
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier: uKulxiOBK3UFbnDLtrYbWgepI4w5HHr6fIwl2sFXrBE=
Subject key identifier: F1:CC:5F:DA:88:A8:EE:C0:23:9C:17:D1:AA:FB:C3:52:38:7B:DB:E9
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 054C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number: 0503
Signing time: Sat 26 Sep 2026 23:48:07 +0000
Manifest this update: Sat 26 Sep 2026 23:48:07 +0000
Manifest next update: Sat 03 Oct 2026 23:48:07 +0000
Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: W6XR1pdNHY1hsv5LVflWQySjUaxn4toxWn7qE0qWWR8=)
2: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
3: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
4: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
6: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
8: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
9: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
10: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
11: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
12: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
13: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356 (0x54c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Sep 26 23:48:07 2026 GMT
Not After : Oct 3 23:48:07 2026 GMT
Subject: CN=6ab859b7-b388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:86:2c:75:49:b5:f5:45:78:3a:8b:0b:b3:
4b:3d:02:e9:3b:9c:fc:d2:00:fb:0e:40:81:98:a4:
4b:a2:32:65:e9:9a:e7:11:52:b0:dd:0e:d4:eb:6e:
a2:84:d0:13:33:ce:90:eb:73:a9:51:97:7d:8e:ad:
d0:39:36:cb:2d:54:3e:56:9d:57:5a:3a:3f:dd:2f:
11:26:21:db:d2:cb:3c:bb:0e:33:06:58:45:30:27:
65:bc:3a:ef:b8:98:28:be:8c:81:3b:61:b2:35:4c:
d7:07:2d:aa:88:86:ef:a4:d9:22:1f:82:8e:bc:85:
09:22:96:a5:c7:b8:ae:88:79:6e:12:24:36:c4:61:
c6:f5:c9:17:f1:1b:83:42:5d:65:0a:4c:68:93:79:
3e:3a:6c:c9:92:42:45:8c:d6:95:9a:50:4f:b7:9d:
d2:98:55:6a:83:1c:21:b2:b2:f0:cf:1a:17:af:a6:
9a:7d:5e:ff:96:51:3e:1c:75:15:dc:b0:08:c2:77:
8b:47:86:95:2c:10:79:f4:e5:99:43:27:91:46:1a:
6e:94:a9:ed:b6:96:73:4d:fe:00:76:87:dc:3c:b3:
12:db:9b:c5:92:40:4b:e1:f2:fd:74:fa:30:9d:6b:
bb:dc:c8:a6:f4:43:03:d4:c7:1a:98:2c:c5:73:d8:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CC:5F:DA:88:A8:EE:C0:23:9C:17:D1:AA:FB:C3:52:38:7B:DB:E9
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:1c:2b:c3:a0:77:75:7a:98:05:73:32:3b:24:31:e8:b5:2e:
f0:58:99:09:7a:81:6b:ca:52:83:0f:05:0a:9d:4d:32:85:d4:
f6:21:1d:c0:ed:c6:f0:1e:ba:19:2e:ef:96:6e:4a:84:70:f0:
5c:d7:1d:27:ea:36:df:25:03:10:c9:41:d9:42:25:d8:c8:a3:
26:40:30:cd:e7:db:e4:74:3c:ef:78:e2:55:c6:81:5b:1a:01:
b7:37:e6:4c:6e:1d:60:cb:ea:51:5f:2f:1c:0e:de:bb:1f:04:
1d:a2:c0:7d:dd:ab:42:2e:1f:9b:91:96:6c:69:36:cd:75:ca:
e5:50:c4:01:d2:0d:ec:c3:dc:77:63:f0:c0:d5:d9:70:12:c5:
a8:ac:03:66:79:24:98:67:2d:1f:0d:ee:28:8e:66:5c:a8:4a:
5d:99:d7:35:35:d4:f5:a3:19:6b:d0:07:1d:1a:25:80:08:2a:
6c:4e:c2:02:ea:82:8c:df:4a:e7:0f:27:3f:82:94:19:16:09:
2a:b1:03:1c:8f:ec:41:b8:c7:d4:c2:88:b1:6f:c1:ea:5d:01:
ce:ad:f6:92:16:c0:5c:46:48:8d:16:fe:6e:36:01:35:bb:30:
18:28:44:f0:41:69:c0:cc:6e:93:0f:1b:bb:be:0a:cb:cb:a1:
5d:ee:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:59:06 2026 by rpki-client