
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
File: PXsVvXfZuXTjc1jadU3-qSkeaDo.mft (raw, json)
Hash identifier: xbmTkjch69cBIoTV9j6Vi2U4hxJsrmztL/dzAyQfFXA=
Subject key identifier: 2D:2A:57:2E:C9:C9:DA:77:EC:17:44:85:1F:AC:92:08:0B:C5:7D:9C
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 18:53:37 +0000
Manifest this update: Thu 24 Sep 2026 18:53:36 +0000
Manifest next update: Thu 01 Oct 2026 18:53:36 +0000
Files and hashes: 1: PXsVvXfZuXTjc1jadU3-qSkeaDo.crl (hash: guG1d+n8BH7NJ6CVV+5byoNJIIOMOuL224Yb1ZGuyUU=)
2: 9F6611D029D311F184F1669A97833773.roa (hash: 7XOGs2wyUjEZQbl9lb0Bk82uyJ3XVHINwK4ItrxDuVA=)
3: 3218652829E811F18CA8F3909F833773.roa (hash: eU5ZrLctFwDk24jAlM3+JYuAwt/fHYDYFfG92ftHrG4=)
4: 769A6D0C29EA11F19F51207DA0833773.roa (hash: XcjhinNbZJy1c41oN0q9J25LNTzXS/kfkrE7fESwpr4=)
5: 9EDDEBC029D311F184F1669A97833773.roa (hash: wTPo2kv7xMowUUg+BeWVK7kCSv8ZL5DjmUbZP36DRQU=)
6: E67F9A6229F311F1A8F3E0E1A2833773.roa (hash: 6iDEJfborO4k4SN1+csGnEFXKfEtb5shDdu17cANAfE=)
7: E07EDFEAA83511F197EEE3443611F970.roa (hash: PWekMcu4+B0Oj6I8LteCLe3snhBXN0BSRYbpQA+iqFY=)
8: 040DC78829EB11F18E7F1692A0833773.roa (hash: y16n6WemYHe3eFI0s7YEgjUsT6r8DekbQjKdUrOjeu4=)
9: Y0V6QTtVdDGOosHHJcYzqULjMFE.asa (hash: KwmdGtFsNvsDgdJAv4m+MNCpjlOAuKHaYCdkkRjehDo=)
10: 670FF7B429C011F1A3F09FCF91833773.roa (hash: OlVWz8nGryBxNYRtX9LuDsIW6s2g4bCFqY9G2NVU36E=)
11: 5CFC71B62C1411F181024EDD95833773.roa (hash: YRECKHoraOf2bWRQJUd3/Y6Ug/L3op3a4wNvo/BFtlE=)
12: 24DB124029D711F19B6521AE99833773.roa (hash: UqSBc8TxnJq1Jue1okvq1v9coaZmETb8TyDiU0CjCJ8=)
13: 31EC6B8229D211F1942EF99297833773.roa (hash: 6GOkqgK6766kXZRb2zev1EPOhPc93N6Z7iHPDo/M9B4=)
14: 23C5258A29D711F19B6521AE99833773.roa (hash: v++NZpvnb9ylmNbF62ghM6TfResLJGpsjAupWiltIf8=)
15: DF742E02A83511F197EEE3443611F970.roa (hash: LR/itoK/L5aRch4pJhKFTPYm9kxaZD8MEBm8uT1T9hA=)
16: CD8FC3C82D1E11F191B042ACB6833773.roa (hash: NxkdL/XW0F+7NXwYBc0Km2tJxuYr4RVoLbvkjNZsOc8=)
17: 11749BE62DA511F1AB5ACB70A2833773.roa (hash: XiFtfljCFKD2LKcSnLJ3irXOuLI/m6SajhgaUNMIkk4=)
18: 77B9A22029EA11F19F51207DA0833773.roa (hash: Xbsb6WA8kMxnLMb0002lKsDzIsPgJEDCspvcDzL/trA=)
19: 9FAF6F8A29DB11F1BFD4871E9B833773.roa (hash: zdZwScXVAMNHJf/1wI64pbUMCQPblQfek4+QW6DA8h4=)
20: 7843AE0229EA11F19F51207DA0833773.roa (hash: 6V2DjYIx8625kqe242doUOvVQbgf+Yq45HsMphmWFZY=)
21: A194680629DA11F1A7234B1B9B833773.roa (hash: KIqqySfqw8zszLlnQiMzev+Qz4Y53rJrYR9gJPmiP3I=)
22: 50DA994A29D411F1916B319D97833773.roa (hash: zD0ufAiml2itPOf8FjLNOlzmYyQ99ftWQuzKy+90VzM=)
23: 85750E9429B911F1A805AEF28F833773.roa (hash: G0wzSj51Qp6fnFjrr4WxujUgcZN4YNZIFcMjHPdUFz4=)
24: 132BB03C29F411F1A9D9FDE9A2833773.roa (hash: zAHGRDXYndBzUXQxorw1NkRKqw4rmC3oXM3Dg7Io5P8=)
25: 484AAA6E29E711F18BEDC2D19E833773.roa (hash: kjxZZmUEVCRj7FRfyXjI30Z+Tgg0521nzEfajA5vqcI=)
26: 771BED3C29EA11F19F51207DA0833773.roa (hash: 09sH/2B4l1dbmZUamUfC+nphrsNDUifYrBA1FqJfBVM=)
27: 32A3B5E229E811F18CA8F3909F833773.roa (hash: bm+D908YeL/P1T00rFim9gtV6dNznmF0Z3qK05Yc0lM=)
28: 2E2443CE29CF11F1ADED11F996833773.roa (hash: CUdsm2mFfeKj9DQNrRmyZB/PxWbcx2rZQKOcjvWuC0Q=)
29: A03EA96629DB11F1BFD4871E9B833773.roa (hash: CeVU5F+cE/p/gIJ6n4nuOgYXAjPlizKNWh6FzWAj2VQ=)
30: 666C21CA29C011F1A3F09FCF91833773.roa (hash: y9ci58U6NkZ5pJ9FGfvPElnka2mlIBg9URm+CwL1+6M=)
31: 5A0D98C829F211F18AB4C1A0A2833773.roa (hash: HFd9QgZh+NAMQFqbKs0U5sBBitb9/bP74JcV2UadE8k=)
32: 763CCE46479911F18B6CC3CFA0833773.roa (hash: erzss31JpeWgG+Gc0xJ5SMvdJuEjcJOATd56OecuB+o=)
33: 87758D3C2DAF11F1B56D9FADA5833773.roa (hash: bB7QmV7mgJV6zy0vXkgVW0mvcXAYiTfS8G40XLA5T0I=)
34: 2447645A29D711F19B6521AE99833773.roa (hash: 9fh2MIgtJRRPoGpWqGsheDDuAAKoytopq3Qqh52Ib4A=)
35: 805DF10C29D011F19183AF4C97833773.roa (hash: MNeWms1frV+694tcT4cRmQYkSMhm22Q4MBfOcgbglm0=)
36: 2D9AAA0629CF11F1ADED11F996833773.roa (hash: EYgOLSFFeoawzbZSo+omPv5lcZ4eiI6uUiQ5dR5O4Iw=)
37: 37885C3229D111F18571726A97833773.roa (hash: oFWQjdEfsXo2mf9hnvk1nF/iUbWRdh1WWZienEzp0Y0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Sep 24 18:53:36 2026 GMT
Not After : Oct 1 18:53:36 2026 GMT
Subject: CN=6ab571b1-caa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:4d:07:ca:42:7b:9d:d3:46:f1:ae:28:be:
3a:8b:83:aa:2f:d0:79:c5:76:c4:66:14:11:4b:82:
f5:8f:b3:ef:22:27:ad:3b:05:f0:34:17:a3:e9:32:
b3:00:2f:d3:83:b3:aa:f6:2a:0a:0a:ca:4e:e0:be:
67:df:cc:16:63:b6:f6:c1:0c:cc:d9:8d:d4:ee:0f:
00:cb:be:b9:86:aa:cc:0c:5a:61:46:ec:0f:7f:c1:
1b:b3:a9:17:2f:05:11:53:e4:e4:e0:d1:32:92:db:
4e:ca:94:42:79:ce:77:09:89:bd:41:b3:1b:1e:a8:
c0:2f:e8:d3:49:80:f0:65:76:9f:19:72:36:da:9e:
14:4e:fc:d9:10:2d:9e:12:f6:d6:86:91:53:e8:9a:
fe:b6:4d:2d:32:25:00:68:1e:92:9c:61:e2:fc:59:
92:7c:93:64:2a:12:df:21:a0:35:29:66:42:e9:cd:
ff:d9:ac:4e:7b:da:dc:c9:5d:4a:60:13:d0:80:3d:
b9:19:39:3a:5e:a5:2d:da:52:88:05:0e:eb:47:19:
58:30:af:ee:a4:b7:3f:13:09:51:bd:e8:d4:17:12:
ea:71:e3:cd:e8:4f:2a:39:26:55:99:2d:d3:38:e4:
e7:c8:05:cf:51:20:d9:38:a8:69:75:30:0e:18:61:
da:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2A:57:2E:C9:C9:DA:77:EC:17:44:85:1F:AC:92:08:0B:C5:7D:9C
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:4b:96:87:b5:28:e8:5a:85:46:66:9b:5b:56:02:40:1c:5f:
d8:f7:2e:d3:4f:53:19:4d:de:93:1e:6e:d7:9d:b8:22:3c:f4:
94:c1:82:44:b4:39:aa:30:e4:29:7d:d3:a4:ba:c5:06:5a:30:
a4:d2:4c:6f:f8:8a:12:49:84:24:a6:94:f8:fd:4e:17:14:ac:
8c:eb:aa:e8:a2:6c:5e:96:a4:6c:0e:fc:b0:2b:a2:5d:01:7e:
5d:fa:fe:5f:d7:0a:11:01:e4:f7:c0:8d:72:34:4e:f2:ff:57:
10:51:88:97:3d:fa:ae:44:3a:1f:20:73:db:15:78:ff:08:49:
4a:7b:c8:84:96:67:aa:6a:2f:d1:ec:aa:64:33:88:9c:10:38:
b7:95:0b:f4:b9:a2:c6:b4:56:ba:00:8d:d0:10:72:d5:db:91:
58:f2:e7:93:da:29:29:7f:d6:67:31:00:6b:35:0b:24:7f:69:
04:45:ac:5f:88:f2:17:10:3d:b4:33:a2:a8:5a:de:ba:e1:6f:
06:cf:a0:ec:24:41:d9:93:af:2c:1b:db:37:64:4d:fe:09:b8:
99:f8:88:ce:63:32:ef:e8:22:f7:4f:07:a8:2d:6f:c6:6a:6d:
ac:15:7d:a6:c3:39:2f:14:2e:95:0d:7a:5a:2c:9f:f3:b6:94:
88:68:86:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwOTI0MTg1MzM2WhcNMjYxMDAxMTg1MzM2WjAYMRYwFAYD
VQQDEw02YWI1NzFiMS1jYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0hNB8pCe53TRvGuKL46i4OqL9B5xXbEZhQRS4L1j7PvIietOwXwNBej6TKz
AC/Tg7Oq9ioKCspO4L5n38wWY7b2wQzM2Y3U7g8Ay765hqrMDFphRuwPf8Ebs6kX
LwURU+Tk4NEykttOypRCec53CYm9QbMbHqjAL+jTSYDwZXafGXI22p4UTvzZEC2e
EvbWhpFT6Jr+tk0tMiUAaB6SnGHi/FmSfJNkKhLfIaA1KWZC6c3/2axOe9rcyV1K
YBPQgD25GTk6XqUt2lKIBQ7rRxlYMK/upLc/EwlRvejUFxLqcePN6E8qOSZVmS3T
OOTnyAXPUSDZOKhpdTAOGGHarwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0qVy7J
ydp37BdEhR+skggLxX2cMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVY
VGpjMWphZFUzLXFTa2VhRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAkuWh7Uo6FqFRmabW1YCQBxf2Pcu009TGU3ekx5u1524Ijz0lMGCRLQ5qjDk
KX3TpLrFBlowpNJMb/iKEkmEJKaU+P1OFxSsjOuq6KJsXpakbA78sCuiXQF+Xfr+
X9cKEQHk98CNcjRO8v9XEFGIlz36rkQ6HyBz2xV4/whJSnvIhJZnqmov0eyqZDOI
nBA4t5UL9LmixrRWugCN0BBy1duRWPLnk9opKX/WZzEAazULJH9pBEWsX4jyFxA9
tDOiqFreuuFvBs+g7CRB2ZOvLBvbN2RN/gm4mfiIzmMy7+gi908HqC1vxmptrBV9
psM5LxQulQ16Wiyf87aUiGiGeQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:37:08 2026 by rpki-client