
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier: kXEVlLW0JZAGd1fj9EXYd7YfGsHUze25lKUy6onXLrc=
Subject key identifier: 25:6B:62:85:B6:17:3A:21:7C:C8:9E:BB:81:52:62:33:3A:E2:E8:CB
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 3188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number: 30FC
Signing time: Tue 12 May 2026 15:27:37 +0000
Manifest this update: Tue 12 May 2026 15:27:37 +0000
Manifest next update: Tue 19 May 2026 15:27:37 +0000
Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: +HIJ3XOPNUOmRNyma9z+h+dr7SuTTeH4BPFP00ZhGfg=)
2: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0AZBDmh8J9l8VOqehLNqWYnMqjkmPYEkpVJJP0YL/UM=)
3: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=)
4: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=)
5: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: aSXWB68fSWHHDo5FqMadmbWywQoiETk4RCpEwtCS3cM=)
6: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=)
7: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: U3Ln4yzn8NQ06p1eFYCEFA90g6K7BH94tZxVPn7SxXk=)
8: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: Hl3h+xajA6uyUcgR+szgYx0GkKpSQx8UaQOMAFI5mWs=)
9: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=)
10: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: Bh0KOlYAcUWAXt3WdoXHJOCw2Q1uBx39GJDLv8eD0T8=)
11: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: 7qL24XtJJGYddBNzZ1f8/6sYDORXFfhTRLN+KXoF1UE=)
12: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: NR3htRP9a6F2ckA37vX/zVJgydrhk/y6ALKCOIGQr/c=)
13: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=)
14: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: LToWIQ1COMbsBcEbH54cRu/d6HNi0lrBivKKu1OeKJk=)
15: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: /ot5DoHQF40alQvvcmtFXp57ebCwbLGHhRnrByVbsDA=)
16: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12680 (0x3188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: May 12 15:27:37 2026 GMT
Not After : May 19 15:27:37 2026 GMT
Subject: CN=6a0346e9-d59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:96:1b:0c:b3:ae:9a:b5:2a:46:ac:10:95:
8d:e3:22:2c:3c:de:0f:98:b8:71:2c:be:18:ee:92:
1e:98:be:c8:55:c6:3c:c4:d8:d3:0f:a7:ee:18:c3:
c2:27:a8:33:2e:7d:79:6b:80:75:66:2a:d0:7e:e5:
5e:f1:02:9d:4b:f6:9a:bf:ff:29:5a:c5:eb:96:6e:
9e:1e:5d:cb:47:d7:ad:35:9a:76:e2:4d:76:42:3d:
d3:dc:c5:84:ee:3f:53:42:78:d8:62:0d:4e:56:ea:
a4:71:3c:53:bb:79:64:6a:49:b7:20:e8:94:81:1b:
8a:5a:29:d0:4f:45:ae:85:87:36:35:8c:17:91:3b:
d6:3a:be:39:ef:53:97:2a:a4:32:1b:41:05:5a:3e:
fe:8f:45:a4:13:07:d1:99:67:6b:7f:62:fe:4e:17:
4d:ef:3c:e9:e8:66:2e:d2:07:a3:c9:ee:9b:44:88:
24:2c:bb:27:e8:6c:21:94:23:27:57:d2:fd:9a:bc:
92:cf:57:a5:9e:3a:da:7e:b0:86:be:e4:a6:99:d7:
09:0e:61:35:d9:78:3c:ba:0f:7e:40:36:56:c2:5b:
79:dd:d8:c6:be:fe:a5:ff:b5:62:8f:a5:a0:6f:1a:
76:ec:b7:6e:e2:29:b3:ae:6d:bd:9d:1b:41:08:54:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6B:62:85:B6:17:3A:21:7C:C8:9E:BB:81:52:62:33:3A:E2:E8:CB
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:69:55:cd:72:97:8a:39:17:60:a1:02:1a:8c:a3:aa:11:4e:
0a:d7:7e:76:b6:60:c8:39:cc:1a:b5:45:da:2e:81:c7:36:35:
61:05:f6:08:0c:6d:10:ef:bd:89:07:d4:fb:ac:c1:a4:da:a9:
c0:f9:af:fd:88:33:f6:7c:27:cf:85:f0:c6:54:c3:e6:2a:85:
d6:b2:18:ba:30:8e:f0:7a:c0:9a:d0:36:ba:ef:09:d0:15:ed:
2d:71:f8:98:7c:c8:74:c1:5e:00:31:e6:8b:6f:64:16:cc:76:
b3:96:d6:d8:f4:1e:e5:8b:3c:88:fc:19:27:fb:3a:8c:69:12:
cc:71:6f:dd:4b:d8:62:c3:80:c1:bd:33:b2:6c:f1:71:69:c1:
19:b9:77:9d:08:30:a9:3a:01:ee:93:12:17:b3:c2:cf:08:0d:
d8:9a:f9:28:8e:7e:fe:e3:e2:4e:35:db:c9:28:6f:33:15:79:
fd:48:e5:8d:b1:0f:8f:23:ef:e1:11:e7:59:1d:c1:a8:19:e0:
73:b7:a8:bd:7f:22:1c:33:af:10:59:aa:62:a7:4a:6c:93:81:
3a:2f:e3:57:5c:81:f2:c8:43:a7:1c:bb:b3:d6:6e:f9:34:92:
35:b5:ec:a5:61:3d:8b:d6:ff:8c:be:26:f1:5f:8e:c6:65:cf:
79:84:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:31 2026 by rpki-client