
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json)
Hash identifier: Gtm5Aix+8sQxP4fXQMk5iiv2AijjEFzmX8Oh3A53ciw=
Subject key identifier: 39:86:99:BB:38:D7:69:00:26:2E:EB:A4:02:B8:E5:2A:A3:DB:02:97
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
Manifest number: 017F
Signing time: Wed 25 Mar 2026 03:51:38 +0000
Manifest this update: Wed 25 Mar 2026 03:51:38 +0000
Manifest next update: Wed 01 Apr 2026 03:51:38 +0000
Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: UNNWlIW1EkB3mZGDEz4J1tVl7foC4vc+ecrUia8QK9k=)
2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: ddXLbsnNUJaK9PsrG7ysG03ljzK1G3ktx48YRWrpG8U=)
3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: EZoQFirW5esN1VtBDXZEiHNnC8g7jkK9EPytiN1M6xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Validity
Not Before: Mar 25 03:51:38 2026 GMT
Not After : Apr 1 03:51:38 2026 GMT
Subject: CN=69c35bca-9f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:9d:cb:aa:28:bc:bc:5a:7e:74:5a:65:b3:
60:8b:34:96:9b:ac:48:15:8c:31:94:95:e3:d2:ad:
82:de:6f:98:4a:10:4f:64:c2:3c:dd:ca:7a:65:89:
a2:7d:4f:eb:ea:7f:5d:f5:d8:8a:a2:e8:0a:4b:08:
be:6b:aa:f0:30:7a:a4:eb:50:d7:99:dd:a4:c5:ea:
79:1b:c9:48:2b:fa:19:8e:30:53:40:61:68:1d:f4:
40:1e:3a:46:49:78:d5:39:e0:16:38:54:b2:32:af:
e8:94:4d:02:ac:2b:aa:6b:99:87:c9:02:88:f6:c0:
95:8f:fe:86:1b:b3:a9:31:7a:90:06:73:b1:d0:69:
f9:94:e7:c1:90:bc:a0:70:27:c0:15:64:dd:28:49:
c7:6d:67:f3:8a:b6:ac:ab:7b:90:a5:b5:1b:82:4f:
67:c0:4d:58:a9:32:f7:6b:b7:a6:07:01:5e:74:2b:
2a:c2:40:57:67:20:5a:9b:ac:98:0a:d8:0c:bd:d4:
ca:d8:36:93:5d:df:6c:44:50:a4:0f:2a:37:45:46:
cb:f8:fd:c6:c3:26:67:38:e5:76:fd:32:38:73:eb:
1d:23:36:e6:f3:72:b2:5f:fe:e1:73:23:57:77:58:
d6:c1:a6:34:7d:e9:57:3f:fa:9e:da:65:82:16:62:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:86:99:BB:38:D7:69:00:26:2E:EB:A4:02:B8:E5:2A:A3:DB:02:97
X509v3 Authority Key Identifier:
keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:75:dd:84:6c:72:bd:b9:22:91:c0:7c:61:76:c9:69:a2:e1:
db:10:8d:2b:ec:b2:8d:d6:31:10:32:15:6c:0d:3b:be:db:2b:
a5:90:27:06:90:23:a3:77:bc:83:6f:91:6d:8d:0b:5d:ad:55:
0e:d0:c4:9c:42:46:75:0b:36:eb:a8:22:71:4a:bf:fa:5a:4d:
a5:e8:34:93:cf:74:f4:db:bd:80:4d:5a:d8:0a:c0:22:70:12:
eb:9f:25:88:95:1b:19:1a:ab:95:41:6b:5e:97:a4:05:8b:d2:
12:14:c4:0b:fd:ee:49:f4:4d:a2:a2:12:ec:63:3e:05:85:3d:
c4:63:b7:15:dd:51:f0:4a:af:8a:8d:d8:75:2b:57:22:59:97:
bc:93:1b:6e:a1:9c:53:d0:f6:9d:d9:ec:79:5a:49:41:04:b1:
9e:9b:0e:77:75:6c:c4:59:2c:91:10:71:f7:c4:8d:9b:fd:45:
b2:07:f6:66:8b:aa:55:52:3e:3b:66:87:1e:ed:8e:b6:07:6a:
df:26:70:3f:a8:55:ab:48:e5:e0:80:dd:3a:37:68:ae:a2:34:
58:5a:d3:7b:63:cb:62:8d:0d:3f:2a:7d:94:0c:0d:32:67:f8:
72:94:4a:77:63:92:df:b0:99:a1:1e:7c:d1:7e:35:cb:f4:24:
cb:6f:f9:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy
OTFDNDdCQUYwHhcNMjYwMzI1MDM1MTM4WhcNMjYwNDAxMDM1MTM4WjAYMRYwFAYD
VQQDEw02OWMzNWJjYS05Zjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz86dy6oovLxafnRaZbNgizSWm6xIFYwxlJXj0q2C3m+YShBPZMI83cp6ZYmi
fU/r6n9d9diKougKSwi+a6rwMHqk61DXmd2kxep5G8lIK/oZjjBTQGFoHfRAHjpG
SXjVOeAWOFSyMq/olE0CrCuqa5mHyQKI9sCVj/6GG7OpMXqQBnOx0Gn5lOfBkLyg
cCfAFWTdKEnHbWfzirasq3uQpbUbgk9nwE1YqTL3a7emBwFedCsqwkBXZyBam6yY
CtgMvdTK2DaTXd9sRFCkDyo3RUbL+P3GwyZnOOV2/TI4c+sdIzbm83KyX/7hcyNX
d1jWwaY0felXP/qe2mWCFmIYMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmGmbs4
12kAJi7rpAK45Sqj2wKXMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx
MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw
UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEXXdhGxyvbkikcB8YXbJaaLh2xCNK+yyjdYxEDIVbA07vtsrpZAnBpAjo3e8
g2+RbY0LXa1VDtDEnEJGdQs266gicUq/+lpNpeg0k8909Nu9gE1a2ArAInAS658l
iJUbGRqrlUFrXpekBYvSEhTEC/3uSfRNoqIS7GM+BYU9xGO3Fd1R8Eqvio3YdStX
IlmXvJMbbqGcU9D2ndnseVpJQQSxnpsOd3VsxFkskRBx98SNm/1Fsgf2ZouqVVI+
O2aHHu2Otgdq3yZwP6hVq0jl4IDdOjdorqI0WFrTe2PLYo0NPyp9lAwNMmf4cpRK
d2OS37CZoR580X41y/Qky2/5wA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:10 2026 by rpki-client