
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json)
Hash identifier: v5ANkeNmLXZ6sE7XnS3Sw/4Rc/qgb6JwhdrR04zdjAE=
Subject key identifier: 69:16:9F:D8:45:38:29:4B:DD:DB:61:3C:79:71:40:A7:C3:E8:B1:42
Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73
Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
Manifest number: BC
Signing time: Wed 25 Mar 2026 06:13:43 +0000
Manifest this update: Wed 25 Mar 2026 06:13:42 +0000
Manifest next update: Wed 01 Apr 2026 06:13:42 +0000
Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: jIx5Jbv9Pe2n+w0H3+yrP6M8SNu3ZIDPUxMKysNz1VY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl
rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
Validity
Not Before: Mar 25 06:13:42 2026 GMT
Not After : Apr 1 06:13:42 2026 GMT
Subject: CN=69c37d17-327f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:b5:d8:2d:81:a1:12:0a:cc:88:23:8d:f9:
c6:50:08:32:12:fb:4c:75:6e:bb:c5:50:ea:32:71:
d4:8d:9c:63:e3:1c:d5:ae:98:26:f2:54:7d:e7:a1:
60:56:dd:bf:f7:fe:68:10:5c:4c:be:3e:73:e2:dd:
1d:9b:f3:2e:15:29:08:9f:30:68:32:d8:48:ac:44:
f0:3b:61:67:d3:0f:72:42:fd:69:c5:bc:f6:95:8b:
2c:76:8c:a0:c1:0d:50:6d:af:a4:89:db:9f:7c:af:
9e:7d:ef:ad:de:a9:0b:7a:7e:22:c7:9a:f9:05:05:
a5:be:31:49:21:47:62:d1:5e:ab:24:ab:f9:c2:fe:
2f:82:22:b9:3e:dc:3a:02:82:cd:b2:29:d1:41:dc:
fd:df:4e:96:a5:b0:a3:7a:ab:92:df:fc:f1:d6:38:
a9:04:f5:27:1d:ce:6c:33:f1:c0:60:b2:e3:f4:fc:
41:b0:16:77:81:7f:b0:c1:20:2e:8d:de:dd:7c:22:
09:2f:90:33:11:60:32:93:59:5e:9f:d1:39:90:ba:
fd:2b:8e:ae:4b:23:09:36:1c:2b:5f:57:cf:89:ee:
b1:93:4d:6a:79:ee:22:13:a0:6f:ca:93:54:af:cb:
ac:e4:d9:2c:51:a2:c9:68:4b:58:80:9f:57:d4:b4:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:9F:D8:45:38:29:4B:DD:DB:61:3C:79:71:40:A7:C3:E8:B1:42
X509v3 Authority Key Identifier:
keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:38:ca:19:54:ae:d4:22:13:94:fe:55:7b:ea:ec:ee:7f:be:
2d:87:f0:55:14:e5:3b:b4:47:5a:e4:5f:e2:3f:3d:aa:6a:32:
5f:2b:32:17:52:d6:9b:f1:65:07:fd:12:32:8c:3b:8c:f9:36:
71:84:50:9f:e6:56:5b:01:36:5f:91:85:be:9b:d3:41:f4:6c:
8f:8b:0a:72:56:ac:16:01:28:eb:d3:ac:4e:4f:32:70:37:3b:
d5:a0:50:4a:25:68:d9:f9:05:47:6a:24:0e:98:01:a1:f8:ad:
e2:06:de:40:8a:6b:c0:af:e7:32:16:fe:5f:e1:1c:63:b7:0a:
88:4e:0f:a7:e0:c3:42:68:de:33:b1:36:84:63:63:92:13:8e:
74:27:af:52:02:86:ad:36:1d:a7:53:11:72:3c:e6:71:03:2c:
ba:be:fc:d4:a6:c2:db:a0:05:50:8b:da:5d:79:fe:e2:8c:5f:
f4:ee:cf:b4:69:df:1d:2d:3e:1e:ad:28:7e:14:66:0b:40:04:
6a:fa:c8:ff:76:32:f5:b9:53:84:b1:11:90:54:e0:20:90:b6:
34:eb:6a:80:d0:0e:ac:48:61:e9:0c:b5:c2:2b:9f:e7:56:92:
2b:c9:00:9d:6e:8d:99:33:d7:78:68:b2:e3:c4:0f:55:04:10:
8b:43:42:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJFRkExMTAvBgNVBAUTKEM3Q0RCNEVBMTgxNjVFNTk4MkQwQTkxOUZGNDdGNzI2
NzZFMDUwNzMwHhcNMjYwMzI1MDYxMzQyWhcNMjYwNDAxMDYxMzQyWjAYMRYwFAYD
VQQDEw02OWMzN2QxNy0zMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCa12C2BoRIKzIgjjfnGUAgyEvtMdW67xVDqMnHUjZxj4xzVrpgm8lR956Fg
Vt2/9/5oEFxMvj5z4t0dm/MuFSkInzBoMthIrETwO2Fn0w9yQv1pxbz2lYssdoyg
wQ1Qba+kiduffK+efe+t3qkLen4ix5r5BQWlvjFJIUdi0V6rJKv5wv4vgiK5Ptw6
AoLNsinRQdz9306WpbCjequS3/zx1jipBPUnHc5sM/HAYLLj9PxBsBZ3gX+wwSAu
jd7dfCIJL5AzEWAyk1len9E5kLr9K46uSyMJNhwrX1fPie6xk01qee4iE6BvypNU
r8us5NksUaLJaEtYgJ9X1LSDYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkWn9hF
OClL3dthPHlxQKfD6LFCMB8GA1UdIwQYMBaAFMfNtOoYFl5ZgtCpGf9H9yZ24FBz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkVGQS8xNzI1NDZCQzBC
MzcxMUYwOEMyMzk4NjNDNEY5QUUwMi94ODIwNmhnV1hsbUMwS2taXzBmM0puYmdV
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkVGQS8xNzI1NDZCQzBCMzcxMUYwOEMyMzk4NjNDNEY5QUUwMi94ODIwNmhnV1hs
bUMwS2taXzBmM0puYmdVSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1zjKGVSu1CITlP5Ve+rs7n++LYfwVRTlO7RHWuRf4j89qmoyXysyF1LWm/Fl
B/0SMow7jPk2cYRQn+ZWWwE2X5GFvpvTQfRsj4sKclasFgEo69OsTk8ycDc71aBQ
SiVo2fkFR2okDpgBofit4gbeQIprwK/nMhb+X+EcY7cKiE4Pp+DDQmjeM7E2hGNj
khOOdCevUgKGrTYdp1MRcjzmcQMsur781KbC26AFUIvaXXn+4oxf9O7PtGnfHS0+
Hq0ofhRmC0AEavrI/3Yy9blThLERkFTgIJC2NOtqgNAOrEhh6Qy1wiuf51aSK8kA
nW6NmTPXeGiy48QPVQQQi0NCCw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:53 2026 by rpki-client