
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json)
Hash identifier: rfItn0hN8PEkRgMtR65oMEQknid0JRBAbNxfrOfWQKU=
Subject key identifier: DC:C6:72:9B:8C:65:E8:44:59:93:59:46:42:3A:0D:3E:2E:22:52:86
Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
Manifest number: 0275
Signing time: Fri 25 Sep 2026 02:03:06 +0000
Manifest this update: Fri 25 Sep 2026 02:03:06 +0000
Manifest next update: Fri 02 Oct 2026 02:03:06 +0000
Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: FIrvAbUkMSG9f/XoOYLfZLD4LI+ezMPTHpq9a9t6z9k=)
2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: nWRLx+q0lfEoBWKjg9VIVBRs/nhFZ936B5rRLzukBEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Validity
Not Before: Sep 25 02:03:06 2026 GMT
Not After : Oct 2 02:03:06 2026 GMT
Subject: CN=6ab5d65a-796f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1e:f2:a0:c8:4c:42:73:e7:d1:85:a1:02:62:
d5:c9:32:0b:ac:79:7f:b4:f4:be:64:4c:38:c2:f0:
ca:b6:80:5f:ab:a3:1d:88:92:e1:d0:63:c0:9d:c1:
c2:72:32:b3:8a:ac:d7:cd:3b:41:d9:0e:76:94:3f:
00:c2:f0:fb:68:ce:fc:b4:db:a6:db:13:07:80:ea:
6e:83:77:2d:6b:27:6c:18:12:c0:89:a5:11:73:0f:
ca:d1:06:f6:aa:7b:19:42:7a:7c:52:e4:d5:0a:e2:
7c:e9:df:03:2d:e3:be:b2:2a:77:d0:a1:53:69:e9:
40:57:fa:cd:c8:6f:f7:f4:d9:dc:56:52:b4:1d:4b:
3f:95:dc:b8:f0:6c:d7:11:9b:b0:bf:bf:3e:8d:10:
46:b5:22:eb:fb:83:5e:2b:8f:a1:71:60:7e:03:71:
33:78:9e:67:33:1b:08:15:06:d4:c8:3e:50:de:8a:
2c:50:bf:fb:b5:0e:92:0a:87:78:23:6e:3c:92:1c:
e7:f7:18:d3:fd:6b:8c:91:af:2e:73:6a:9e:5f:ec:
52:71:11:22:be:67:5d:7a:d5:bd:36:56:6a:c3:ac:
1e:7b:5f:70:59:96:05:b3:d1:97:3a:0b:83:21:e2:
57:fa:3d:ad:7d:3e:cf:67:d5:a4:a5:e3:81:e0:f5:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C6:72:9B:8C:65:E8:44:59:93:59:46:42:3A:0D:3E:2E:22:52:86
X509v3 Authority Key Identifier:
keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4b:52:8e:79:c2:97:6b:98:0c:ac:af:25:f8:02:e8:33:12:
e6:53:bd:3e:5f:64:89:f8:11:6d:ba:04:a9:b7:bf:1c:77:2f:
34:f2:1e:73:f0:7b:8e:fb:c6:82:11:b0:14:87:61:06:7a:3c:
cb:08:42:91:3f:06:d5:83:5f:7e:90:7e:e1:c6:43:9a:41:a9:
f2:b2:a3:5f:15:47:ac:9f:38:db:fc:03:e9:85:44:70:19:ce:
d2:e0:17:6d:8e:a0:dc:2d:21:9f:14:ac:ae:a1:b0:0e:b1:35:
16:17:ad:45:17:a8:bf:26:ec:15:b3:76:e4:8f:ff:c1:ac:5b:
77:dd:ce:df:9d:f7:49:fe:bb:f9:a7:7b:a0:2f:79:6d:4c:e3:
a9:cd:74:b0:72:69:ab:12:22:92:ac:fe:a8:64:75:e7:c4:95:
71:4f:49:45:ef:8f:fa:a0:67:06:80:7b:0b:68:2b:0f:c9:eb:
30:9c:3c:4f:c8:19:f6:27:f5:79:5e:ca:f7:b2:3d:3f:9c:66:
f4:7a:d9:04:e9:10:11:84:a2:26:1e:11:53:96:de:ce:8e:29:
0d:cc:eb:0e:76:c7:2e:61:30:8a:68:45:56:35:41:a5:3a:4a:
29:fb:38:ff:7a:7e:dc:5d:cc:8c:46:66:e9:51:d9:94:12:78:
4d:8a:da:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTIzQTkxMTAvBgNVBAUTKDVDMTdBRjJFMEFBRjQ5MENFQUE4NEUyQUFBNzE0ODNE
MDM5NUYxRTQwHhcNMjYwOTI1MDIwMzA2WhcNMjYxMDAyMDIwMzA2WjAYMRYwFAYD
VQQDEw02YWI1ZDY1YS03OTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjR7yoMhMQnPn0YWhAmLVyTILrHl/tPS+ZEw4wvDKtoBfq6MdiJLh0GPAncHC
cjKziqzXzTtB2Q52lD8AwvD7aM78tNum2xMHgOpug3ctaydsGBLAiaURcw/K0Qb2
qnsZQnp8UuTVCuJ86d8DLeO+sip30KFTaelAV/rNyG/39NncVlK0HUs/ldy48GzX
EZuwv78+jRBGtSLr+4NeK4+hcWB+A3EzeJ5nMxsIFQbUyD5Q3oosUL/7tQ6SCod4
I248khzn9xjT/WuMka8uc2qeX+xScREivmddetW9NlZqw6wee19wWZYFs9GXOguD
IeJX+j2tfT7PZ9WkpeOB4PXKvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzGcpuM
ZehEWZNZRkI6DT4uIlKGMB8GA1UdIwQYMBaAFFwXry4Kr0kM6qhOKqpxSD0DlfHk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNBOS9BNjM4NzY4NEZB
QTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNRenFxRTRxcW5GSVBRT1Y4
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hCZXZMZ3F2U1F6cXFFNHFxbkZJUFFPVjhlUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjNBOS9BNjM4NzY4NEZBQTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNR
enFxRTRxcW5GSVBRT1Y4ZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApEtSjnnCl2uYDKyvJfgC6DMS5lO9Pl9kifgRbboEqbe/HHcvNPIec/B7jvvG
ghGwFIdhBno8ywhCkT8G1YNffpB+4cZDmkGp8rKjXxVHrJ842/wD6YVEcBnO0uAX
bY6g3C0hnxSsrqGwDrE1FhetRReovybsFbN25I//waxbd93O3533Sf67+ad7oC95
bUzjqc10sHJpqxIikqz+qGR158SVcU9JRe+P+qBnBoB7C2grD8nrMJw8T8gZ9if1
eV7K97I9P5xm9HrZBOkQEYSiJh4RU5bezo4pDczrDnbHLmEwimhFVjVBpTpKKfs4
/3p+3F3MjEZm6VHZlBJ4TYranQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:45:31 2026 by rpki-client