
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier: DrRZKH2GNO8zI8zDJMtFDjaylMuED518bLRSS+jvY3Q=
Subject key identifier: 4F:DF:63:C1:B5:F3:04:52:81:24:88:47:67:E1:58:2F:D9:3D:63:E8
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 31AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number: 3121
Signing time: Wed 22 Jul 2026 15:31:11 +0000
Manifest this update: Wed 22 Jul 2026 15:31:10 +0000
Manifest next update: Wed 29 Jul 2026 15:31:10 +0000
Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: zdioxMNAUAEyhFLEkhfVzk2S3gX3uiDJ14vsFonfLwQ=)
2: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=)
3: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: 7qL24XtJJGYddBNzZ1f8/6sYDORXFfhTRLN+KXoF1UE=)
4: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0AZBDmh8J9l8VOqehLNqWYnMqjkmPYEkpVJJP0YL/UM=)
5: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=)
6: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=)
7: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: U3Ln4yzn8NQ06p1eFYCEFA90g6K7BH94tZxVPn7SxXk=)
8: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=)
9: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: /ot5DoHQF40alQvvcmtFXp57ebCwbLGHhRnrByVbsDA=)
10: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: LToWIQ1COMbsBcEbH54cRu/d6HNi0lrBivKKu1OeKJk=)
11: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: NR3htRP9a6F2ckA37vX/zVJgydrhk/y6ALKCOIGQr/c=)
12: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: Bh0KOlYAcUWAXt3WdoXHJOCw2Q1uBx39GJDLv8eD0T8=)
13: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=)
14: F1A29F32843111F18303D56C65A30FBC.roa (hash: 5a8O9Z1V3ja/5ztqSfJLuOOFIOZvUJHqD1otnk0gm90=)
15: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: Hl3h+xajA6uyUcgR+szgYx0GkKpSQx8UaQOMAFI5mWs=)
16: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=)
17: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: aSXWB68fSWHHDo5FqMadmbWywQoiETk4RCpEwtCS3cM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12718 (0x31ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Jul 22 15:31:10 2026 GMT
Not After : Jul 29 15:31:10 2026 GMT
Subject: CN=6a60e23f-8b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:20:3b:b0:56:86:ef:19:fb:9f:31:38:e2:9d:
05:a4:a7:29:61:5b:84:23:5a:49:85:7b:2f:dc:bf:
03:1e:b0:fb:3d:fb:f5:43:86:cc:20:6c:90:db:21:
ea:40:9e:23:09:91:71:b5:50:0b:0c:2e:46:e6:3a:
79:4a:33:2e:b0:e2:2f:d3:9d:a7:12:28:ee:f9:2d:
d9:79:d5:23:20:95:0e:df:f6:26:1b:0e:bc:f7:0f:
c9:cf:b0:07:3a:e0:85:17:66:7b:b8:4d:9f:db:9d:
4f:6b:83:16:d2:2f:d2:aa:27:d3:c0:f0:2d:53:76:
ec:0a:5f:57:15:cd:34:e5:7a:22:be:85:ff:74:f4:
7a:a1:c9:56:07:90:a2:82:79:be:e8:9f:bf:d6:48:
f0:2f:07:39:1a:bb:ae:b8:a6:d9:e2:56:2d:24:0b:
70:e9:e4:ea:24:f2:89:15:e9:b9:4d:c4:24:5b:b6:
16:82:0d:9f:96:b1:8a:c3:1f:a7:83:b3:5b:3b:d6:
12:ce:09:60:39:75:09:c0:8a:dd:74:83:9e:d2:7b:
18:96:91:a1:55:45:8e:e7:00:6c:f1:95:31:15:57:
6d:45:48:ea:35:df:45:42:d5:e8:b5:1b:c1:57:3d:
0e:40:34:42:95:71:a7:d6:91:4f:b2:94:d0:1a:bd:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:63:C1:B5:F3:04:52:81:24:88:47:67:E1:58:2F:D9:3D:63:E8
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a5:c3:c9:ef:29:e0:31:15:fe:a9:bc:d9:48:78:8b:e0:d8:
20:58:27:43:78:3b:cc:64:0d:cf:2e:47:c0:9f:18:53:88:49:
37:11:99:10:ca:09:8b:5f:4a:da:fa:d1:a1:74:35:63:dc:f1:
db:85:f7:a3:87:7a:58:5a:f0:90:ac:46:3a:ea:4b:96:bd:5f:
b0:60:44:c3:a3:68:e5:82:00:4a:57:bc:bb:eb:d0:78:25:da:
35:d0:d5:7f:a8:96:c7:68:64:f2:db:12:17:62:13:f5:7d:31:
ff:a1:29:63:ea:cc:e6:2d:ab:e0:b4:c2:a9:72:b6:83:af:0f:
fb:d3:10:0f:96:f2:8d:38:18:3f:22:0d:6b:99:19:fb:e4:49:
7c:f3:78:da:bc:a3:63:bb:33:f7:d6:71:e6:4b:e4:58:e3:a9:
da:d3:56:5a:26:77:26:53:f3:a1:be:31:a6:08:71:8e:1d:66:
53:4b:fe:ce:a2:9f:55:cd:45:4f:92:be:98:ad:af:fb:56:57:
54:d8:78:2d:87:c8:00:02:25:6b:09:e6:9d:28:b5:41:48:69:
67:c5:fa:61:1e:a9:0a:cd:ea:44:07:0a:d5:01:15:35:b0:7c:
0d:e3:10:28:2c:7c:09:5e:e0:80:c4:02:2f:16:a8:de:53:50:
34:6e:56:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:45 2026 by rpki-client