
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json)
Hash identifier: tS568NMPneukjr4TpSljSPT593gcZtSUbcWAGG53Ekc=
Subject key identifier: 8B:71:E6:61:E5:53:10:1B:25:4F:4C:98:8E:99:AE:12:64:BE:58:E0
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
Manifest number: 04CF
Signing time: Wed 29 Jul 2026 00:31:16 +0000
Manifest this update: Wed 29 Jul 2026 00:31:15 +0000
Manifest next update: Wed 05 Aug 2026 00:31:15 +0000
Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: N4rNAqTObl4ktnmPa9C7YKZDb3wsNMDODwhImMFCOv0=)
2: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: KU0ufVeci0w9ovxEyLq7SERtD22aftIPEj3L8PrHlJE=)
3: 176210F23FF611F182DAE6C398833773.roa (hash: w9aUmyYLLIpCKQS6vxeVDWsnqw2NjIzSp/vkd/WGYr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Validity
Not Before: Jul 29 00:31:15 2026 GMT
Not After : Aug 5 00:31:15 2026 GMT
Subject: CN=6a6949d4-84c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:ea:13:d6:51:ed:d1:c1:02:c2:c2:74:e6:
f8:1c:f3:98:a8:4f:d9:b8:e7:d9:72:2a:ea:85:05:
61:08:1a:95:ee:3d:f9:bb:93:6e:c6:3b:ea:16:ca:
2f:67:99:84:f9:52:25:47:72:b9:a4:54:67:bd:b8:
b6:1f:e8:19:3e:8a:e9:70:13:b6:88:39:cb:d7:c7:
10:06:9a:fa:94:7a:44:74:36:e5:07:f6:05:ed:18:
fd:b5:34:71:a3:70:91:80:3f:d9:bc:58:cf:1d:cf:
23:31:f2:18:61:4c:0e:28:0a:cd:0f:1d:8f:ec:f8:
d5:18:28:d3:a9:83:5a:61:fa:70:ee:a9:82:17:e7:
c8:17:97:e6:74:b7:23:de:86:cd:ba:20:9c:22:40:
fd:29:60:ce:92:6c:95:0c:61:b8:fa:09:a9:d3:46:
5d:66:61:4e:b4:17:20:d4:ae:32:ea:1c:ef:ec:d1:
57:14:fe:eb:26:0b:01:5c:e3:cb:86:78:fa:fc:de:
2f:61:47:95:80:28:db:e6:d3:46:a3:6b:5f:b2:89:
c8:79:16:21:07:fb:36:d9:30:77:ca:96:39:86:8d:
01:cd:17:40:79:d0:ba:b6:3d:e1:fb:8a:e0:8a:be:
dd:82:4a:28:7d:7c:df:05:35:b9:2c:36:58:cc:4e:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:71:E6:61:E5:53:10:1B:25:4F:4C:98:8E:99:AE:12:64:BE:58:E0
X509v3 Authority Key Identifier:
keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a6:c7:8e:1a:00:e9:9c:65:1b:66:63:b0:de:f5:db:db:b3:
de:57:6c:ee:71:08:29:e2:6a:48:75:cb:b4:d5:e1:7c:34:b8:
d5:c0:6b:c0:0c:cb:ad:db:56:2d:c9:ec:e0:1a:33:6b:5b:a3:
50:e3:81:50:5c:fe:41:3a:22:8f:bc:52:fd:3e:ce:93:e7:77:
f9:26:4d:98:91:1b:7e:a4:76:18:f5:07:26:4c:fc:6b:07:8c:
69:07:dc:47:24:eb:45:3b:19:de:eb:08:c5:a4:25:cc:9f:07:
ce:5e:31:dc:d9:2a:0e:9d:4a:c3:e9:1f:b2:9d:4d:52:f5:7b:
a3:3e:4c:56:c8:ab:bb:e8:1f:b4:51:09:29:c0:62:b2:52:a7:
2e:0d:0f:da:e2:bf:53:15:2b:17:8a:0f:a0:8e:99:ff:58:59:
de:63:47:ed:1f:1b:e3:df:b2:2e:61:e8:75:c4:09:b5:4d:81:
51:8b:d0:37:94:d7:be:81:46:25:5e:94:a2:5c:85:7e:04:87:
27:f8:89:3b:77:4b:94:dc:4e:de:d5:5a:7b:00:19:bf:42:7e:
f2:e8:b6:c1:d1:fb:df:5d:22:3a:c5:bd:7d:d6:71:76:7c:3d:
33:55:eb:82:f6:53:c0:84:22:19:fd:79:b8:27:ea:2b:f3:4a:
f6:6c:e2:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz
MUM1QUZEQTEwHhcNMjYwNzI5MDAzMTE1WhcNMjYwODA1MDAzMTE1WjAYMRYwFAYD
VQQDEw02YTY5NDlkNC04NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6TqE9ZR7dHBAsLCdOb4HPOYqE/ZuOfZcirqhQVhCBqV7j35u5NuxjvqFsov
Z5mE+VIlR3K5pFRnvbi2H+gZPorpcBO2iDnL18cQBpr6lHpEdDblB/YF7Rj9tTRx
o3CRgD/ZvFjPHc8jMfIYYUwOKArNDx2P7PjVGCjTqYNaYfpw7qmCF+fIF5fmdLcj
3obNuiCcIkD9KWDOkmyVDGG4+gmp00ZdZmFOtBcg1K4y6hzv7NFXFP7rJgsBXOPL
hnj6/N4vYUeVgCjb5tNGo2tfsonIeRYhB/s22TB3ypY5ho0BzRdAedC6tj3h+4rg
ir7dgkoofXzfBTW5LDZYzE56KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItx5mHl
UxAbJU9MmI6ZrhJkvljgMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE
RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91
RkpqTnhkU1JWcGd4eGFfYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfqbHjhoA6ZxlG2ZjsN7129uz3lds7nEIKeJqSHXLtNXhfDS41cBrwAzLrdtW
Lcns4Boza1ujUOOBUFz+QToij7xS/T7Ok+d3+SZNmJEbfqR2GPUHJkz8aweMaQfc
RyTrRTsZ3usIxaQlzJ8Hzl4x3NkqDp1Kw+kfsp1NUvV7oz5MVsiru+gftFEJKcBi
slKnLg0P2uK/UxUrF4oPoI6Z/1hZ3mNH7R8b49+yLmHodcQJtU2BUYvQN5TXvoFG
JV6UolyFfgSHJ/iJO3dLlNxO3tVaewAZv0J+8ui2wdH7310iOsW9fdZxdnw9M1Xr
gvZTwIQiGf15uCfqK/NK9mzi4g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:51 2026 by rpki-client