
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json)
Hash identifier: o8WD5asBzr1aHGOczqZtLFtLGAskKn/4+LqFEV6OhfA=
Subject key identifier: F1:05:44:1B:49:5B:06:D0:5E:80:19:2C:24:C9:61:3C:AB:40:FD:EC
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 19F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
Manifest number: 1725
Signing time: Tue 24 Mar 2026 16:45:34 +0000
Manifest this update: Tue 24 Mar 2026 16:45:33 +0000
Manifest next update: Tue 31 Mar 2026 16:45:33 +0000
Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: 1pJG0ZSMG4wiUAT+uyQ7j+nn8DUPA38KYLduFapOCE0=)
2: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: aHoZLC2L3b3zGtWoG3wC75zKVeJj+YJNHv+9PZJe2Ss=)
3: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: S/dafMyGnoaScUVOEOAthiDLiY0z9mFaUx5kMMduICQ=)
4: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: qwFwplU43G/hNJT02NNQ4dEUqw5/rgD0dEX0nQo6jl4=)
5: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: kxl0Ju03xol22MdSZwz8cEZSAcwOMODv9xQLWw9mcDU=)
6: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: mPbx6GaGGpEZcuE74LbXOCQRX7Jy5PlwX+gtNN/XZgI=)
7: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: IpBvgX/8iJN/8+lDdhFGN5U95vt5chfijPRQMRrbUXk=)
8: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: kDxO50GD5AXFe4GFX5YhHhfReI3EK8WF+6AhrrSnCTE=)
9: 2A309FACEC2511F093ADEAD03D6F56BC.roa (hash: J0nwYlEYUE4zSCS6vykAZTwAKoV8/9btL95KquTry64=)
10: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: wKUa5/luq9B8kVj6p/G8xPQ0IZcLYJQWqnLpb5Jwx4c=)
11: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: hoLS1gV18m+O3GqsO6stfQ7iSMrUj2IEPQoamxZ9gzQ=)
12: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: E+w+5MHO8ewDddMwvBrrEc1lgQdxewrUq+QuhkdbY4w=)
13: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: XnGwGjApnJiNJjn58kdU+fCn2kMRI3F8FSS/7+708cw=)
14: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: OXnUP/JG3w1yEFtXRtB3EemUPot6EKdNnxfAnstSIjI=)
15: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: QEmI8rFO3uFcQUGRkaarXEyZTTwJDnEF3MflJofq8Ho=)
16: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: nT4IqSSGqtky3oV2UAtgSCBzreFM8SwkDqRJ1RnCCsQ=)
17: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: 9k+NHvdwPaL2Te9EGjJfwM53cdhWCBk6SgfyxFOLTzw=)
18: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: ddBHtww0w889dxAapR0tDPN4CvQLtyLCegfsQh3khs4=)
19: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: 1HlLCwNQIyozJV4R6Hnm8QJXf/uITnPoAyb7nipvwt4=)
20: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: Q48uJdRRBErvN0MaEglf3VQ+DumuMDNeFKgsuTsot38=)
21: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: ycOq0IsrhA+YmUYWAhAsrdeYN4eebRnWEnTPZHVK1yQ=)
22: F6F34FA2EC2611F097438BD43E6F56BC.roa (hash: d4qLINHxzHC2igs+d7HFx4FkCdNcECuX29TNhu6zNb0=)
23: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: psgGb3ANrPemsGMpfT9JCuPtdmIwAydwkIMUMCBZW4Y=)
24: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: ICs1TEIOpnxVUHj987EsWwjf3g4Xq+0ePZB44Mwwr1U=)
25: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: SntS7Vg1oFYriW3szo2h4z7g9R8/MBi6lWybX6Gw4N8=)
26: 777818EE811411EABAD68C17C4F9AE02.roa (hash: yLBCrU/9RvuI/3Ay5n3EAF4Spgkoeqo4m1QHvpK9Jp0=)
27: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: BxG0F/WjWpDjPTtb5RRrHO+ss4unVJo7zC1MzAvtUtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6640 (0x19f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Mar 24 16:45:33 2026 GMT
Not After : Mar 31 16:45:33 2026 GMT
Subject: CN=69c2bfae-2ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:1a:fa:91:0e:e0:ec:32:18:a6:52:7b:8e:
37:4f:48:a5:53:87:eb:48:59:f4:f2:55:e5:49:03:
1c:6d:e1:bf:70:0a:34:44:e2:46:cd:75:75:8e:d3:
f7:01:5e:78:11:37:b6:e8:6d:d9:82:ea:81:c3:75:
e2:e8:cb:d8:ae:ef:87:45:04:0a:c3:12:19:9d:09:
22:25:77:d7:c8:7c:84:95:e4:ac:c5:71:f5:0f:52:
6c:32:75:b5:e5:0d:a9:4f:3e:bf:ec:26:b9:fb:0d:
1c:ec:d5:85:c8:02:49:08:cb:ee:24:65:7a:66:6a:
47:0f:16:6f:cd:12:9f:7f:c5:45:5a:41:1b:f5:d4:
1c:19:26:3f:80:4a:e2:af:d8:ee:4b:29:81:24:91:
fc:99:b6:88:1e:ab:73:c9:c5:6a:d1:da:ca:ad:79:
b0:5c:03:9b:e6:a3:60:44:07:5a:93:b9:49:84:53:
b3:85:47:da:37:96:b9:d9:7f:1a:4f:fe:82:f6:e8:
bd:1d:43:5a:98:06:c2:1d:b6:5d:e4:de:fc:66:f7:
c7:9e:91:fd:4e:f2:15:7d:b3:4e:09:4b:da:55:a1:
53:a4:03:31:3d:54:e0:e2:d2:45:5c:90:ca:f4:b3:
bf:d2:cf:f4:ad:cd:21:fe:9a:27:a9:9e:81:47:40:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:05:44:1B:49:5B:06:D0:5E:80:19:2C:24:C9:61:3C:AB:40:FD:EC
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:28:d0:9e:c0:d8:fa:10:88:03:e8:2e:11:dd:a2:f3:5a:0a:
68:eb:66:07:98:6b:6d:d3:cf:6c:c9:e0:bb:3b:80:db:e0:86:
f3:56:c0:d2:18:10:78:2e:c8:57:be:63:2c:52:6f:c4:8d:2f:
4a:5a:bf:71:2a:56:9d:15:93:36:89:37:e8:23:0d:4b:f6:3a:
af:c9:c3:7a:d1:1f:86:fb:57:b1:a1:95:b6:ae:a1:f0:45:85:
c8:7a:d6:b2:2a:43:9d:7a:70:27:ba:4b:64:d3:70:42:dc:54:
4f:e0:ea:5f:07:b6:57:76:01:37:0a:dd:5d:36:38:05:0b:14:
b8:f8:fc:da:90:9f:ab:e8:c6:67:e6:fd:fe:27:20:9c:8b:11:
09:3d:6f:76:f5:6d:14:f5:14:31:3f:41:1c:47:11:22:bc:c2:
e3:24:fe:82:b3:c0:f5:bd:84:32:51:97:80:26:d8:f2:7b:0a:
76:75:dd:3d:12:70:45:d2:0d:f8:6b:65:25:9f:01:80:99:55:
f4:b9:f6:c7:5f:d9:fc:6b:d5:fe:d9:67:10:a5:ca:1f:8f:a6:
26:08:10:51:39:a6:3d:ed:fc:9d:54:52:de:e4:c4:09:b1:b9:
a6:59:10:28:32:9e:1f:e7:04:de:dc:4b:72:45:3b:a7:7d:dd:
8f:b4:1d:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE
NDc2Q0JEMDAwHhcNMjYwMzI0MTY0NTMzWhcNMjYwMzMxMTY0NTMzWjAYMRYwFAYD
VQQDEw02OWMyYmZhZS0yZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssEa+pEO4OwyGKZSe443T0ilU4frSFn08lXlSQMcbeG/cAo0ROJGzXV1jtP3
AV54ETe26G3ZguqBw3Xi6MvYru+HRQQKwxIZnQkiJXfXyHyEleSsxXH1D1JsMnW1
5Q2pTz6/7Ca5+w0c7NWFyAJJCMvuJGV6ZmpHDxZvzRKff8VFWkEb9dQcGSY/gEri
r9juSymBJJH8mbaIHqtzycVq0drKrXmwXAOb5qNgRAdak7lJhFOzhUfaN5a52X8a
T/6C9ui9HUNamAbCHbZd5N78ZvfHnpH9TvIVfbNOCUvaVaFTpAMxPVTg4tJFXJDK
9LO/0s/0rc0h/ponqZ6BR0DR1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEFRBtJ
WwbQXoAZLCTJYTyrQP3sMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1
REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG
WGluN1VkUEJzTm5VZHN2UUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVijQnsDY+hCIA+guEd2i81oKaOtmB5hrbdPPbMnguzuA2+CG81bA0hgQeC7I
V75jLFJvxI0vSlq/cSpWnRWTNok36CMNS/Y6r8nDetEfhvtXsaGVtq6h8EWFyHrW
sipDnXpwJ7pLZNNwQtxUT+DqXwe2V3YBNwrdXTY4BQsUuPj82pCfq+jGZ+b9/icg
nIsRCT1vdvVtFPUUMT9BHEcRIrzC4yT+grPA9b2EMlGXgCbY8nsKdnXdPRJwRdIN
+GtlJZ8BgJlV9Ln2x1/Z/GvV/tlnEKXKH4+mJggQUTmmPe38nVRS3uTECbG5plkQ
KDKeH+cE3txLckU7p33dj7Qd6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:52 2026 by rpki-client