
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier: U2Af1gSN4vzY5Qd3PkG3rVaXI1tXB5/QtEoOaJVmtkQ=
Subject key identifier: 5C:27:89:B8:F4:F1:38:7C:57:1F:4F:92:86:28:AE:FA:5F:85:3F:57
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 04ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number: 04A4
Signing time: Tue 24 Mar 2026 23:43:54 +0000
Manifest this update: Tue 24 Mar 2026 23:43:53 +0000
Manifest next update: Tue 31 Mar 2026 23:43:53 +0000
Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: JtR0cp8oCtBL3Gd3ACCuz2/vdt9X44vFyWZfjgyu30A=)
2: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
3: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
4: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
5: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
6: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
7: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
8: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
9: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
10: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
11: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
12: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
13: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Mar 24 23:43:53 2026 GMT
Not After : Mar 31 23:43:53 2026 GMT
Subject: CN=69c321ba-e053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:8c:b6:85:59:75:03:c6:d7:1b:4a:a6:c7:
9b:0e:d8:78:27:8e:9d:7c:81:3d:e9:d7:0b:ec:b9:
a7:cf:64:e8:70:3f:c4:c7:b1:16:e2:a7:72:4b:97:
19:25:17:e5:31:01:e4:34:f9:72:63:e1:a2:e6:3c:
75:b5:86:2a:4b:fb:a1:ba:42:1f:9d:e9:8d:64:2f:
0b:ed:b5:ca:c5:aa:5c:c6:77:4b:50:32:49:25:ad:
4c:1c:91:bd:65:eb:c4:ba:a9:18:12:0a:eb:43:e0:
a1:f0:b6:2e:dc:e4:58:38:e3:0c:dd:6a:2a:b7:57:
98:78:a6:14:5b:8e:fe:ce:a3:02:b8:64:40:83:81:
28:7d:91:44:70:51:0c:a1:66:9f:69:51:7a:c5:f3:
12:b3:b1:df:d4:08:d4:e6:50:b1:e4:45:80:fe:b1:
78:fe:e9:f6:b0:aa:59:09:e2:5f:c6:67:35:96:1d:
57:76:23:a0:8d:dc:a1:b7:a0:59:cf:8c:2c:1e:17:
8a:6d:45:33:76:04:18:51:d9:d4:a7:36:8b:40:c4:
c6:c4:ce:01:1d:8c:e6:85:b9:70:b4:3c:ff:bd:3d:
24:38:36:02:2d:9e:4f:20:13:d5:1b:bc:14:47:01:
e8:6e:06:31:7b:b8:00:7e:e1:22:0b:bd:06:c7:09:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:27:89:B8:F4:F1:38:7C:57:1F:4F:92:86:28:AE:FA:5F:85:3F:57
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:13:38:d5:74:fc:29:dd:2b:c3:61:79:ec:9e:71:e0:c9:de:
5b:8c:56:63:5d:9a:7f:c3:2c:e8:8c:ff:b2:60:e9:ce:05:17:
14:42:61:ad:79:51:91:ea:7f:86:1d:29:24:dc:02:f0:5e:f1:
16:fb:af:16:66:bd:5a:fd:46:0d:d3:b2:60:70:a8:b9:96:a2:
25:0a:b5:b6:fc:08:d9:29:a6:db:b0:6c:a6:c0:1e:50:0e:8e:
b6:f7:9c:28:19:50:8f:d9:8f:72:ca:52:75:8e:59:3d:b0:4b:
d4:7e:fe:fb:63:3b:7d:b4:da:b3:bf:52:60:a5:9a:14:08:3e:
94:de:af:ea:ee:7a:a4:61:e2:2e:d6:2e:14:a7:8e:92:bc:c8:
67:ea:8e:f8:e8:d5:1d:6b:1e:5d:71:00:92:5b:81:a9:dd:73:
7f:50:fc:6d:84:b9:81:08:65:48:fc:c9:73:84:91:4c:14:37:
16:91:86:b6:f1:07:0f:90:43:cd:94:20:94:ae:d0:aa:64:fb:
1f:99:e0:29:0a:59:50:c1:40:08:12:3d:bb:72:7d:f2:bd:a6:
97:c7:5f:41:cb:97:20:87:18:e4:6a:42:85:5b:d0:3d:1c:b8:
2f:09:2c:2f:d0:ee:5f:d2:5a:c4:35:b2:4f:00:a3:17:d5:9c:
26:27:24:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:32 2026 by rpki-client