
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json)
Hash identifier: LTduwvkhIMdPqsJRSTaBW2F3XGEUr0Dnp+9tTudDFcc=
Subject key identifier: 69:AD:2E:33:19:63:70:A0:10:44:30:8B:A5:8E:D4:31:F0:0F:80:3A
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial: 04AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
Manifest number: 0466
Signing time: Wed 13 May 2026 00:26:43 +0000
Manifest this update: Wed 13 May 2026 00:26:43 +0000
Manifest next update: Wed 20 May 2026 00:26:43 +0000
Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: OcURwDZLBdKnJAnZuAxdYKg9DXWSLtszK2+jNdj4d+4=)
2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: ORf56ozU5OuuYhJ3jJBGO/DKLOqT1LcBoA7dCCaBtMw=)
3: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=)
4: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=)
5: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=)
6: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=)
7: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=)
8: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=)
9: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Validity
Not Before: May 13 00:26:43 2026 GMT
Not After : May 20 00:26:43 2026 GMT
Subject: CN=6a03c543-b49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:7e:d5:c0:7f:ea:b6:99:f2:c1:cd:af:81:
b3:97:6c:a7:ca:7b:b4:53:85:f7:99:f5:40:28:51:
4a:3b:4f:a7:f4:0d:1a:2a:44:ec:49:e3:76:54:d8:
29:87:52:8e:7a:51:80:c4:9c:21:18:ba:be:b4:ac:
97:6e:fe:88:65:d1:d9:62:24:c4:39:2b:f6:73:f8:
81:49:ac:05:c8:45:dc:13:76:a4:9a:76:e6:41:f8:
dc:94:6d:af:7f:7c:46:44:4d:ab:99:08:98:39:52:
84:af:3c:18:86:12:49:f4:24:1e:91:44:d7:f9:ce:
71:e8:1b:96:16:a0:b5:b5:9b:bc:d1:5b:a0:d3:16:
77:46:43:08:6c:b0:79:ef:b3:ca:3c:93:d1:01:75:
87:d6:6c:86:97:f9:50:01:9f:80:89:9a:64:21:75:
a2:de:f4:ac:e1:a6:62:00:a2:21:07:4c:45:b1:5a:
92:80:f2:ce:9a:e7:7a:2f:40:5e:42:09:14:f6:ca:
79:fe:41:87:ed:c1:32:50:17:e5:01:f6:b2:47:d1:
79:c6:45:86:6b:b2:16:90:20:65:83:3b:46:92:c5:
4a:aa:d5:61:11:82:2a:31:14:3f:7f:8d:d0:48:12:
b0:0c:9b:32:1b:07:8a:8c:28:89:5d:5b:54:78:21:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AD:2E:33:19:63:70:A0:10:44:30:8B:A5:8E:D4:31:F0:0F:80:3A
X509v3 Authority Key Identifier:
keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:f8:60:f9:b0:d6:60:48:ef:ad:c2:10:39:03:a3:cc:1a:9a:
e4:dc:e6:4a:69:88:8c:16:da:95:bb:6d:49:12:03:83:21:2b:
d2:cb:69:1d:ab:e0:5d:c7:04:45:ec:1a:bb:56:d9:c3:73:4d:
26:b8:c9:e3:4b:b8:96:4a:8d:47:5f:94:59:79:d3:7a:71:e5:
e1:e6:ab:16:a2:cc:d9:7c:d5:52:2c:10:b4:3b:8d:a1:2c:2a:
fc:a9:a3:10:dc:33:63:c7:10:b9:c8:c6:c5:13:23:07:78:0f:
9c:5c:e2:84:b7:cf:08:98:89:11:7b:71:f6:2d:90:11:f5:08:
2d:da:ac:c7:5b:c0:55:11:81:40:49:b9:25:91:6f:fd:ca:c3:
13:9c:a0:60:3b:8f:d6:67:b8:ba:4a:08:20:26:e0:ed:c3:c5:
f3:ac:80:51:57:93:34:f1:40:fc:c8:5f:0e:68:c5:88:10:c3:
71:69:92:fc:6a:d2:2c:bb:7f:85:3e:6e:49:07:7e:d3:07:73:
ca:34:c4:1c:70:2d:56:ad:1f:f7:ce:6f:cb:66:b6:c8:f0:b5:
e0:7e:99:1e:2c:6e:92:be:c2:18:4f:f5:57:e6:b3:d3:4f:de:
bd:72:b5:5a:60:99:af:e8:05:7a:7e:f0:71:02:34:6a:11:ae:
e9:b4:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:29 2026 by rpki-client