
$ rpki-client -vvf rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft (raw, json)
Hash identifier: +lmFHtQ5TpeDI1NU4zkTxHCn+CRy4CMXMKrpcTRKQV0=
Subject key identifier: 89:A8:FA:98:A1:95:AD:82:18:EF:27:04:E8:DF:31:11:49:80:83:9C
Authority key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
Certificate issuer: /CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7
Certificate serial: 044C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
Manifest number: 0446
Signing time: Tue 24 Mar 2026 23:54:03 +0000
Manifest this update: Tue 24 Mar 2026 23:54:02 +0000
Manifest next update: Tue 31 Mar 2026 23:54:02 +0000
Files and hashes: 1: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl (hash: gNCBYaa3jk6tjGyYjy/aV0HAZLa1qqHb/o0g95cMAFQ=)
2: 5ADF4C92956811EC9028F155C4F9AE02.roa (hash: oP7ajvSBOi8rYgtfwAx6v0p5MUB3I81Nl5lQOdGX7pI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl
rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100 (0x44c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7
Validity
Not Before: Mar 24 23:54:02 2026 GMT
Not After : Mar 31 23:54:02 2026 GMT
Subject: CN=69c3241a-c0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:3d:12:c1:00:5d:2c:c7:ba:d3:17:59:33:
21:3a:94:78:d2:cc:ae:79:56:f0:52:85:14:ed:3d:
55:7a:dd:7f:d3:64:34:c0:11:cd:8f:7b:91:cd:6d:
86:ff:d0:cd:d6:3b:18:33:b4:8a:1f:2e:d0:b6:0a:
3f:af:cd:cd:48:43:99:3f:38:7b:9b:14:6c:5b:9e:
d8:f5:26:fd:10:02:ec:61:1a:83:13:4f:32:26:c0:
7b:e0:5e:a0:31:a5:69:2f:a8:07:3e:0e:11:e3:54:
1a:91:47:02:e8:48:51:04:c9:7b:a1:9f:a5:fb:35:
97:32:dc:fd:8b:50:84:0a:2d:9b:ed:42:06:92:40:
be:94:c6:d2:87:15:bd:b1:6a:8e:59:35:dd:f8:50:
41:25:f8:18:af:fa:e6:68:f8:48:5f:76:c3:97:66:
de:6e:4d:e3:b9:be:ab:34:06:d5:1a:ff:e7:ad:a7:
a3:2d:fb:5d:f3:fb:42:b4:8c:2a:72:17:33:11:70:
bc:f9:8a:9c:5b:9a:30:97:1c:f2:c1:29:7f:6c:72:
60:3f:59:5c:11:d7:99:9d:ae:18:0a:65:a9:d3:06:
03:06:ac:62:54:7a:58:7f:09:10:89:ae:52:1b:a0:
e9:2f:1b:f6:4c:d4:bc:2c:d6:3a:05:df:fd:a0:5f:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A8:FA:98:A1:95:AD:82:18:EF:27:04:E8:DF:31:11:49:80:83:9C
X509v3 Authority Key Identifier:
keyid:C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:0e:a8:f4:ad:bc:cd:8d:df:b5:a1:e3:b9:87:9e:ef:8f:47:
0d:69:b9:ee:f3:dd:94:19:ff:90:8e:95:26:af:e9:fd:45:f4:
22:3e:95:ce:0a:38:79:73:1f:77:84:ec:8e:bb:2d:19:bc:99:
b0:f9:c9:1d:58:ac:96:f4:ea:1b:db:8c:14:e5:52:8a:1a:61:
bb:16:43:bb:8b:58:68:8d:f0:3a:ac:ce:e0:f0:46:70:fe:b6:
00:32:f1:4b:f5:40:ac:b9:13:52:38:5c:8f:fa:4a:4b:e2:7f:
91:bf:16:63:48:a2:2a:e5:09:fb:c5:54:bd:59:b3:1d:6d:4f:
4e:6b:d9:6e:67:df:4e:90:1d:3c:09:92:0f:bb:03:bf:1a:3f:
98:7f:70:16:c3:35:ab:0a:05:ab:b5:0b:3b:3a:1c:99:03:3c:
7c:d8:51:bc:b8:fd:b6:c7:b9:5b:0e:ae:cb:5c:16:66:4f:a6:
07:b1:3c:b4:b0:b3:45:06:da:bd:c7:71:35:e3:6f:d9:8e:1f:
3c:04:26:30:6c:43:b8:34:5c:78:c6:28:25:52:f1:46:7e:ee:
8d:07:ac:2a:f6:22:7d:18:29:fe:eb:8c:bc:83:11:7f:b2:40:
b1:32:46:c1:bd:65:fc:c9:26:59:55:69:f4:90:59:9d:a8:3e:
b8:91:99:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQzRkUxMTAvBgNVBAUTKEM3MEJGM0RGRjQ1MDIzRDQxQUY0QzRERjVENzY1MDQw
QjkyNDFBQzcwHhcNMjYwMzI0MjM1NDAyWhcNMjYwMzMxMjM1NDAyWjAYMRYwFAYD
VQQDEw02OWMzMjQxYS1jMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4zc9EsEAXSzHutMXWTMhOpR40syueVbwUoUU7T1Vet1/02Q0wBHNj3uRzW2G
/9DN1jsYM7SKHy7Qtgo/r83NSEOZPzh7mxRsW57Y9Sb9EALsYRqDE08yJsB74F6g
MaVpL6gHPg4R41QakUcC6EhRBMl7oZ+l+zWXMtz9i1CECi2b7UIGkkC+lMbShxW9
sWqOWTXd+FBBJfgYr/rmaPhIX3bDl2bebk3jub6rNAbVGv/nraejLftd8/tCtIwq
chczEXC8+YqcW5owlxzywSl/bHJgP1lcEdeZna4YCmWp0wYDBqxiVHpYfwkQia5S
G6DpLxv2TNS8LNY6Bd/9oF9IpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImo+pih
la2CGO8nBOjfMRFJgIOcMB8GA1UdIwQYMBaAFMcL89/0UCPUGvTE3112UEC5JBrH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDNGRS85ODE0ODA2Mjk1
NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5UWE5TVRmWFhaUVFMa2tH
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h3dnozX1JRSTlRYTlNVGZYWFpRUUxra0dzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDNGRS85ODE0ODA2Mjk1NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5
UWE5TVRmWFhaUVFMa2tHc2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABQ6o9K28zY3ftaHjuYee749HDWm57vPdlBn/kI6VJq/p/UX0Ij6Vzgo4eXMf
d4TsjrstGbyZsPnJHVislvTqG9uMFOVSihphuxZDu4tYaI3wOqzO4PBGcP62ADLx
S/VArLkTUjhcj/pKS+J/kb8WY0iiKuUJ+8VUvVmzHW1PTmvZbmffTpAdPAmSD7sD
vxo/mH9wFsM1qwoFq7ULOzocmQM8fNhRvLj9tse5Ww6uy1wWZk+mB7E8tLCzRQba
vcdxNeNv2Y4fPAQmMGxDuDRceMYoJVLxRn7ujQesKvYifRgp/uuMvIMRf7JAsTJG
wb1l/MkmWVVp9JBZnag+uJGZmw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:05 2026 by rpki-client