
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json)
Hash identifier: wW+m2/MpQGJ1FEQmEZiRJC8bkXl+VS7c7MDfbdxhJyc=
Subject key identifier: 96:6D:B1:0D:74:89:7C:37:DF:E6:AE:DE:36:46:BF:6C:4A:83:9A:95
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial: 115F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
Manifest number: 114F
Signing time: Sat 10 Oct 2026 17:16:19 +0000
Manifest this update: Sat 10 Oct 2026 17:16:19 +0000
Manifest next update: Sat 17 Oct 2026 17:16:19 +0000
Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: 7QwfhtH4WuXf+NdzAesgyML9I3CgRvxbwwP3DSjzcgY=)
2: 691023063A8311E99AF5572DC4F9AE02.roa (hash: 3XIdOKZPD+XETwFVUGrUUljIP0PedqBSSrgTHEH2oF8=)
3: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: yaNkgji9jGH4TTyhCOL2/K5RHSqEhk35tfGLeGGK6L0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 17:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4447 (0x115f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Validity
Not Before: Oct 10 17:16:19 2026 GMT
Not After : Oct 17 17:16:19 2026 GMT
Subject: CN=6aca72e3-1441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:13:f8:fc:88:9f:c3:61:88:67:54:50:23:
2b:03:20:f4:36:5a:75:78:af:92:19:48:17:15:4a:
9b:86:2a:f6:7c:ec:88:e4:5d:ac:c6:71:bb:d6:c3:
7d:5c:a5:2b:5b:1e:60:be:c0:14:b1:24:14:76:f1:
47:f4:d6:fe:d9:8a:ab:4e:18:29:ad:73:7a:11:65:
76:1c:5f:3a:bc:83:24:31:7a:57:11:3a:30:06:3a:
57:2b:d8:b5:3a:8c:da:30:63:f4:dc:df:42:76:37:
41:1b:87:52:a2:b9:c6:ea:4e:85:46:7c:3a:47:12:
94:7c:7f:c5:f3:05:3a:b2:3e:18:c0:e0:9f:82:24:
b0:95:f0:62:da:e7:2e:ee:98:ef:ce:1b:a1:40:0a:
a6:b7:67:81:38:43:28:f1:59:8e:e9:21:46:d1:70:
36:0e:5d:84:c6:e0:4c:ec:6f:d1:90:e5:db:f7:c1:
7e:08:ff:29:93:58:76:ea:5d:d3:3b:23:c8:c1:30:
9b:f4:56:8f:19:be:26:15:e2:0c:79:fa:06:7d:df:
ea:ce:98:ab:78:b9:f8:d3:94:d0:f6:2c:d5:d5:fa:
ac:28:22:91:39:ef:54:d6:0b:2b:97:61:f2:f1:13:
99:dd:47:fe:47:3a:39:a8:82:2f:d3:06:a9:11:0c:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:B1:0D:74:89:7C:37:DF:E6:AE:DE:36:46:BF:6C:4A:83:9A:95
X509v3 Authority Key Identifier:
keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:4c:6a:20:7f:a7:77:40:97:6a:3a:5f:18:ce:46:dc:5d:5f:
b3:23:2b:ae:90:4e:79:b0:84:0f:21:f3:08:6b:db:56:4b:63:
28:25:bb:7a:e4:99:25:99:06:78:22:c5:30:7b:7e:24:eb:fe:
b6:1f:19:a6:fa:cf:7e:6a:7d:5c:c4:f6:23:9b:59:f1:68:34:
88:57:8d:c6:3b:34:34:8d:e4:8b:75:63:38:d5:81:40:85:0f:
64:53:6f:a2:b2:0c:31:c3:90:51:85:4a:9b:c3:55:fc:d2:b5:
c7:84:fb:18:70:a2:d8:9a:e2:be:f0:66:2c:39:7d:4a:40:27:
ac:96:d7:20:fc:55:4e:aa:c7:0d:1c:a5:e1:ed:6f:11:ef:8a:
73:16:70:5c:fb:86:7f:63:4e:90:27:e8:79:63:5f:3a:89:6b:
0b:b4:3c:4d:c7:c3:33:65:9d:3f:ac:2b:d7:19:92:b4:2d:d0:
84:89:9a:e5:88:2f:41:b0:8f:e2:99:a4:55:a3:2d:ac:a7:4d:
be:7c:ae:2c:1a:56:e1:a8:7c:8d:0e:64:1b:34:71:2a:6b:56:
ab:7c:4b:65:a2:44:3f:20:b3:c3:27:27:d2:a0:8b:8f:92:bc:
12:04:81:8f:a9:fd:d4:7d:1b:29:a5:db:6e:64:d4:77:18:6f:
99:7e:45:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1
MUEyMzUwQUYwHhcNMjYxMDEwMTcxNjE5WhcNMjYxMDE3MTcxNjE5WjAYMRYwFAYD
VQQDEw02YWNhNzJlMy0xNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPUT+PyIn8NhiGdUUCMrAyD0Nlp1eK+SGUgXFUqbhir2fOyI5F2sxnG71sN9
XKUrWx5gvsAUsSQUdvFH9Nb+2YqrThgprXN6EWV2HF86vIMkMXpXETowBjpXK9i1
OozaMGP03N9CdjdBG4dSornG6k6FRnw6RxKUfH/F8wU6sj4YwOCfgiSwlfBi2ucu
7pjvzhuhQAqmt2eBOEMo8VmO6SFG0XA2Dl2ExuBM7G/RkOXb98F+CP8pk1h26l3T
OyPIwTCb9FaPGb4mFeIMefoGfd/qzpireLn405TQ9izV1fqsKCKROe9U1gsrl2Hy
8ROZ3Uf+Rzo5qIIv0wapEQwqPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZtsQ10
iXw33+au3jZGv2xKg5qVMB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB
ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjEwQS9BNTM4QURCODNBODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1
cVIxejAyUTg2N3RSb2pVSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJUxqIH+nd0CXajpfGM5G3F1fsyMrrpBOebCEDyHzCGvbVktjKCW7euSZJZkG
eCLFMHt+JOv+th8ZpvrPfmp9XMT2I5tZ8Wg0iFeNxjs0NI3ki3VjONWBQIUPZFNv
orIMMcOQUYVKm8NV/NK1x4T7GHCi2JrivvBmLDl9SkAnrJbXIPxVTqrHDRyl4e1v
Ee+KcxZwXPuGf2NOkCfoeWNfOolrC7Q8TcfDM2WdP6wr1xmStC3QhIma5YgvQbCP
4pmkVaMtrKdNvnyuLBpW4ah8jQ5kGzRxKmtWq3xLZaJEPyCzwycn0qCLj5K8EgSB
j6n91H0bKaXbbmTUdxhvmX5FKQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:11:25 2026 by rpki-client