
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json)
Hash identifier: hMktXqyClVdPBXzkcAbG2R41mJrK5ckAZwfq3s0FovQ=
Subject key identifier: FC:F0:B5:8F:3D:1D:24:06:4E:D6:D2:19:DE:06:50:F8:36:BF:D2:A5
Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B
Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B
Certificate serial: 3538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
Manifest number: 3538
Signing time: Tue 12 May 2026 15:08:30 +0000
Manifest this update: Tue 12 May 2026 15:08:29 +0000
Manifest next update: Tue 19 May 2026 15:08:29 +0000
Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: D2EwaFasvkxsnP3NzFYhBtk+pBn0dr8u/34Uf176xlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl
rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13624 (0x3538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B
Validity
Not Before: May 12 15:08:29 2026 GMT
Not After : May 19 15:08:29 2026 GMT
Subject: CN=6a03426e-4741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:4d:2b:6f:53:57:d7:64:de:f9:40:3d:b5:
92:da:d1:8c:d5:11:61:35:8e:5b:27:00:59:0e:85:
d8:d0:56:72:63:af:a5:67:fc:b8:be:2d:53:73:e2:
57:aa:ae:8c:dd:05:6b:ca:28:4c:6d:79:c9:87:30:
9e:94:05:6e:3c:2c:e1:68:c1:a7:dc:05:3c:f2:f8:
0a:80:8e:35:c8:da:4d:7c:44:f3:c8:f0:28:6f:cd:
6d:30:48:53:4c:bd:ee:6b:e5:05:ae:10:b7:85:d4:
3d:45:40:d2:18:31:a8:0a:18:f9:6e:68:21:53:8b:
85:8a:02:17:c6:b6:a9:63:38:fb:9a:f6:3e:ae:c8:
be:97:d2:58:3d:39:fb:8b:6a:a4:dc:dc:c4:e2:4b:
09:49:43:fd:d3:76:ef:8e:ef:d8:d2:68:d2:da:82:
ea:1c:06:25:04:cf:d5:75:0f:24:a2:96:1d:f9:1a:
2f:45:af:86:0b:7e:ee:f7:46:ed:7e:a1:a3:7e:fa:
0f:cc:e1:d4:9d:57:59:0c:40:0a:a7:71:c8:93:b3:
1c:fe:5b:95:20:43:8e:d2:a4:7e:74:c1:d7:e6:3c:
c1:8a:f9:4d:85:cc:be:24:23:ff:93:3e:29:e7:9b:
fc:98:15:4e:c1:55:e2:24:44:3e:c5:6d:6b:5c:d9:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F0:B5:8F:3D:1D:24:06:4E:D6:D2:19:DE:06:50:F8:36:BF:D2:A5
X509v3 Authority Key Identifier:
keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:10:db:d4:8e:8d:f5:34:5c:2e:b0:0f:69:2b:54:b0:65:d5:
bd:67:48:4a:20:4d:12:2a:6a:d5:ff:56:ae:64:cb:57:4b:79:
67:52:e7:e7:c2:29:c6:b9:ad:30:aa:38:b7:a9:0b:b6:77:7a:
3c:ac:e6:5f:31:34:17:c7:fb:91:6b:e4:9e:ca:2c:04:a4:b3:
eb:35:d7:d3:77:15:67:5a:aa:a5:a5:90:a9:44:db:e9:c8:f7:
b2:fb:22:15:4c:ec:1e:34:b4:9a:2c:9b:21:35:cf:0c:2a:08:
1a:86:2b:06:56:ff:c5:98:82:f0:42:f3:19:fd:a3:60:8e:9e:
c3:e9:a8:4a:31:b6:83:e0:10:8a:0e:33:08:e1:47:51:e9:7b:
cb:9c:2d:38:e0:70:0b:a5:46:42:20:42:1e:18:a2:2e:a7:cc:
df:b4:72:c8:b6:ee:90:4d:b2:42:ff:be:f2:c0:b5:1c:c9:ea:
62:9e:a4:49:e1:27:36:2d:15:b8:8a:0b:f3:e6:df:6a:9e:d7:
8a:af:ca:f6:37:76:0c:fa:30:c4:9f:73:72:cb:9d:89:9d:48:
0c:68:06:0e:aa:7a:b1:1c:5a:ce:18:aa:1b:6f:c2:fc:9f:98:
4e:ae:3e:79:3f:35:3e:e7:28:26:76:bb:7a:4e:f2:17:90:a9:
a4:8f:3f:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0
MzQ1NTM3M0IwHhcNMjYwNTEyMTUwODI5WhcNMjYwNTE5MTUwODI5WjAYMRYwFAYD
VQQDEw02YTAzNDI2ZS00NzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm3BNK29TV9dk3vlAPbWS2tGM1RFhNY5bJwBZDoXY0FZyY6+lZ/y4vi1Tc+JX
qq6M3QVryihMbXnJhzCelAVuPCzhaMGn3AU88vgKgI41yNpNfETzyPAob81tMEhT
TL3ua+UFrhC3hdQ9RUDSGDGoChj5bmghU4uFigIXxrapYzj7mvY+rsi+l9JYPTn7
i2qk3NzE4ksJSUP903bvju/Y0mjS2oLqHAYlBM/VdQ8kopYd+RovRa+GC37u90bt
fqGjfvoPzOHUnVdZDEAKp3HIk7Mc/luVIEOO0qR+dMHX5jzBivlNhcy+JCP/kz4p
55v8mBVOwVXiJEQ+xW1rXNnPWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzwtY89
HSQGTtbSGd4GUPg2v9KlMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE
QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu
S0VmRzFYNTZpalZEUlZOenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJxDb1I6N9TRcLrAPaStUsGXVvWdISiBNEipq1f9WrmTLV0t5Z1Ln58Ipxrmt
MKo4t6kLtnd6PKzmXzE0F8f7kWvknsosBKSz6zXX03cVZ1qqpaWQqUTb6cj3svsi
FUzsHjS0miybITXPDCoIGoYrBlb/xZiC8ELzGf2jYI6ew+moSjG2g+AQig4zCOFH
Uel7y5wtOOBwC6VGQiBCHhiiLqfM37RyyLbukE2yQv++8sC1HMnqYp6kSeEnNi0V
uIoL8+bfap7Xiq/K9jd2DPowxJ9zcsudiZ1IDGgGDqp6sRxazhiqG2/C/J+YTq4+
eT81PucoJna7ek7yF5CppI8/Vg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:28:53 2026 by rpki-client