
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier: PJolMFV0qx/+qv5aXHiNjY88yf5JXL8ElCc6CMiltr0=
Subject key identifier: 20:92:BF:E3:B5:ED:01:59:3B:CE:55:33:D6:42:F0:87:BA:41:71:EE
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial: 2639
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number: 261F
Signing time: Sat 28 Feb 2026 15:44:12 +0000
Manifest this update: Sat 28 Feb 2026 15:44:11 +0000
Manifest next update: Sat 07 Mar 2026 15:44:11 +0000
Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: IbAeXeuxxvde6NyWglSNwZcZxM2YXwBrydQ8ofBrN0k=)
2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: 41BdfwHnGG7Imzeq7lbaqU4+u/YDHu3w/vuTNhAYy2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9785 (0x2639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Validity
Not Before: Feb 28 15:44:11 2026 GMT
Not After : Mar 7 15:44:11 2026 GMT
Subject: CN=69a30d4c-037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:59:5e:a1:73:e0:ee:ca:8c:6f:8f:81:92:
3b:ef:6c:a3:0a:de:c0:30:30:f7:48:75:fc:8c:ea:
5a:93:08:64:88:3f:73:27:32:ae:2c:ac:e7:70:1e:
6d:66:29:55:e6:ed:cb:23:7f:5b:af:39:df:83:0d:
65:e8:93:00:ce:40:fc:df:9d:d1:13:16:62:29:5e:
12:54:85:f1:c8:a1:8a:49:48:cf:a0:64:4e:79:62:
12:b4:3e:cb:d4:6d:83:02:cb:75:79:d3:2d:26:34:
d9:39:c4:63:e6:36:8f:30:46:a7:a2:7e:4f:5d:19:
5d:03:9b:21:85:c6:73:67:cd:09:f9:56:28:c0:9b:
f6:d3:e1:7b:bf:92:96:53:79:a6:7a:10:38:27:a9:
fc:28:47:9d:36:6e:d2:61:13:02:10:de:e2:61:27:
1d:49:cf:7b:41:b1:08:90:02:8d:49:3a:d8:c7:91:
7a:a8:bd:cf:ca:cf:8b:cc:f3:21:5f:ff:47:c6:75:
e6:db:d2:ef:66:a5:f7:30:db:38:01:67:16:dc:9f:
49:e0:5d:1a:f7:3b:7d:40:d1:fd:65:e0:3c:6c:c9:
d9:a7:30:85:33:42:7c:ae:cf:65:b9:47:59:c9:09:
02:00:6c:a2:65:e3:b7:b3:f9:5e:89:98:f4:f4:6d:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:BF:E3:B5:ED:01:59:3B:CE:55:33:D6:42:F0:87:BA:41:71:EE
X509v3 Authority Key Identifier:
keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:5f:ac:87:be:99:77:6f:ee:51:b4:49:be:4b:ca:c6:80:0f:
a4:14:1b:b4:07:8a:64:93:81:c2:8c:bd:5a:6d:30:86:93:28:
be:61:59:6f:5b:4b:fe:35:c1:94:aa:5e:10:75:0f:13:bb:19:
a4:13:2e:3b:4f:e5:30:b2:30:3a:ee:be:28:aa:6e:4c:7d:30:
76:2f:6c:aa:36:cb:78:22:3e:91:ec:e5:56:34:4c:31:36:05:
14:a9:b3:3d:47:44:36:0e:99:6c:44:f9:6a:dc:70:ab:d1:3e:
97:1e:64:b8:1e:46:8a:ba:82:42:89:af:cf:8c:45:8e:44:fc:
e1:11:7a:01:5d:7d:27:3f:b4:61:bb:9a:c1:23:39:02:1b:c6:
3e:71:b7:66:ce:74:06:e5:5e:d8:92:60:74:f5:cb:4d:ca:f3:
64:61:2a:d9:ad:77:55:e4:52:a0:6a:28:5c:0d:18:90:3b:08:
5b:25:99:5f:b5:2c:09:ba:1d:ab:f2:0b:0d:fc:23:c2:12:68:
0b:14:8c:58:9c:50:85:f8:ab:fe:31:39:18:0e:70:76:af:12:
e7:b4:74:e6:6e:ab:39:e9:bf:d2:0e:d7:70:96:a2:3c:ab:b9:
93:10:e9:65:01:86:3e:24:fb:cb:cc:b2:5d:08:6e:d4:6a:58:
78:5c:75:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE
QzZGRjNFNjIwHhcNMjYwMjI4MTU0NDExWhcNMjYwMzA3MTU0NDExWjAYMRYwFAYD
VQQDDA02OWEzMGQ0Yy0wMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsKJZXqFz4O7KjG+PgZI772yjCt7AMDD3SHX8jOpakwhkiD9zJzKuLKzncB5t
ZilV5u3LI39brznfgw1l6JMAzkD8353RExZiKV4SVIXxyKGKSUjPoGROeWIStD7L
1G2DAst1edMtJjTZOcRj5jaPMEanon5PXRldA5shhcZzZ80J+VYowJv20+F7v5KW
U3mmehA4J6n8KEedNm7SYRMCEN7iYScdSc97QbEIkAKNSTrYx5F6qL3Pys+LzPMh
X/9HxnXm29LvZqX3MNs4AWcW3J9J4F0a9zt9QNH9ZeA8bMnZpzCFM0J8rs9luUdZ
yQkCAGyiZeO3s/leiZj09G0WRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCSv+O1
7QFZO85VM9ZC8Ie6QXHuMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz
MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly
Mklia0M5cVNmMVhjYl9QbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiV+sh76Zd2/uUbRJvkvKxoAPpBQbtAeKZJOBwoy9Wm0whpMovmFZb1tL/jXB
lKpeEHUPE7sZpBMuO0/lMLIwOu6+KKpuTH0wdi9sqjbLeCI+kezlVjRMMTYFFKmz
PUdENg6ZbET5atxwq9E+lx5kuB5GirqCQomvz4xFjkT84RF6AV19Jz+0YbuawSM5
AhvGPnG3Zs50BuVe2JJgdPXLTcrzZGEq2a13VeRSoGooXA0YkDsIWyWZX7UsCbod
q/ILDfwjwhJoCxSMWJxQhfir/jE5GA5wdq8S57R05m6rOem/0g7XcJaiPKu5kxDp
ZQGGPiT7y8yyXQhu1GpYeFx1fg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:04 2026 by rpki-client