
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
File: XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json)
Hash identifier: Ulva2XOnoJWjx3fGA0PTHiZVGo5Ga/+bvReTd3v2IGI=
Subject key identifier: 16:F9:FD:A4:BB:84:38:EB:F2:9E:C4:16:8D:A7:99:13:40:C3:91:53
Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07
Certificate issuer: /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
Manifest number: 011A
Signing time: Fri 27 Mar 2026 05:18:05 +0000
Manifest this update: Fri 27 Mar 2026 05:18:05 +0000
Manifest next update: Fri 03 Apr 2026 05:18:05 +0000
Files and hashes: 1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: nwgk7X09JYTtcnZ/RlL1QfZFkUp0ptTv3rV8InwtUmk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl
rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B190F, serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
Validity
Not Before: Mar 27 05:18:05 2026 GMT
Not After : Apr 3 05:18:05 2026 GMT
Subject: CN=69c6130d-71ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:f5:23:92:70:6e:e3:11:e6:57:38:b5:5b:
89:e3:5d:74:6b:cf:93:92:fe:c5:06:f4:e0:36:33:
a4:bc:32:08:d1:5b:c2:d8:0c:dc:8c:db:4e:32:05:
fb:c9:31:4b:93:3d:0f:fd:91:b0:bc:0c:1c:cd:5c:
1c:b6:18:d7:c5:a8:98:65:6f:b8:7e:15:b3:f4:f3:
9d:12:f4:15:cf:18:fb:b9:9e:93:5e:92:32:a4:ab:
9d:9e:cb:ba:7b:58:fa:cd:a3:c3:d8:fe:63:9c:88:
3e:a4:f0:7f:55:87:c2:8d:7b:fc:29:97:5a:7e:aa:
3b:82:c1:65:9c:69:54:77:bd:77:39:63:4c:79:4f:
62:e6:4c:5b:e1:15:d1:8f:8f:b7:3f:c2:3f:7f:08:
d3:42:81:8a:72:ad:37:bb:11:5e:92:cc:11:4a:5f:
9c:41:5c:1c:5b:7c:26:ef:e2:c7:ce:57:f1:a0:fc:
09:b1:5f:3c:1e:f3:80:26:97:d5:25:11:72:db:ef:
db:a8:ba:4d:11:9b:78:a6:32:e1:b4:e0:37:57:14:
27:4e:b4:6e:3b:51:65:f9:b3:b7:c5:25:c9:63:1b:
b9:b4:e8:e5:be:75:3c:46:6c:b6:f2:4c:18:6b:4b:
09:f6:97:ec:06:da:72:0a:21:68:01:f0:83:67:91:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F9:FD:A4:BB:84:38:EB:F2:9E:C4:16:8D:A7:99:13:40:C3:91:53
X509v3 Authority Key Identifier:
keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:87:ff:52:d6:1c:1c:b1:22:98:8e:20:ca:aa:6f:19:0e:cc:
8c:f5:dd:b4:6a:34:cb:43:f7:93:c0:c5:7d:7e:13:c4:59:23:
19:43:67:cb:27:75:ef:45:f1:de:b3:d4:1c:7c:13:11:a4:b6:
29:fb:70:b2:db:e8:7c:00:8f:18:c2:60:cf:ff:b9:dc:f4:17:
15:b4:67:95:30:f1:4f:c8:e6:86:d5:63:19:84:27:3a:30:f5:
7d:ba:c4:81:92:17:90:3e:9c:40:f6:c9:c8:3a:3a:9c:3f:ca:
7f:82:51:9d:91:b2:8a:bf:c0:36:02:9e:ce:e2:1b:56:40:31:
d2:15:3f:6f:0d:8a:77:4c:6a:dc:57:17:07:5e:96:83:d1:ac:
4b:72:ff:ea:53:c5:6c:c7:85:05:e9:c7:23:ec:5e:58:21:bc:
cb:02:e4:42:17:63:05:78:b1:60:d1:2c:25:7e:06:3b:69:af:
6b:99:55:44:30:48:d9:80:ba:df:d4:96:d7:12:49:41:f9:3d:
3a:ab:73:15:52:d1:33:31:1f:d4:f8:5d:a7:a7:4c:bc:ae:12:
68:57:c8:82:ab:9d:3f:38:f0:57:5d:9d:6b:84:5e:65:23:04:
7a:95:31:95:8b:39:4e:e2:c4:d5:2d:28:c8:8f:1e:bc:25:cb:
9b:80:b7:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE5MEYxMTAvBgNVBAUTKDVFOTYwRDUxODhGMDM2Rjc5RUFBNzk0MTU1MkNDRjQ2
Qjg3QUJGMDcwHhcNMjYwMzI3MDUxODA1WhcNMjYwNDAzMDUxODA1WjAYMRYwFAYD
VQQDEw02OWM2MTMwZC03MWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsuz1I5JwbuMR5lc4tVuJ4110a8+Tkv7FBvTgNjOkvDII0VvC2AzcjNtOMgX7
yTFLkz0P/ZGwvAwczVwcthjXxaiYZW+4fhWz9POdEvQVzxj7uZ6TXpIypKudnsu6
e1j6zaPD2P5jnIg+pPB/VYfCjXv8KZdafqo7gsFlnGlUd713OWNMeU9i5kxb4RXR
j4+3P8I/fwjTQoGKcq03uxFekswRSl+cQVwcW3wm7+LHzlfxoPwJsV88HvOAJpfV
JRFy2+/bqLpNEZt4pjLhtOA3VxQnTrRuO1Fl+bO3xSXJYxu5tOjlvnU8Rmy28kwY
a0sJ9pfsBtpyCiFoAfCDZ5EjRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBb5/aS7
hDjr8p7EFo2nmRNAw5FTMB8GA1UdIwQYMBaAFF6WDVGI8Db3nqp5QVUsz0a4er8H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9DODVCQTEyQzdC
RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9YcFlOVVlqd052ZWVxbmxCVlN6UFJyaDZ2
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hwWU5VWWp3TnZlZXFubEJWU3pQUnJoNnZ3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTkwRi9DODVCQTEyQzdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9YcFlOVVlqd052
ZWVxbmxCVlN6UFJyaDZ2d2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfIf/UtYcHLEimI4gyqpvGQ7MjPXdtGo0y0P3k8DFfX4TxFkjGUNnyyd170Xx
3rPUHHwTEaS2KftwstvofACPGMJgz/+53PQXFbRnlTDxT8jmhtVjGYQnOjD1fbrE
gZIXkD6cQPbJyDo6nD/Kf4JRnZGyir/ANgKezuIbVkAx0hU/bw2Kd0xq3FcXB16W
g9GsS3L/6lPFbMeFBenHI+xeWCG8ywLkQhdjBXixYNEsJX4GO2mva5lVRDBI2YC6
39SW1xJJQfk9OqtzFVLRMzEf1Phdp6dMvK4SaFfIgqudPzjwV12da4ReZSMEepUx
lYs5TuLE1S0oyI8evCXLm4C3bg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:24 2026 by rpki-client