
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json)
Hash identifier: Qa6pGD4FM0a9WGePzwZ6LsxxWs2K3EGlBQKfY3PZbaU=
Subject key identifier: 46:59:11:E6:75:0F:29:1D:CC:C9:1D:27:99:A1:20:AC:EF:AE:70:59
Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40
Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040
Certificate serial: 0D58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
Manifest number: 0D40
Signing time: Mon 12 Oct 2026 18:19:56 +0000
Manifest this update: Mon 12 Oct 2026 18:19:56 +0000
Manifest next update: Mon 19 Oct 2026 18:19:56 +0000
Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: ZebHvDDBcifYUPIbOej5/QqTPwHDuDIZriBxvSu8Mjo=)
2: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: Gd51DSJy7RuRHfcxRKQ4BVa2f62IksPTzTJJwkzjFSs=)
3: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: g8GNIuMgpliQ182S/DwLgAMf2Tv+xYsQpUqBRCmHHS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl
rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3416 (0xd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040
Validity
Not Before: Oct 12 18:19:56 2026 GMT
Not After : Oct 19 18:19:56 2026 GMT
Subject: CN=6acd24cc-23f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:39:38:2e:82:c3:92:96:b9:0e:7f:5d:71:
3b:a7:73:8d:af:e6:e1:67:b9:36:a4:7c:1b:d5:b0:
2a:c6:38:91:d3:2e:60:f8:8e:77:e4:55:b6:45:09:
08:cd:b2:cd:e6:87:29:ac:55:db:1b:6a:d4:98:f2:
de:92:d2:fc:76:c0:70:da:8f:0a:b2:fd:ad:c4:da:
5b:c8:06:38:12:1b:42:e5:7f:46:8f:c8:57:c2:92:
f0:d2:e1:b1:6a:ab:74:d5:15:b6:da:c7:70:c5:28:
71:6c:ee:69:39:a6:4c:c3:be:ec:3b:6f:ca:11:a6:
27:e3:c3:e6:6e:86:fc:c6:f5:23:50:f0:e6:6f:27:
4a:eb:17:7b:36:b7:67:62:e0:71:b3:f0:45:65:0d:
9f:ec:f9:1f:58:1c:63:f9:b6:90:a6:9a:94:7b:37:
6f:45:c0:fe:2b:18:b4:0f:a9:de:b3:51:e7:5e:89:
7c:8d:93:bb:71:89:03:2d:48:ec:87:ae:e9:3e:93:
f2:d6:a5:0f:5e:d9:f1:8c:df:30:15:cb:d3:05:87:
54:1c:81:a6:85:d8:2f:b4:23:f8:5d:e1:3d:a5:4e:
10:38:5e:d7:b0:c4:36:5a:07:c4:eb:23:18:f7:b0:
18:a0:08:43:c8:94:38:b0:82:c4:18:3e:80:c1:b0:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:59:11:E6:75:0F:29:1D:CC:C9:1D:27:99:A1:20:AC:EF:AE:70:59
X509v3 Authority Key Identifier:
keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6f:ef:83:53:e6:83:b9:07:16:45:4e:96:c1:54:c6:07:db:
db:c6:5e:46:33:da:f5:fb:af:3c:0a:bf:66:8e:6a:e5:75:97:
5e:a4:de:b2:85:c6:6d:49:db:cf:77:80:d5:96:24:30:5b:da:
b0:42:9d:14:28:60:c8:41:af:80:f8:0e:30:94:6c:2b:8a:c8:
48:84:c5:1d:1b:70:c2:85:70:91:87:46:7e:50:74:66:ad:78:
b2:e5:ab:48:47:af:ee:df:a0:f3:7b:f7:a8:78:f6:e6:ef:87:
12:4c:8c:7a:75:ea:b4:8a:ae:a1:e3:4f:33:08:3e:d8:3e:ff:
c0:ae:fe:3d:86:10:e7:74:5a:c3:7f:e5:a3:f0:75:b3:3e:d5:
71:75:0d:1c:43:2d:f1:84:88:0d:e8:8e:82:fc:08:75:d9:3d:
9e:f7:2b:7a:d0:6e:2b:d5:82:85:74:f7:10:b6:4b:2e:5f:43:
24:29:87:51:3d:54:a0:4e:37:d9:aa:83:0c:42:da:f1:47:83:
60:a1:b4:d5:5a:94:bb:b7:da:98:be:d9:6e:d4:77:d5:da:aa:
d0:e1:1e:70:bc:22:1b:3c:fd:dc:f9:39:1d:6a:75:b0:ce:e1:
e9:26:37:df:85:9f:ef:04:92:d8:ed:f1:11:b0:c9:ec:99:86:
80:6c:df:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF
QUYxMEQwNDAwHhcNMjYxMDEyMTgxOTU2WhcNMjYxMDE5MTgxOTU2WjAYMRYwFAYD
VQQDEw02YWNkMjRjYy0yM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwlM5OC6Cw5KWuQ5/XXE7p3ONr+bhZ7k2pHwb1bAqxjiR0y5g+I535FW2RQkI
zbLN5ocprFXbG2rUmPLektL8dsBw2o8Ksv2txNpbyAY4EhtC5X9Gj8hXwpLw0uGx
aqt01RW22sdwxShxbO5pOaZMw77sO2/KEaYn48Pmbob8xvUjUPDmbydK6xd7Nrdn
YuBxs/BFZQ2f7PkfWBxj+baQppqUezdvRcD+Kxi0D6nes1HnXol8jZO7cYkDLUjs
h67pPpPy1qUPXtnxjN8wFcvTBYdUHIGmhdgvtCP4XeE9pU4QOF7XsMQ2WgfE6yMY
97AYoAhDyJQ4sILEGD6AwbAj7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZZEeZ1
DykdzMkdJ5mhIKzvrnBZMB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4
RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm
UnZqOGtPSWZuUV9xOFEwRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADG/vg1Pmg7kHFkVOlsFUxgfb28ZeRjPa9fuvPAq/Zo5q5XWXXqTesoXGbUnb
z3eA1ZYkMFvasEKdFChgyEGvgPgOMJRsK4rISITFHRtwwoVwkYdGflB0Zq14suWr
SEev7t+g83v3qHj25u+HEkyMenXqtIquoeNPMwg+2D7/wK7+PYYQ53Raw3/lo/B1
sz7VcXUNHEMt8YSIDeiOgvwIddk9nvcretBuK9WChXT3ELZLLl9DJCmHUT1UoE43
2aqDDELa8UeDYKG01VqUu7famL7ZbtR31dqq0OEecLwiGzz93Pk5HWp1sM7h6SY3
34Wf7wSS2O3xEbDJ7JmGgGzf0g==
-----END CERTIFICATE-----
Generated at Tue Oct 13 18:53:25 2026 by rpki-client