
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File: xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier: seHuFKCDPJt0VwCUu0HgD3L5EOtVhRKcAVXaANjhPLc=
Subject key identifier: B7:A2:B1:AC:42:24:BE:B3:98:CB:3D:C6:74:42:8C:A7:AF:23:9C:D3
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer: /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial: 087B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number: 0871
Signing time: Tue 24 Mar 2026 20:24:41 +0000
Manifest this update: Tue 24 Mar 2026 20:24:40 +0000
Manifest next update: Tue 31 Mar 2026 20:24:40 +0000
Files and hashes: 1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: LN/j3+/E/3kx5jTgq5ayJDFf/fDvcZimqjsSW+eJoGA=)
2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: 2KftQgjQucTB7mWe4Ghtn15fUs79qb57lhCbaWg6O8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171 (0x87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Validity
Not Before: Mar 24 20:24:40 2026 GMT
Not After : Mar 31 20:24:40 2026 GMT
Subject: CN=69c2f309-f635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:cb:6b:b3:1f:35:63:ac:05:a8:c7:9d:6a:
48:bb:28:3b:80:fb:7a:0a:f4:17:b2:e0:77:25:1e:
65:d7:ab:bc:d6:cd:0e:1c:c0:c8:e1:9b:a4:6b:1c:
01:59:b3:29:f3:25:8b:91:2b:01:bd:f4:c5:fe:c5:
91:cb:c4:5d:0e:0d:8a:3c:84:33:5a:44:21:fb:f3:
26:47:23:79:5c:2d:aa:32:ed:94:a6:98:66:ac:32:
d2:f2:41:11:08:c4:5d:8f:f9:4e:3c:d7:0a:6a:71:
93:10:92:6b:a8:5c:3f:ca:67:1a:e9:3b:26:f2:80:
77:94:fc:e2:bf:e9:7e:bd:5b:2a:5c:93:68:e0:e6:
4a:24:82:8f:ba:b8:59:02:60:eb:ec:5f:66:31:c0:
f1:dd:35:ff:73:46:0b:69:7f:50:3b:3b:56:50:00:
f4:49:14:b5:43:2b:86:f6:a2:10:2e:a4:47:b9:63:
d2:5c:4d:fb:aa:54:30:07:33:f0:19:a1:d0:c8:82:
57:04:89:6f:91:ca:b5:57:d2:fd:68:4d:44:b8:24:
53:0c:6d:eb:78:f5:20:b0:1d:9c:c0:28:c1:b7:b6:
01:1b:7b:31:1c:da:b7:f7:88:4b:a8:b0:f9:99:8a:
26:2c:57:1d:81:06:5a:24:83:46:89:03:ea:0c:04:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A2:B1:AC:42:24:BE:B3:98:CB:3D:C6:74:42:8C:A7:AF:23:9C:D3
X509v3 Authority Key Identifier:
keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:d7:54:38:05:28:ba:af:1e:02:cf:54:74:9d:b8:25:0b:e2:
5b:8b:e1:58:d5:6a:8d:64:61:41:65:07:bd:41:c4:c2:7c:1d:
3d:e6:b5:d8:90:b1:dd:8a:e5:24:64:13:2e:59:16:4c:bd:7a:
00:0e:14:64:61:02:b0:3c:47:ff:2f:10:ad:28:4e:18:15:25:
2a:cb:96:d5:b3:a7:d8:14:a6:3b:55:dc:b3:d8:0b:5e:c3:65:
cb:fa:00:2f:77:0f:eb:e3:66:fa:51:55:c6:88:4a:8e:58:1c:
02:d7:a7:b5:5a:f4:6c:e7:95:ac:f0:8b:34:2f:46:6d:33:ac:
50:fc:f1:1d:ad:e5:cc:9f:12:c6:e2:23:3d:a7:fe:9b:94:6e:
c7:2e:fb:df:55:d5:c3:08:af:6a:77:e5:9d:5d:8b:19:bf:7e:
a6:4a:df:e8:e1:a5:17:d9:88:cc:0d:5c:c3:04:60:d4:e5:15:
2e:33:b0:cd:e3:ae:ee:93:cb:76:7d:44:f4:eb:47:27:94:e6:
6a:2c:de:4a:d4:bf:2e:68:49:a4:0a:1a:ed:64:6b:93:da:62:
66:a0:d9:d6:ad:2c:a1:84:1e:41:ad:5d:a0:f9:d1:69:d6:6e:
30:d5:ea:fc:89:47:fd:19:4e:43:bd:21:37:9a:8c:be:e5:1f:
95:57:50:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFDNDYxMTAvBgNVBAUTKEM2QzE5MTY5RUVBN0QwNjZCQzlCQ0E3MkREODgzMEJD
MTgzQTEyNjYwHhcNMjYwMzI0MjAyNDQwWhcNMjYwMzMxMjAyNDQwWjAYMRYwFAYD
VQQDEw02OWMyZjMwOS1mNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArq3La7MfNWOsBajHnWpIuyg7gPt6CvQXsuB3JR5l16u81s0OHMDI4ZukaxwB
WbMp8yWLkSsBvfTF/sWRy8RdDg2KPIQzWkQh+/MmRyN5XC2qMu2UpphmrDLS8kER
CMRdj/lOPNcKanGTEJJrqFw/ymca6Tsm8oB3lPziv+l+vVsqXJNo4OZKJIKPurhZ
AmDr7F9mMcDx3TX/c0YLaX9QOztWUAD0SRS1QyuG9qIQLqRHuWPSXE37qlQwBzPw
GaHQyIJXBIlvkcq1V9L9aE1EuCRTDG3rePUgsB2cwCjBt7YBG3sxHNq394hLqLD5
mYomLFcdgQZaJINGiQPqDATw9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeisaxC
JL6zmMs9xnRCjKevI5zTMB8GA1UdIwQYMBaAFMbBkWnup9BmvJvKct2IMLwYOhJm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM0Ni8wNUNBREQxNkYx
ODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBHYThtOHB5M1lnd3ZCZzZF
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hzR1JhZTZuMEdhOG04cHkzWWd3dkJnNkVtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUM0Ni8wNUNBREQxNkYxODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBH
YThtOHB5M1lnd3ZCZzZFbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAtdUOAUouq8eAs9UdJ24JQviW4vhWNVqjWRhQWUHvUHEwnwdPea12JCx3Yrl
JGQTLlkWTL16AA4UZGECsDxH/y8QrShOGBUlKsuW1bOn2BSmO1Xcs9gLXsNly/oA
L3cP6+Nm+lFVxohKjlgcAtentVr0bOeVrPCLNC9GbTOsUPzxHa3lzJ8SxuIjPaf+
m5Ruxy7731XVwwivanflnV2LGb9+pkrf6OGlF9mIzA1cwwRg1OUVLjOwzeOu7pPL
dn1E9OtHJ5TmaizeStS/LmhJpAoa7WRrk9piZqDZ1q0soYQeQa1doPnRadZuMNXq
/IlH/RlOQ70hN5qMvuUflVdQNg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:34 2026 by rpki-client