
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json)
Hash identifier: RlABujaRakKEDlu26ikdpZ8a5Gkysrg6OB2B8yu7XG4=
Subject key identifier: 59:14:DF:B3:2B:DD:B9:67:95:B7:D7:83:B1:1C:D9:C0:FC:B1:FA:41
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial: 04CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
Manifest number: 04B8
Signing time: Fri 12 Jun 2026 23:56:30 +0000
Manifest this update: Fri 12 Jun 2026 23:56:29 +0000
Manifest next update: Fri 19 Jun 2026 23:56:29 +0000
Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: f2AqdwmcyMWKkQuYETBMcXB3MvrTp767YE29NxQTPV4=)
2: 176210F23FF611F182DAE6C398833773.roa (hash: w9aUmyYLLIpCKQS6vxeVDWsnqw2NjIzSp/vkd/WGYr8=)
3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: KU0ufVeci0w9ovxEyLq7SERtD22aftIPEj3L8PrHlJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Validity
Not Before: Jun 12 23:56:29 2026 GMT
Not After : Jun 19 23:56:29 2026 GMT
Subject: CN=6a2c9cae-7961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:44:50:ad:45:75:b5:ee:08:dd:e9:ce:47:
11:19:7b:a1:1e:24:1f:fa:e1:85:2c:cf:73:40:1c:
b0:c1:7f:2e:34:de:ae:bf:c5:f8:a3:e2:85:b0:f6:
a7:53:0b:db:17:86:d0:c6:58:06:56:82:c9:0d:9d:
73:5f:67:ca:35:3e:40:ea:38:d5:a2:34:25:f4:2a:
78:ac:f7:c9:d2:c5:f3:48:ae:fe:de:37:99:45:ca:
e7:d9:58:13:3b:bd:f4:3f:d8:91:3b:0a:a4:49:f9:
83:8d:96:a0:53:2e:4c:18:7d:bf:8b:a7:17:b0:65:
5b:98:13:b0:31:ad:c6:b4:1f:4e:01:58:93:4f:62:
c9:f9:b3:76:e8:88:c8:ab:cb:a7:3c:fc:a5:67:04:
b3:73:ef:66:28:1d:6c:9b:ff:b4:6f:14:c6:09:d7:
0b:ca:06:e7:ad:aa:c6:71:e6:8c:7c:0b:75:65:f4:
b3:5a:62:42:39:c9:e0:12:6a:6b:18:7d:3a:fe:e9:
1d:12:79:16:f5:83:fb:44:db:82:ec:3c:4f:4d:08:
6c:9b:0b:9e:7c:55:8b:53:b0:35:1f:b2:e3:89:85:
45:37:08:07:77:b4:a4:fe:24:b8:94:d8:a0:78:4a:
e8:48:5e:54:91:d1:0a:ce:b8:5e:95:ff:d0:e5:18:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:14:DF:B3:2B:DD:B9:67:95:B7:D7:83:B1:1C:D9:C0:FC:B1:FA:41
X509v3 Authority Key Identifier:
keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:74:f9:dc:fa:86:51:5f:f0:c5:09:08:ac:c5:43:6d:14:7d:
e3:36:22:be:a7:d5:cf:89:40:1d:78:7e:ee:a0:77:10:0b:d1:
94:53:09:63:b4:df:12:5d:af:78:60:56:b2:b8:78:5d:db:c2:
93:62:7b:51:1a:15:17:a1:71:45:8a:4d:3c:7a:df:4b:34:13:
29:54:89:ac:ba:c4:5a:f7:09:46:c8:d6:2b:6c:a3:6e:b9:6a:
ab:c9:67:86:4e:56:21:9d:56:82:13:06:dd:99:bd:c4:4a:ac:
4c:17:52:43:7b:8f:0f:f3:9b:3c:35:37:20:37:b2:a8:2d:6c:
00:f8:7a:55:2b:9a:db:83:e9:76:dd:24:aa:63:12:3f:0a:41:
80:62:78:d7:bb:0a:b7:6f:43:0d:26:e4:b5:1c:4a:bd:36:3d:
07:7d:57:63:b4:ca:32:5c:2a:c3:29:31:8b:2a:51:56:a3:f4:
66:e8:78:d8:75:a5:eb:50:c9:b1:5a:1c:0e:0e:71:5d:b0:fd:
65:50:1a:b6:6c:1f:e8:05:49:e4:8b:64:aa:e2:a4:cd:55:84:
85:17:50:12:6b:38:9a:68:0a:63:3f:3d:9c:31:d4:c4:c5:f1:
be:4a:ac:f3:e9:b6:c0:53:16:e2:16:d3:85:04:23:d3:30:f1:
80:52:aa:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz
MUM1QUZEQTEwHhcNMjYwNjEyMjM1NjI5WhcNMjYwNjE5MjM1NjI5WjAYMRYwFAYD
VQQDEw02YTJjOWNhZS03OTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwo5EUK1FdbXuCN3pzkcRGXuhHiQf+uGFLM9zQBywwX8uNN6uv8X4o+KFsPan
UwvbF4bQxlgGVoLJDZ1zX2fKNT5A6jjVojQl9Cp4rPfJ0sXzSK7+3jeZRcrn2VgT
O730P9iROwqkSfmDjZagUy5MGH2/i6cXsGVbmBOwMa3GtB9OAViTT2LJ+bN26IjI
q8unPPylZwSzc+9mKB1sm/+0bxTGCdcLygbnrarGceaMfAt1ZfSzWmJCOcngEmpr
GH06/ukdEnkW9YP7RNuC7DxPTQhsmwuefFWLU7A1H7LjiYVFNwgHd7Sk/iS4lNig
eEroSF5UkdEKzrhelf/Q5RhyHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkU37Mr
3blnlbfXg7Ec2cD8sfpBMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE
RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91
RkpqTnhkU1JWcGd4eGFfYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjXT53PqGUV/wxQkIrMVDbRR94zYivqfVz4lAHXh+7qB3EAvRlFMJY7TfEl2v
eGBWsrh4XdvCk2J7URoVF6FxRYpNPHrfSzQTKVSJrLrEWvcJRsjWK2yjbrlqq8ln
hk5WIZ1WghMG3Zm9xEqsTBdSQ3uPD/ObPDU3IDeyqC1sAPh6VSua24Ppdt0kqmMS
PwpBgGJ417sKt29DDSbktRxKvTY9B31XY7TKMlwqwykxiypRVqP0Zuh42HWl61DJ
sVocDg5xXbD9ZVAatmwf6AVJ5ItkquKkzVWEhRdQEms4mmgKYz89nDHUxMXxvkqs
8+m2wFMW4hbThQQj0zDxgFKqGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:19 2026 by rpki-client