
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json)
Hash identifier: fZEX7cooVMZ2l2Z53AAgnNmNo1gLZMxYIJfkKCtDa9s=
Subject key identifier: F4:80:EF:76:31:E9:2B:D7:BC:02:BD:B9:FF:CD:E8:EF:0F:F9:FD:15
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 19FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
Manifest number: 1731
Signing time: Thu 16 Apr 2026 16:47:19 +0000
Manifest this update: Thu 16 Apr 2026 16:47:18 +0000
Manifest next update: Thu 23 Apr 2026 16:47:18 +0000
Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: x1BRqlwReCtT2Uh3/2p9oZlFVkRzqrd6dfOmwG7GepI=)
2: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: QEmI8rFO3uFcQUGRkaarXEyZTTwJDnEF3MflJofq8Ho=)
3: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: S/dafMyGnoaScUVOEOAthiDLiY0z9mFaUx5kMMduICQ=)
4: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: psgGb3ANrPemsGMpfT9JCuPtdmIwAydwkIMUMCBZW4Y=)
5: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: 1HlLCwNQIyozJV4R6Hnm8QJXf/uITnPoAyb7nipvwt4=)
6: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: Q48uJdRRBErvN0MaEglf3VQ+DumuMDNeFKgsuTsot38=)
7: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: ddBHtww0w889dxAapR0tDPN4CvQLtyLCegfsQh3khs4=)
8: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: E+w+5MHO8ewDddMwvBrrEc1lgQdxewrUq+QuhkdbY4w=)
9: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: kDxO50GD5AXFe4GFX5YhHhfReI3EK8WF+6AhrrSnCTE=)
10: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: hoLS1gV18m+O3GqsO6stfQ7iSMrUj2IEPQoamxZ9gzQ=)
11: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: BxG0F/WjWpDjPTtb5RRrHO+ss4unVJo7zC1MzAvtUtk=)
12: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: IpBvgX/8iJN/8+lDdhFGN5U95vt5chfijPRQMRrbUXk=)
13: 2A309FACEC2511F093ADEAD03D6F56BC.roa (hash: J0nwYlEYUE4zSCS6vykAZTwAKoV8/9btL95KquTry64=)
14: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: nT4IqSSGqtky3oV2UAtgSCBzreFM8SwkDqRJ1RnCCsQ=)
15: 777818EE811411EABAD68C17C4F9AE02.roa (hash: yLBCrU/9RvuI/3Ay5n3EAF4Spgkoeqo4m1QHvpK9Jp0=)
16: F6F34FA2EC2611F097438BD43E6F56BC.roa (hash: d4qLINHxzHC2igs+d7HFx4FkCdNcECuX29TNhu6zNb0=)
17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: mPbx6GaGGpEZcuE74LbXOCQRX7Jy5PlwX+gtNN/XZgI=)
18: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: ICs1TEIOpnxVUHj987EsWwjf3g4Xq+0ePZB44Mwwr1U=)
19: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: OXnUP/JG3w1yEFtXRtB3EemUPot6EKdNnxfAnstSIjI=)
20: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: 9k+NHvdwPaL2Te9EGjJfwM53cdhWCBk6SgfyxFOLTzw=)
21: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: XnGwGjApnJiNJjn58kdU+fCn2kMRI3F8FSS/7+708cw=)
22: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: SntS7Vg1oFYriW3szo2h4z7g9R8/MBi6lWybX6Gw4N8=)
23: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: ycOq0IsrhA+YmUYWAhAsrdeYN4eebRnWEnTPZHVK1yQ=)
24: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: wKUa5/luq9B8kVj6p/G8xPQ0IZcLYJQWqnLpb5Jwx4c=)
25: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: qwFwplU43G/hNJT02NNQ4dEUqw5/rgD0dEX0nQo6jl4=)
26: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: kxl0Ju03xol22MdSZwz8cEZSAcwOMODv9xQLWw9mcDU=)
27: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: aHoZLC2L3b3zGtWoG3wC75zKVeJj+YJNHv+9PZJe2Ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6652 (0x19fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Apr 16 16:47:18 2026 GMT
Not After : Apr 23 16:47:18 2026 GMT
Subject: CN=69e11297-3600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:df:a3:f3:42:f1:4b:12:30:67:33:93:68:
54:19:54:36:ca:31:49:8f:ae:c2:8b:47:0a:65:b2:
5c:54:59:96:5b:e6:25:46:93:dd:a6:96:0d:a9:b8:
66:2a:40:57:c7:17:4b:4c:10:f2:1f:a6:b0:d0:83:
43:13:57:73:6d:be:37:6a:94:b0:de:16:ea:0b:cf:
2e:17:3c:07:03:5b:7b:96:bd:d3:29:63:ed:db:6b:
4e:2a:8c:ec:40:c9:8a:f6:17:93:f7:c4:1e:b7:05:
88:5e:e5:79:4a:4b:59:b8:b4:85:b9:68:19:d2:44:
88:95:58:be:d5:cc:d4:b3:08:1f:72:b8:27:db:00:
60:c0:3d:8d:60:9a:03:ff:e3:ec:10:19:59:43:3b:
f6:a8:9a:76:f6:02:e5:b1:7e:21:d6:08:62:3e:b5:
c9:ea:90:12:12:de:93:02:0b:f2:48:d7:17:c4:ed:
8e:b5:f5:a5:5e:ab:b2:bf:87:01:1c:e6:98:bb:27:
d6:ac:7f:8a:c1:9d:04:8b:8c:a7:e4:b1:a8:7f:5f:
13:7c:35:81:b3:da:1b:d9:16:13:6e:97:ed:8e:c4:
92:54:a7:44:5c:ce:d7:5e:34:26:91:c4:14:c8:1c:
69:ff:03:a4:f8:05:03:c6:6f:10:ae:cd:84:36:a0:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:EF:76:31:E9:2B:D7:BC:02:BD:B9:FF:CD:E8:EF:0F:F9:FD:15
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e8:59:6f:da:a2:66:c4:f3:3e:ad:ee:bf:2c:77:3a:02:11:
bb:4a:a3:fe:a9:60:ed:f2:88:3e:ef:0e:2f:de:75:2e:ea:86:
a5:b5:66:0b:fd:f3:c7:49:96:14:0e:6c:e9:13:08:de:90:c8:
0c:f0:d2:e4:ba:49:ff:da:a7:f0:8a:18:6a:fd:a9:d9:8c:8e:
81:86:b7:70:ce:db:87:71:4b:78:26:02:dd:51:61:23:31:f2:
6a:d5:75:4b:fe:92:24:03:45:f8:a4:79:f4:4a:f1:fe:ec:6c:
59:fc:fa:5c:e4:0c:e8:d7:0e:18:3e:94:7a:15:2a:00:d2:1a:
b9:af:a0:9d:7b:41:86:b5:84:25:bc:b8:ac:a0:93:bc:d8:b7:
9f:4d:ef:a7:58:db:1c:51:8b:f1:c2:85:8e:8b:d4:81:a1:d0:
37:fe:18:41:45:23:cd:f0:dc:e9:1e:9e:dc:68:7e:78:06:15:
d9:77:9d:5f:b3:55:67:6e:3b:de:10:ac:df:d8:b0:e5:70:d1:
e2:61:ec:b4:a3:99:68:ff:c0:de:3b:99:83:0f:e0:0a:78:fa:
47:bf:53:40:99:4e:55:94:8f:59:88:20:1f:bc:ff:a1:6f:fd:
70:05:76:63:13:ef:ed:71:7e:8a:6a:a9:ce:13:ab:bd:22:41:
8c:a5:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:35 2026 by rpki-client