
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json)
Hash identifier: R9l5IUExrF5RxBOXtWqcc4xIyDk5JiWXBOu+aOBL9dU=
Subject key identifier: F4:42:31:84:55:52:77:E7:7C:CC:A3:2E:96:20:55:6A:CD:B0:3B:8C
Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07
Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407
Certificate serial: 082E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
Manifest number: 081E
Signing time: Wed 22 Jul 2026 21:45:26 +0000
Manifest this update: Wed 22 Jul 2026 21:45:25 +0000
Manifest next update: Wed 29 Jul 2026 21:45:25 +0000
Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: JzTa75jsn3jugH1245J45n6g0+6/cBUphAwwjGA83CQ=)
2: 7B75895EC99D11F0BD81DF1AC4F9AE02.roa (hash: MdoiLiFCU+FiS26Nd+3XhdecjchpP9ZHTmPBbHqk7Pw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl
rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094 (0x82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407
Validity
Not Before: Jul 22 21:45:25 2026 GMT
Not After : Jul 29 21:45:25 2026 GMT
Subject: CN=6a6139f6-9cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:19:d6:47:91:87:4f:75:48:73:7c:bd:74:
a6:4b:27:25:38:4c:b8:02:80:a9:d0:60:69:a1:df:
0e:78:54:b3:7b:74:0e:5e:37:3a:83:51:e8:c8:91:
0e:9d:ab:d7:89:52:29:3f:fe:3d:80:53:a9:61:96:
17:01:68:d9:7a:a8:56:95:b5:bc:0f:9c:4b:4e:f3:
6c:15:d1:9a:8f:2b:1d:bc:77:fc:c6:f8:86:90:9b:
58:1a:5d:3d:39:7f:69:be:07:44:f8:51:5f:75:83:
a8:e9:2e:69:d9:46:6f:a1:62:c6:4c:21:e5:29:a8:
28:b9:f0:de:25:a9:e9:33:63:9b:c6:91:99:44:e9:
e3:6d:a7:29:33:0f:bc:75:69:4f:45:22:d5:17:59:
24:4a:2c:b9:5d:89:a3:bc:93:3f:f7:f1:ca:fa:9b:
22:6b:75:d1:c5:b3:fa:77:31:27:ce:63:df:06:1d:
ce:d3:4e:87:ce:c8:6d:12:71:e8:55:86:6e:06:8e:
fe:66:53:a8:6a:3c:a9:7f:dd:c6:63:ab:d6:83:ce:
dc:7d:56:77:8b:a0:be:e2:75:b5:a5:0e:5c:b5:22:
75:d7:70:a0:fe:67:1b:f1:02:0d:2e:84:9d:6d:79:
ef:6d:21:57:dc:7b:5a:95:73:fd:a1:23:c4:5e:fd:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:42:31:84:55:52:77:E7:7C:CC:A3:2E:96:20:55:6A:CD:B0:3B:8C
X509v3 Authority Key Identifier:
keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d8:8d:1c:a1:02:35:75:36:c8:f4:5f:da:26:0f:ab:42:10:
d6:c7:95:2c:96:30:e9:9a:d5:25:ee:bb:64:93:dc:18:c1:2c:
eb:83:dd:fd:02:59:5e:6d:af:46:ca:5f:c2:90:9b:22:97:f9:
19:77:da:1f:89:93:69:d2:3d:ca:cb:35:be:57:15:5f:e7:01:
c2:a4:32:17:5e:35:f7:10:d4:13:76:03:9c:1c:ca:fa:e7:d6:
71:98:8a:1f:6d:76:69:6b:a4:e7:85:b5:76:e3:88:d7:06:be:
ba:27:e0:bc:d6:c0:ca:21:c0:68:3c:ff:d0:81:eb:39:27:9a:
a5:93:72:1c:cb:7f:58:bd:f9:95:11:ff:e4:3e:72:26:61:5e:
55:72:40:40:53:b4:c5:af:70:ca:68:b0:b2:bc:7a:c7:c8:8c:
56:44:21:c2:d3:79:a0:ea:af:fb:ab:93:ef:57:e8:88:35:27:
22:9c:d5:67:5e:e6:ed:73:a3:0e:19:f2:78:ae:37:97:6e:8f:
d5:27:39:16:1c:6e:a5:14:f0:3c:47:bc:ed:49:b1:33:61:15:
28:b8:4d:ad:c6:0a:45:99:6b:da:ba:c7:9c:a1:bb:10:1b:c3:
ff:72:29:01:de:3e:e1:c7:44:72:07:67:c8:8c:d4:7a:73:16:
80:d2:26:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD
MjdDNDA0MDcwHhcNMjYwNzIyMjE0NTI1WhcNMjYwNzI5MjE0NTI1WjAYMRYwFAYD
VQQDEw02YTYxMzlmNi05Y2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsm0Z1keRh091SHN8vXSmSyclOEy4AoCp0GBpod8OeFSze3QOXjc6g1HoyJEO
navXiVIpP/49gFOpYZYXAWjZeqhWlbW8D5xLTvNsFdGajysdvHf8xviGkJtYGl09
OX9pvgdE+FFfdYOo6S5p2UZvoWLGTCHlKagoufDeJanpM2ObxpGZROnjbacpMw+8
dWlPRSLVF1kkSiy5XYmjvJM/9/HK+psia3XRxbP6dzEnzmPfBh3O006HzshtEnHo
VYZuBo7+ZlOoajypf93GY6vWg87cfVZ3i6C+4nW1pQ5ctSJ113Cg/mcb8QINLoSd
bXnvbSFX3HtalXP9oSPEXv3QkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRCMYRV
UnfnfMyjLpYgVWrNsDuMMB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF
OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF
R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnNiNHKECNXU2yPRf2iYPq0IQ1seVLJYw6ZrVJe67ZJPcGMEs64Pd/QJZXm2v
RspfwpCbIpf5GXfaH4mTadI9yss1vlcVX+cBwqQyF1419xDUE3YDnBzK+ufWcZiK
H212aWuk54W1duOI1wa+uifgvNbAyiHAaDz/0IHrOSeapZNyHMt/WL35lRH/5D5y
JmFeVXJAQFO0xa9wymiwsrx6x8iMVkQhwtN5oOqv+6uT71foiDUnIpzVZ17m7XOj
DhnyeK43l26P1Sc5FhxupRTwPEe87UmxM2EVKLhNrcYKRZlr2rrHnKG7EBvD/3Ip
Ad4+4cdEcgdnyIzUenMWgNIm+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:12 2026 by rpki-client