
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json)
Hash identifier: lz5kuoR5V0dl46gzfuoRd19rY1MUQYbyKOUPf75EwNs=
Subject key identifier: 0A:F2:39:A4:73:03:DA:DE:86:5E:C7:FC:E2:30:64:E8:F7:A8:AA:F0
Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Certificate serial: 0303
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
Manifest number: 02E0
Signing time: Mon 09 Nov 2026 01:29:22 +0000
Manifest this update: Mon 09 Nov 2026 01:29:21 +0000
Manifest next update: Mon 16 Nov 2026 01:29:21 +0000
Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: CWOKgHlBAGhVB+mVOeqAbdnxLOsFOQ+fipA0DCpsKq4=)
2: txYL9xLYE4OkgXQPNwl-B6l9eWY.asa (hash: FFm2kLw7F5ymtTgOsRPktZl6Qc75MMZebJHsWprqRlk=)
3: XfBFQ21cfrf3rmkmaZDWj7smFsg.asa (hash: IBxJXK8Fheg/ZyRnflH84N3NEJrP9+H4dacMnY+xLl0=)
4: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hpocYvDPf9bP8lk8bw2eWDBV0MmWUMrFYAIPH3SFhGE=)
5: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: jEiZeVVR7YqvSOsTkuwgvg/YfncERr5FCAvit7Yi2lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 01:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771 (0x303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Validity
Not Before: Nov 9 01:29:21 2026 GMT
Not After : Nov 16 01:29:21 2026 GMT
Subject: CN=6af121f2-c94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:27:e0:e6:5e:6e:9d:78:59:5a:ff:c2:92:
74:c7:2b:9d:f2:95:3e:84:3d:9f:b4:6b:fb:66:f7:
ee:f0:ce:33:27:28:e7:bf:16:7c:35:5d:a6:88:00:
7a:cb:3e:af:87:56:cc:2c:2f:17:12:ed:b8:a4:d6:
7f:e9:f4:9d:aa:aa:5a:9c:df:88:06:28:54:7e:f4:
60:33:a7:77:13:30:7e:0e:c3:c0:aa:7b:b9:33:86:
b2:4c:a1:ba:ad:cc:04:e5:c7:ff:8a:7e:43:7b:59:
72:7a:1c:c3:4e:1f:29:c5:ea:bf:76:a4:0f:fa:b1:
d8:7e:30:25:d7:ad:d5:72:fd:0b:66:54:9c:54:b5:
34:cd:98:99:ef:62:0c:cf:d5:14:f9:4f:30:3f:c2:
9d:09:1e:0b:27:d2:ab:c2:d9:9a:16:8f:42:ef:b6:
1c:19:f0:04:3e:d7:ad:8c:13:e8:d3:30:4b:4d:72:
81:11:b5:6a:16:8c:8f:92:d9:5e:18:19:1c:4a:e8:
9b:bd:c4:41:83:f4:08:fb:8c:0c:ec:42:ce:45:2c:
c3:f5:20:d5:20:35:aa:34:cb:c6:9a:88:51:fd:3a:
85:51:27:57:ba:07:11:36:53:2c:4f:6d:07:88:e4:
d9:5f:48:c1:3b:89:34:05:4b:38:ac:3f:fc:72:88:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F2:39:A4:73:03:DA:DE:86:5E:C7:FC:E2:30:64:E8:F7:A8:AA:F0
X509v3 Authority Key Identifier:
keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:cd:6c:4d:6d:9f:df:20:71:aa:cf:45:8d:ea:fd:2a:43:b0:
c2:5b:1f:56:f6:74:9a:bb:d7:0e:b2:76:c4:ac:b3:86:9d:ad:
a3:28:15:2d:34:9d:31:11:aa:ee:ab:3e:c3:88:0d:7f:66:0c:
9a:78:82:2c:b1:e5:1f:7d:35:dd:ea:e4:f0:ce:aa:be:88:1d:
e9:8e:7a:a4:8a:c2:61:4a:fe:66:aa:ae:57:da:fb:82:10:a9:
ac:24:6f:02:e6:4c:3a:e1:25:4b:f2:14:96:46:2a:d9:46:62:
2d:12:a8:d8:14:bb:cb:8b:46:ec:da:8b:6f:99:f3:5f:41:0e:
38:ce:1a:3e:a1:09:f6:a1:03:7d:f5:a6:e7:e5:8e:1b:e8:fe:
57:7d:c1:86:40:83:97:af:41:c9:6d:46:a1:d0:15:fd:5d:25:
aa:13:6c:23:dd:cd:9c:29:10:5b:e2:dd:7d:ed:d8:51:af:27:
42:0d:de:81:4a:69:3f:db:0f:ee:79:04:38:ad:5c:7c:ab:8e:
0e:57:e3:61:2d:af:85:36:8d:44:3e:01:97:d5:7a:00:85:c8:
9a:af:50:56:d8:7e:d7:0b:13:20:9e:5d:e8:9a:c9:9c:92:f8:
77:23:cc:f1:f8:a1:d4:c6:8d:94:24:2e:62:bb:70:c0:52:86:
0f:0c:b2:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD
Q0U4NTYxMUMwHhcNMjYxMTA5MDEyOTIxWhcNMjYxMTE2MDEyOTIxWjAYMRYwFAYD
VQQDEw02YWYxMjFmMi1jOTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArvkn4OZebp14WVr/wpJ0xyud8pU+hD2ftGv7Zvfu8M4zJyjnvxZ8NV2miAB6
yz6vh1bMLC8XEu24pNZ/6fSdqqpanN+IBihUfvRgM6d3EzB+DsPAqnu5M4ayTKG6
rcwE5cf/in5De1lyehzDTh8pxeq/dqQP+rHYfjAl163Vcv0LZlScVLU0zZiZ72IM
z9UU+U8wP8KdCR4LJ9KrwtmaFo9C77YcGfAEPtetjBPo0zBLTXKBEbVqFoyPktle
GBkcSuibvcRBg/QI+4wM7ELORSzD9SDVIDWqNMvGmohR/TqFUSdXugcRNlMsT20H
iOTZX0jBO4k0BUs4rD/8cohl/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAryOaRz
A9rehl7H/OIwZOj3qKrwMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz
QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ
UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3
U3N0cUJLRlBDamJNNkZZUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJc1sTW2f3yBxqs9Fjer9KkOwwlsfVvZ0mrvXDrJ2xKyzhp2toygVLTSdMRGq
7qs+w4gNf2YMmniCLLHlH3013erk8M6qvogd6Y56pIrCYUr+ZqquV9r7ghCprCRv
AuZMOuElS/IUlkYq2UZiLRKo2BS7y4tG7NqLb5nzX0EOOM4aPqEJ9qEDffWm5+WO
G+j+V33BhkCDl69ByW1GodAV/V0lqhNsI93NnCkQW+Ldfe3YUa8nQg3egUppP9sP
7nkEOK1cfKuODlfjYS2vhTaNRD4Bl9V6AIXImq9QVth+1wsTIJ5d6JrJnJL4dyPM
8fih1MaNlCQuYrtwwFKGDwyyZw==
-----END CERTIFICATE-----
Generated at Mon Nov 9 11:40:04 2026 by rpki-client