
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
File: XmtaBob1a6DA93-zvzGzhWMiCCQ.mft (raw, json)
Hash identifier: 4ykZsY3TscvswFfF+H+12DJ6tnnm+0Fl0AyH18U1mYY=
Subject key identifier: D5:66:C0:D5:16:C4:8E:FC:CB:B2:61:68:29:BD:AD:88:1F:E1:91:1C
Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
Certificate issuer: /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Certificate serial: 239B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
Manifest number: 2380
Signing time: Tue 12 May 2026 15:49:42 +0000
Manifest this update: Tue 12 May 2026 15:49:41 +0000
Manifest next update: Tue 19 May 2026 15:49:41 +0000
Files and hashes: 1: XmtaBob1a6DA93-zvzGzhWMiCCQ.crl (hash: Q4e2gUjyiMQOtL3Mli7mBSyK0akmYCJrH2e3aPUdv4c=)
2: 44C007B0A0D611EDA2603C4EC4F9AE02.roa (hash: R5xEKjp2COzsPx07QmJ9ZHVVMUSggpYYD3FgaBWcVMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9115 (0x239b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE107, serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Validity
Not Before: May 12 15:49:41 2026 GMT
Not After : May 19 15:49:41 2026 GMT
Subject: CN=6a034c16-4375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:74:a2:0f:56:aa:21:52:6e:d0:12:f2:6c:
b2:fe:ea:5c:bb:16:bd:4f:86:09:6d:05:ff:b7:e5:
c2:d1:25:ea:18:7c:5f:70:2e:07:2c:bd:6e:00:c3:
ef:20:e2:00:6d:75:67:82:55:ab:52:5f:11:4c:e2:
52:04:38:fa:e6:3d:80:4f:03:bd:57:a6:32:70:17:
1f:f9:0d:59:bb:0f:16:fd:a2:f9:47:ab:60:88:00:
5a:6c:60:ef:be:6b:c7:8d:7d:b5:00:27:11:6b:29:
e5:5f:0f:2e:2d:96:5b:ce:88:1c:84:25:8c:d2:b7:
38:90:af:e9:ce:1d:52:03:70:98:a1:f2:32:48:40:
4c:21:19:46:4a:89:5f:b9:bd:69:f9:78:fa:17:92:
e1:2d:b6:bc:38:dc:5c:6a:e9:fd:1d:d3:ac:60:9a:
89:86:43:26:68:fd:b9:29:d6:20:29:1f:8c:bd:b9:
e4:a6:52:5b:bf:8b:fb:d4:89:b7:bd:11:29:08:aa:
23:20:39:14:e7:c0:f5:df:4f:93:dd:cc:97:ad:50:
0a:72:58:09:7f:2c:7f:e8:13:73:d7:ee:f8:00:0d:
92:26:03:18:54:f4:c8:4c:33:a6:1d:6c:80:da:5f:
a9:c2:d5:db:3d:f9:05:0a:69:d1:c9:f6:cf:13:48:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:C0:D5:16:C4:8E:FC:CB:B2:61:68:29:BD:AD:88:1F:E1:91:1C
X509v3 Authority Key Identifier:
keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:96:20:1f:d7:b7:6d:dc:ce:fa:7b:df:53:30:90:a6:d9:ba:
7d:6f:79:7e:2d:f5:ae:7d:a0:38:01:ab:3b:18:9a:7d:eb:96:
58:2a:da:f2:55:72:9c:e7:3d:b5:68:bc:55:79:7d:ff:ce:e5:
dc:5c:2c:e7:7b:56:ef:79:81:9d:c9:4f:3b:6c:d8:cf:a1:cc:
ef:44:ac:70:c2:62:87:8d:27:99:29:b6:2c:1b:27:f3:ee:b0:
13:2c:c9:2b:e7:31:49:89:01:1f:a2:5d:fa:a1:98:8f:cf:7e:
e4:37:5a:68:0a:c2:24:8e:1b:b0:80:2b:1a:fb:f8:08:06:3a:
80:d0:9d:ab:47:97:b6:52:f2:18:69:68:d0:ea:ab:24:b6:0d:
bf:1b:12:71:a7:1d:9f:41:ce:51:5f:92:72:94:b6:9b:fb:7d:
bb:e4:34:df:18:ee:1b:db:54:8f:88:1d:42:d2:57:b5:39:f2:
99:2d:e0:b5:04:14:bb:2b:c3:60:ab:16:38:39:41:93:a0:8e:
8e:73:ae:85:9e:c1:f9:d8:20:91:2c:6a:1f:c8:d2:20:6a:af:
30:99:43:e1:81:0e:2b:a5:cd:f6:81:d5:9b:94:bd:f0:22:fe:
76:f3:15:21:33:1d:79:bd:75:70:88:f8:26:69:f5:e0:a2:44:
73:1d:1c:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICI5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkUxMDcxMTAvBgNVBAUTKDVFNkI1QTA2ODZGNTZCQTBDMEY3N0ZCM0JGMzFCMzg1
NjMyMjA4MjQwHhcNMjYwNTEyMTU0OTQxWhcNMjYwNTE5MTU0OTQxWjAYMRYwFAYD
VQQDEw02YTAzNGMxNi00Mzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZt0og9WqiFSbtAS8myy/upcuxa9T4YJbQX/t+XC0SXqGHxfcC4HLL1uAMPv
IOIAbXVnglWrUl8RTOJSBDj65j2ATwO9V6YycBcf+Q1Zuw8W/aL5R6tgiABabGDv
vmvHjX21ACcRaynlXw8uLZZbzogchCWM0rc4kK/pzh1SA3CYofIySEBMIRlGSolf
ub1p+Xj6F5LhLba8ONxcaun9HdOsYJqJhkMmaP25KdYgKR+MvbnkplJbv4v71Im3
vREpCKojIDkU58D130+T3cyXrVAKclgJfyx/6BNz1+74AA2SJgMYVPTITDOmHWyA
2l+pwtXbPfkFCmnRyfbPE0gJ8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNVmwNUW
xI78y7JhaCm9rYgf4ZEcMB8GA1UdIwQYMBaAFF5rWgaG9WugwPd/s78xs4VjIggk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTEwNy9FRTM1QzQ0NjlF
NjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2REE5My16dnpHemhXTWlD
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1htdGFCb2IxYTZEQTkzLXp2ekd6aFdNaUNDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTEwNy9FRTM1QzQ0NjlFNjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2
REE5My16dnpHemhXTWlDQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJZYgH9e3bdzO+nvfUzCQptm6fW95fi31rn2gOAGrOxiafeuWWCra8lVynOc9
tWi8VXl9/87l3Fws53tW73mBnclPO2zYz6HM70SscMJih40nmSm2LBsn8+6wEyzJ
K+cxSYkBH6Jd+qGYj89+5DdaaArCJI4bsIArGvv4CAY6gNCdq0eXtlLyGGlo0Oqr
JLYNvxsScacdn0HOUV+ScpS2m/t9u+Q03xjuG9tUj4gdQtJXtTnymS3gtQQUuyvD
YKsWODlBk6COjnOuhZ7B+dggkSxqH8jSIGqvMJlD4YEOK6XN9oHVm5S98CL+dvMV
ITMdeb11cIj4Jmn14KJEcx0crw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:19:11 2026 by rpki-client