
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json)
Hash identifier: YujdYwcW0A3YUijp6vJHTFH45sdkSYoY0aX2yXnptiw=
Subject key identifier: FE:23:7E:8C:8A:71:90:E1:F5:46:D0:C5:12:F6:E8:7A:9B:66:F0:65
Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
Manifest number: 0167
Signing time: Fri 27 Mar 2026 04:19:04 +0000
Manifest this update: Fri 27 Mar 2026 04:19:04 +0000
Manifest next update: Fri 03 Apr 2026 04:19:04 +0000
Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: RyCXMn9qsdxUYQxb/3rrXsOJb1IfuoPLSJZ6JrzZ2m4=)
2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: tC7+VJT22TXj7yUL7xjBDLMNT6SajKWeU3nOU11r1Qw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Validity
Not Before: Mar 27 04:19:04 2026 GMT
Not After : Apr 3 04:19:04 2026 GMT
Subject: CN=69c60538-e045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:08:89:c0:3c:c9:ef:e3:e3:1f:d6:43:91:
3f:d5:91:0d:fe:9f:e4:35:ba:55:1b:c3:a7:79:a7:
2b:3b:2c:fe:0e:37:a0:ec:f6:38:33:42:c6:98:06:
74:f7:93:3e:ec:6d:5f:46:11:af:5d:39:12:48:b6:
44:44:05:5e:90:0e:34:3a:fd:65:20:0c:d7:b3:89:
6d:44:98:1a:fe:d2:43:c1:fc:7f:65:ad:91:4c:35:
f1:52:1a:68:56:5d:c6:fd:7e:a1:6c:52:48:35:65:
4b:b5:3c:4d:13:b8:8f:f6:6a:fe:69:f1:74:80:cb:
fe:20:eb:a6:57:5c:5e:2b:1d:2d:f2:79:10:83:e4:
ca:15:0e:13:30:89:3b:cf:a6:95:6d:65:11:d8:29:
79:53:63:d0:8d:56:da:1b:48:c0:1d:46:f9:22:f4:
8b:e1:a6:5f:22:af:4f:cc:38:78:59:20:f2:f6:9e:
2c:8b:ec:39:52:27:fc:09:de:b9:2b:3d:c2:54:7b:
ba:67:fe:7b:80:a2:12:c5:12:4a:42:24:52:e9:df:
b5:df:b9:69:42:26:21:8c:cc:3f:3e:64:9d:47:d1:
1b:2b:8e:93:6e:58:94:60:6c:91:60:ab:34:72:14:
e9:9c:67:53:ba:f4:aa:69:fd:cd:ed:47:8e:23:93:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:7E:8C:8A:71:90:E1:F5:46:D0:C5:12:F6:E8:7A:9B:66:F0:65
X509v3 Authority Key Identifier:
keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cc:32:f8:a1:56:83:2e:28:74:09:0c:d2:15:91:54:a6:c6:
4e:9c:2d:05:c3:e6:f0:a6:32:da:23:46:41:56:db:b9:b5:6c:
fb:1a:2e:d3:72:45:fc:6c:61:c2:58:83:1c:f2:94:ea:9d:ab:
60:46:2c:ee:cd:86:30:86:b1:11:96:35:69:c6:a8:b6:04:f6:
3d:4c:06:90:4a:54:21:25:0b:3f:dc:42:f6:b6:c2:a6:8d:5a:
bb:12:eb:c3:3f:aa:22:02:49:64:44:c0:9e:a6:29:de:77:d1:
69:37:49:20:23:2c:98:a5:d9:fc:84:50:a0:c0:e0:c1:72:69:
b9:e9:1f:a3:b1:91:4c:dc:b1:a8:56:e7:25:3d:75:3d:48:f9:
97:fc:2c:e2:6e:ee:21:14:fb:f7:07:56:87:2d:5a:54:b3:a7:
cf:b7:7b:eb:38:91:6f:80:2a:fe:4e:f4:78:df:e4:f4:fb:7a:
a7:81:39:ed:f4:96:3d:78:2c:73:da:6b:d5:06:0d:ba:d5:86:
98:60:16:c9:53:0b:a6:e3:03:ff:94:4a:0e:0e:00:fd:af:1d:
29:25:39:4f:23:7e:08:36:df:6b:ee:30:19:4f:ed:03:f7:23:
ed:ca:3e:5b:2b:49:42:cd:b4:a0:9b:02:ec:17:b9:19:1b:b2:
35:71:54:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0ODExMTAvBgNVBAUTKDVERUFFMzg1MzBGODE1RkJGMEI5QjNGOEVGNjM3NTA3
ODZDOEFDMEEwHhcNMjYwMzI3MDQxOTA0WhcNMjYwNDAzMDQxOTA0WjAYMRYwFAYD
VQQDEw02OWM2MDUzOC1lMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwvMIicA8ye/j4x/WQ5E/1ZEN/p/kNbpVG8OneacrOyz+Djeg7PY4M0LGmAZ0
95M+7G1fRhGvXTkSSLZERAVekA40Ov1lIAzXs4ltRJga/tJDwfx/Za2RTDXxUhpo
Vl3G/X6hbFJINWVLtTxNE7iP9mr+afF0gMv+IOumV1xeKx0t8nkQg+TKFQ4TMIk7
z6aVbWUR2Cl5U2PQjVbaG0jAHUb5IvSL4aZfIq9PzDh4WSDy9p4si+w5Uif8Cd65
Kz3CVHu6Z/57gKISxRJKQiRS6d+137lpQiYhjMw/PmSdR9EbK46TbliUYGyRYKs0
chTpnGdTuvSqaf3N7UeOI5MhMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4jfoyK
cZDh9UbQxRL26HqbZvBlMB8GA1UdIwQYMBaAFF3q44Uw+BX78Lmz+O9jdQeGyKwK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ4MS9CQzg0MEY0NjAy
QzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZmdnd1YlA0NzJOMUI0Ykly
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hlcmpoVEQ0RmZ2d3ViUDQ3Mk4xQjRiSXJBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDQ4MS9CQzg0MEY0NjAyQzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZm
dnd1YlA0NzJOMUI0YklyQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP8wy+KFWgy4odAkM0hWRVKbGTpwtBcPm8KYy2iNGQVbbubVs+xou03JF/Gxh
wliDHPKU6p2rYEYs7s2GMIaxEZY1acaotgT2PUwGkEpUISULP9xC9rbCpo1auxLr
wz+qIgJJZETAnqYp3nfRaTdJICMsmKXZ/IRQoMDgwXJpuekfo7GRTNyxqFbnJT11
PUj5l/ws4m7uIRT79wdWhy1aVLOnz7d76ziRb4Aq/k70eN/k9Pt6p4E57fSWPXgs
c9pr1QYNutWGmGAWyVMLpuMD/5RKDg4A/a8dKSU5TyN+CDbfa+4wGU/tA/cj7co+
WytJQs20oJsC7Be5GRuyNXFUpg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:26 2026 by rpki-client