
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json)
Hash identifier: +ad6FeMXJg9wuZjqp+6fUCn1LgdKRnQ2iUlV/1ginpM=
Subject key identifier: 1B:CD:C6:4F:71:81:6B:B0:24:73:51:04:C6:C8:E8:85:2F:6F:82:E5
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
Manifest number: 01FD
Signing time: Fri 25 Sep 2026 03:18:52 +0000
Manifest this update: Fri 25 Sep 2026 03:18:52 +0000
Manifest next update: Fri 02 Oct 2026 03:18:52 +0000
Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: ks4ZBoXC7KZOxE+1g1WNbs5W1k4BqR1iW80z+9bWKho=)
2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: nyjMQ4Y7DB/tIj8XNqvBhuvlZj0Lq52QsaNMK9E+R5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Validity
Not Before: Sep 25 03:18:52 2026 GMT
Not After : Oct 2 03:18:52 2026 GMT
Subject: CN=6ab5e81c-9d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:57:11:bb:a0:6f:eb:4d:8a:92:6c:4d:3c:
52:ef:a1:45:ac:d0:2c:07:61:07:f9:c4:57:1d:b9:
33:ce:01:16:06:fb:ef:2c:ab:e4:61:ee:06:15:17:
cd:9c:d1:7a:60:d8:91:1f:f8:25:0d:62:3c:4b:82:
26:f3:f9:98:73:5c:8b:1b:65:aa:43:cc:97:db:f3:
da:09:78:4d:bd:ba:85:78:5c:e2:b3:fe:fa:85:60:
2c:3b:b6:d5:91:01:ef:84:05:19:55:f5:c9:12:e5:
34:37:22:3b:01:10:2e:6f:c9:1f:36:aa:01:90:8d:
31:86:ec:8d:4b:7b:31:44:7d:0b:08:88:fa:16:f0:
af:5b:5f:ef:49:80:a4:cd:54:9a:b7:3c:ad:df:f0:
da:ed:7a:58:0d:43:cf:17:12:75:89:0a:ae:e9:20:
e3:eb:ad:7d:b6:fa:f8:0a:b0:c4:ef:c6:f6:92:fa:
6b:d1:76:94:32:a6:a2:01:24:a2:21:5e:cd:75:04:
91:43:81:a1:c4:52:95:29:57:e9:49:f6:84:c7:fe:
04:dd:70:ea:d2:02:22:fd:1a:09:e7:97:a7:f6:ee:
5b:ff:f2:8f:de:1c:11:3d:7c:11:0e:d0:74:c9:19:
e3:3d:73:ea:f2:48:ee:b7:ea:51:58:6b:70:2f:11:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CD:C6:4F:71:81:6B:B0:24:73:51:04:C6:C8:E8:85:2F:6F:82:E5
X509v3 Authority Key Identifier:
keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b8:59:6e:07:a6:36:44:a0:dd:8c:70:97:c1:15:4f:8c:0c:
da:bc:3a:06:69:9a:f9:82:5f:94:95:98:de:67:2f:46:eb:e7:
f0:33:83:8b:a3:07:93:c7:73:b1:e8:27:38:8c:4e:f1:e6:d0:
d8:c4:d5:76:67:02:40:ac:68:6b:85:96:a3:e9:ae:69:0b:e7:
0e:be:e2:65:56:da:6a:4d:d1:f9:ac:bb:39:78:70:e5:25:bd:
69:cc:a2:3c:8e:2f:2a:a4:2a:81:21:e2:91:13:a4:f3:d6:48:
43:8e:8e:d7:82:af:66:94:99:b9:2d:f0:55:34:64:aa:25:bb:
d3:39:32:69:e6:8e:38:57:40:74:f2:c6:c7:2e:52:32:33:21:
92:13:5f:8c:d9:c0:bd:70:04:d8:a7:e9:1b:ed:22:62:3c:58:
93:f5:00:b7:ee:6f:08:87:f2:8d:1e:d8:83:e5:2f:c9:75:75:
4c:b3:44:fb:95:fb:ba:5e:78:4e:7c:e1:2c:35:82:5e:62:1f:
8a:a1:f3:40:2f:96:66:22:b8:7b:f8:b7:35:c0:93:66:5c:e8:
a4:37:ac:c1:8f:9f:e1:81:f2:0c:3a:e6:8a:29:cc:f0:45:77:
a1:ee:ef:aa:3f:4c:15:8b:a5:ac:7e:7a:c1:52:0a:42:d2:88:
41:18:af:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD
Qjk0Qzg3NEQwHhcNMjYwOTI1MDMxODUyWhcNMjYxMDAyMDMxODUyWjAYMRYwFAYD
VQQDEw02YWI1ZTgxYy05ZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA37NXEbugb+tNipJsTTxS76FFrNAsB2EH+cRXHbkzzgEWBvvvLKvkYe4GFRfN
nNF6YNiRH/glDWI8S4Im8/mYc1yLG2WqQ8yX2/PaCXhNvbqFeFzis/76hWAsO7bV
kQHvhAUZVfXJEuU0NyI7ARAub8kfNqoBkI0xhuyNS3sxRH0LCIj6FvCvW1/vSYCk
zVSatzyt3/Da7XpYDUPPFxJ1iQqu6SDj6619tvr4CrDE78b2kvpr0XaUMqaiASSi
IV7NdQSRQ4GhxFKVKVfpSfaEx/4E3XDq0gIi/RoJ55en9u5b//KP3hwRPXwRDtB0
yRnjPXPq8kjut+pRWGtwLxEIOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBvNxk9x
gWuwJHNRBMbI6IUvb4LlMB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1
RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE
ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArbhZbgemNkSg3Yxwl8EVT4wM2rw6Bmma+YJflJWY3mcvRuvn8DODi6MHk8dz
segnOIxO8ebQ2MTVdmcCQKxoa4WWo+muaQvnDr7iZVbaak3R+ay7OXhw5SW9acyi
PI4vKqQqgSHikROk89ZIQ46O14KvZpSZuS3wVTRkqiW70zkyaeaOOFdAdPLGxy5S
MjMhkhNfjNnAvXAE2KfpG+0iYjxYk/UAt+5vCIfyjR7Yg+UvyXV1TLNE+5X7ul54
TnzhLDWCXmIfiqHzQC+WZiK4e/i3NcCTZlzopDeswY+f4YHyDDrmiinM8EV3oe7v
qj9MFYulrH56wVIKQtKIQRivPQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:00:15 2026 by rpki-client