
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json)
Hash identifier: EbMM9kloEcJ9PQqra2GumcjAE4zgxx4YvD6ljVVNR1I=
Subject key identifier: 16:CD:30:83:CB:F6:ED:0F:07:DF:6E:34:81:DB:99:C2:43:78:6E:24
Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Certificate serial: 073F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
Manifest number: 0737
Signing time: Thu 24 Sep 2026 21:51:34 +0000
Manifest this update: Thu 24 Sep 2026 21:51:33 +0000
Manifest next update: Thu 01 Oct 2026 21:51:33 +0000
Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: HJOALgQQcOMdU1Lrq8VOoq2MSOaL7D7dQeGrfa0Qr5M=)
2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: ya+5X2X8zd4MO/3KegCTLB9V6NcmJXOYCWI69T9MPig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl
rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Validity
Not Before: Sep 24 21:51:33 2026 GMT
Not After : Oct 1 21:51:33 2026 GMT
Subject: CN=6ab59b66-8ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:ae:11:42:fb:90:85:36:33:22:50:84:1f:
99:11:ae:86:ec:f6:b3:e6:b3:e1:2f:93:c9:57:f6:
56:16:48:47:50:30:2f:36:45:de:eb:1a:96:15:ee:
32:08:1f:b7:35:b8:90:1c:12:2d:92:6a:60:30:d2:
13:7e:5a:2b:d6:90:c5:27:95:90:4a:ce:7c:71:d1:
5e:dc:89:a6:1c:25:20:e6:c4:9e:32:d0:7a:2e:86:
f2:d7:92:e6:d1:a0:7d:a4:7b:37:5f:27:1b:2a:ac:
e5:cd:52:3b:77:00:70:ef:df:a5:d0:ce:00:68:39:
85:8f:71:ba:27:11:34:62:59:be:32:69:7b:21:4a:
98:57:88:d5:48:e1:30:4c:db:f0:1c:5c:82:67:a1:
a4:04:db:3c:60:19:f6:1c:e0:05:3a:7a:62:3a:62:
a1:cd:cc:f9:36:8c:06:6a:95:51:c3:36:b7:b8:5c:
43:81:82:c1:72:44:96:74:b8:82:fd:da:d5:7d:7e:
7f:31:75:97:0b:c7:e6:66:65:36:c0:20:50:fb:55:
3c:9b:cc:54:f4:00:2d:3c:c6:70:61:ca:3e:85:2f:
2f:8a:76:02:93:50:2b:19:7b:1b:55:9d:88:7c:54:
d5:68:8e:90:0f:ac:4a:46:37:25:93:fb:bc:88:1e:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CD:30:83:CB:F6:ED:0F:07:DF:6E:34:81:DB:99:C2:43:78:6E:24
X509v3 Authority Key Identifier:
keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:64:4f:2e:56:6f:75:0b:05:02:78:1f:97:8f:16:88:94:
12:f5:4f:4b:68:f7:db:11:aa:d8:10:3d:dc:83:2f:f8:eb:6d:
24:3b:5a:58:37:91:f7:b4:8e:20:53:3c:6c:45:df:2c:82:46:
09:bd:45:3e:4c:f5:78:52:52:d8:0f:05:30:cb:be:9b:6a:ac:
38:0c:ac:71:1a:2d:07:68:a7:6b:d1:4d:f9:5c:4d:19:34:36:
fb:d1:50:a1:44:62:58:be:b9:77:aa:be:ec:cb:39:ea:bc:6d:
70:1a:b0:31:b3:07:e1:13:da:59:60:07:9e:61:02:d9:ce:b9:
ed:04:a8:b1:78:3e:86:40:10:f5:5f:c1:37:02:f5:d2:ff:1c:
a6:a1:24:20:c5:e0:d3:81:9e:a5:65:b8:ee:99:f5:07:93:6d:
72:9b:a6:58:90:bb:c1:92:8b:12:86:b5:59:c2:79:a2:2c:75:
4f:2f:b9:42:56:4d:f1:9f:02:78:c0:c9:3b:bd:8d:c7:b7:5e:
78:e2:9c:26:b3:5c:4c:11:22:f0:6e:66:1b:6e:9f:46:ae:7c:
ab:c5:7d:f9:16:9f:e9:0c:c7:a3:c4:25:3f:83:5d:7a:11:32:
76:f3:7f:54:70:82:51:f2:3b:c6:87:82:88:48:4e:9d:02:93:
51:8b:88:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0
REU1NERGQjEwHhcNMjYwOTI0MjE1MTMzWhcNMjYxMDAxMjE1MTMzWjAYMRYwFAYD
VQQDEw02YWI1OWI2Ni04ZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoUyuEUL7kIU2MyJQhB+ZEa6G7Paz5rPhL5PJV/ZWFkhHUDAvNkXe6xqWFe4y
CB+3NbiQHBItkmpgMNITflor1pDFJ5WQSs58cdFe3ImmHCUg5sSeMtB6Loby15Lm
0aB9pHs3XycbKqzlzVI7dwBw79+l0M4AaDmFj3G6JxE0Ylm+Mml7IUqYV4jVSOEw
TNvwHFyCZ6GkBNs8YBn2HOAFOnpiOmKhzcz5NowGapVRwza3uFxDgYLBckSWdLiC
/drVfX5/MXWXC8fmZmU2wCBQ+1U8m8xU9AAtPMZwYco+hS8vinYCk1ArGXsbVZ2I
fFTVaI6QD6xKRjclk/u8iB6lZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbNMIPL
9u0PB99uNIHbmcJDeG4kMB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx
RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR
eEJGa281SHVrRHRONVUzN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPa1kTy5Wb3ULBQJ4H5ePFoiUEvVPS2j32xGq2BA93IMv+OttJDtaWDeR97SO
IFM8bEXfLIJGCb1FPkz1eFJS2A8FMMu+m2qsOAyscRotB2ina9FN+VxNGTQ2+9FQ
oURiWL65d6q+7Ms56rxtcBqwMbMH4RPaWWAHnmEC2c657QSosXg+hkAQ9V/BNwL1
0v8cpqEkIMXg04GepWW47pn1B5NtcpumWJC7wZKLEoa1WcJ5oix1Ty+5QlZN8Z8C
eMDJO72Nx7deeOKcJrNcTBEi8G5mG26fRq58q8V9+Raf6QzHo8QlP4NdehEydvN/
VHCCUfI7xoeCiEhOnQKTUYuIWQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:45:29 2026 by rpki-client