf:2b:68:89:dd:d8:ad:04:b6:f9:a7:98:c9:4b:1d:57:c4:4b:
69:55:84:01:99:7e:55:ef:18:43:9b:12:02:9f:47:18:c1:c1:
ed:14:ae:34:5b:89:11:27:32:36:05:91:d4:41:71:b6:27:62:
43:aa:51:21:f6:3a:57:62:a6:b9:c3:c7:34:da:91:63:de:44:
cd:1b:98:55:d2:9d:5a:02:e1:7b:2a:e2:f8:c7:69:2c:57:d0:
d4:98:8e:b0:92:4a:74:94:48:6e:f3:59:76:17:08:e7:f8:2a:
de:fc:cc:e8:0a:f8:4b:95:ea:ac:c1:99:cd:c2:05:ba:b6:1c:
51:6e:78:3c:21:77:1b:a4:7b:a0:63:4d:a3:26:0c:22:70:ff:
64:cd:6c:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM3RDExMTAvBgNVBAUTKEM1QkQ4QTUwQ0FENUEwNUVGRTU3N0M0OUM0NzE0RTVE
OUFCQjdGRUYwHhcNMjYwMzAyMDEyMjE0WhcNMjYwMzA5MDEyMjE0WjAYMRYwFAYD
VQQDEw02OWE0ZTY0OC01ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4vRIbKU3Ph1aUJWq0MABU3UlhqjeKAhoDzLKkVPOVa65lCdx59olBNmBw/3
RW7QiuOWaDls56aaecnm4Wtsow6rrDcbOXu5Ts5gT9qDMoRodlBSriFRdjFOjCgS
e0HuoU1hAi//BeQuzXxnwWBB+81FavfJ6WSskh3qo1amIE2Nt/DnWAXc9JMluzPn
YPQdm0t5Q6AmUKVZQHUO4z7eCl//bP+WSKAQ70XnErZXQ7Dvq5PKJr9J33uPgt1v
iV/ESHi0xaP0ZEhwv/1v0UNq2KuJoDzp3FtkJ/emjI4HAEPgFZZh3UO1Z3jND9gI
YAgH6DBfFQXMAO7E3OvjU+LJIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwBpj8Z
odr/EVQ/ZJMVRN99TDBEMB8GA1UdIwQYMBaAFMW9ilDK1aBe/ld8ScRxTl2au3/v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzdEMS8wNUE5OEYwRUUz
QjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9GNy1WM3hKeEhGT1hacTdm
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hiMktVTXJWb0Y3LVYzeEp4SEZPWFpxN2YtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzdEMS8wNUE5OEYwRUUzQjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9G
Ny1WM3hKeEhGT1hacTdmLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWDF2osiaY2DEQsTOzrbhtWVBEJFUl+7FyL2JzVyrLk4+Ipk87WCytF88q0Jz
WTgL8jGMKZJX5O+7fxB9mxiZvz0dmsHTPsDZsZTaXcHsQZ+dE6m3NhsUusemMrNZ
DzIU0pwlVR2P30dMD9CAzytoid3YrQS2+aeYyUsdV8RLaVWEAZl+Ve8YQ5sSAp9H
GMHB7RSuNFuJEScyNgWR1EFxtidiQ6pRIfY6V2KmucPHNNqRY95EzRuYVdKdWgLh
eyri+MdpLFfQ1JiOsJJKdJRIbvNZdhcI5/gq3vzM6Ar4S5XqrMGZzcIFurYcUW54
PCF3G6R7oGNNoyYMInD/ZM1sVg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:27 2026 by rpki-client