
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json)
Hash identifier: OiRbMaqRhSdU7Nn7y/jO8SV8wudRm8e5V36SdUuxCcA=
Subject key identifier: 53:19:AF:C0:37:BB:06:2A:54:86:F1:28:71:F9:72:9D:C2:1F:00:D4
Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92
Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792
Certificate serial: 359F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
Manifest number: 3582
Signing time: Wed 22 Jul 2026 14:49:15 +0000
Manifest this update: Wed 22 Jul 2026 14:49:15 +0000
Manifest next update: Wed 29 Jul 2026 14:49:15 +0000
Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: pFykGMhqYqw2fDx5FXS4vB8kytz8vaBYyF4wYU3Zn/U=)
2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: u0liUKUx/5cqgAqMwjK3Jr9++ba1PKf6CQYNnuhwu/Y=)
3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: INnaV0pNcRBw1wlHuRp8r9xMtrJx1g7hzwjOKtk2crw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl
rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13727 (0x359f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792
Validity
Not Before: Jul 22 14:49:15 2026 GMT
Not After : Jul 29 14:49:15 2026 GMT
Subject: CN=6a60d86b-d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:3d:f1:ab:aa:62:19:69:46:3d:4a:52:20:
e0:44:7d:07:19:1b:87:e3:df:9f:b9:4d:d4:cf:55:
72:e3:a9:5e:b5:e8:da:ad:95:34:9e:bc:6b:48:a0:
6a:0e:de:60:dc:6a:c4:ad:f4:50:f5:7c:18:a4:65:
99:25:30:74:df:49:f4:2d:4c:72:8f:f7:84:94:cc:
f9:09:f1:4a:b4:59:b9:f5:c1:03:78:31:12:7b:37:
ea:4c:cf:e6:b0:4b:df:47:3d:54:34:76:43:b7:47:
b1:7c:2c:72:56:69:67:dd:23:b3:4f:de:7b:84:f1:
53:38:45:3f:24:73:14:59:96:d3:80:10:0e:2e:ba:
07:38:98:a6:6b:d4:f5:8e:79:c0:9f:ac:d0:53:7e:
4e:ae:44:86:33:0f:10:09:d6:f9:8c:89:b3:25:e1:
30:9d:72:79:30:05:62:e2:e2:31:ee:71:31:15:1b:
91:88:bd:f5:89:fd:1d:85:5e:cc:1f:17:94:a5:89:
87:c3:2f:62:89:f9:7a:09:0e:6f:d2:1f:1e:27:d7:
cf:4b:d1:b1:50:25:1f:9d:33:e7:df:70:9b:d6:1d:
9e:04:86:2d:5c:4a:4f:80:d0:1f:ea:55:30:79:d4:
8a:39:08:0a:c4:d1:b8:20:86:f3:bc:c9:55:32:bc:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:19:AF:C0:37:BB:06:2A:54:86:F1:28:71:F9:72:9D:C2:1F:00:D4
X509v3 Authority Key Identifier:
keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:a1:12:ae:d9:cd:bf:0d:4c:0b:40:50:e6:24:d2:c1:71:93:
70:22:6c:ad:a8:26:b1:98:32:e6:20:3c:01:3d:04:43:db:bf:
73:fa:b9:a1:97:5e:c8:95:a8:ba:38:17:40:69:58:e1:61:75:
c8:dd:9b:3c:47:dc:b5:e1:1a:0c:a5:92:da:2b:55:55:13:2f:
7c:1b:cf:24:e2:91:37:7a:e6:b0:77:e0:26:08:e1:5d:ac:ee:
b8:b4:c4:39:26:38:08:c7:ff:d1:39:a5:b2:a4:4e:b4:6e:83:
8c:e5:2f:7b:3e:22:b9:f3:6c:72:db:48:8a:f0:90:30:9c:91:
76:b8:01:8b:d7:bf:b7:32:c2:9f:49:34:dc:04:0e:8e:73:8f:
c4:e6:6d:48:0c:fd:42:ec:ed:35:f5:50:c3:d0:17:97:d4:5e:
b5:b4:ea:8b:45:56:6b:6d:8a:38:35:25:54:8d:9a:06:c6:42:
a9:f0:a0:eb:78:3f:ba:df:18:44:d9:78:25:08:89:d2:73:49:
15:c2:b8:92:88:81:a2:23:4d:fa:31:96:90:bc:5d:1a:95:b3:
20:08:5d:ae:30:1d:4c:10:fa:c4:89:d9:a9:5d:22:e1:6c:74:
a0:11:b3:6d:b5:fa:3e:46:10:d9:a5:4f:d4:0a:46:40:b1:54:
0d:7b:8c:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0
QTg5QzQ3OTIwHhcNMjYwNzIyMTQ0OTE1WhcNMjYwNzI5MTQ0OTE1WjAYMRYwFAYD
VQQDEw02YTYwZDg2Yi1kNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3zs98auqYhlpRj1KUiDgRH0HGRuH49+fuU3Uz1Vy46letejarZU0nrxrSKBq
Dt5g3GrErfRQ9XwYpGWZJTB030n0LUxyj/eElMz5CfFKtFm59cEDeDESezfqTM/m
sEvfRz1UNHZDt0exfCxyVmln3SOzT957hPFTOEU/JHMUWZbTgBAOLroHOJima9T1
jnnAn6zQU35OrkSGMw8QCdb5jImzJeEwnXJ5MAVi4uIx7nExFRuRiL31if0dhV7M
HxeUpYmHwy9iifl6CQ5v0h8eJ9fPS9GxUCUfnTPn33Cb1h2eBIYtXEpPgNAf6lUw
edSKOQgKxNG4IIbzvMlVMrzQKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMZr8A3
uwYqVIbxKHH5cp3CHwDUMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE
OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj
NFpBWk1NUTlGdHhLaWNSNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJqESrtnNvw1MC0BQ5iTSwXGTcCJsragmsZgy5iA8AT0EQ9u/c/q5oZdeyJWo
ujgXQGlY4WF1yN2bPEfcteEaDKWS2itVVRMvfBvPJOKRN3rmsHfgJgjhXazuuLTE
OSY4CMf/0TmlsqROtG6DjOUvez4iufNscttIivCQMJyRdrgBi9e/tzLCn0k03AQO
jnOPxOZtSAz9QuztNfVQw9AXl9RetbTqi0VWa22KODUlVI2aBsZCqfCg63g/ut8Y
RNl4JQiJ0nNJFcK4koiBoiNN+jGWkLxdGpWzIAhdrjAdTBD6xInZqV0i4Wx0oBGz
bbX6PkYQ2aVP1ApGQLFUDXuMJw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:00 2026 by rpki-client