
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json)
Hash identifier: x7JsCydWjpQeNi5DGt8SnhFscQddejLiVVt5bJoT0Zs=
Subject key identifier: 2E:C5:FE:1D:C8:07:F0:DA:AD:E9:B7:1B:FD:8F:6C:42:39:F4:81:2B
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial: 07D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
Manifest number: 07BF
Signing time: Thu 22 Oct 2026 21:33:04 +0000
Manifest this update: Thu 22 Oct 2026 21:33:04 +0000
Manifest next update: Thu 29 Oct 2026 21:33:04 +0000
Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: Wr7OqnZg6gq3GmaUulACU3rvuickSfsdC6E3N9+ExEY=)
2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: /W4EDzCJO28OAsl3pdvhn80k2j9lIQ5KcY8vtvKyWxM=)
3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: FGwdEm0SPNy0TpBINVzEc/flFNni0xPCsSoqxUh+Nr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 21:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004 (0x7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Validity
Not Before: Oct 22 21:33:04 2026 GMT
Not After : Oct 29 21:33:04 2026 GMT
Subject: CN=6ada8110-7009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:a7:5a:63:8c:d7:45:18:31:9a:5e:c0:86:
3a:18:8b:99:4a:13:7e:b0:0f:89:c5:9d:21:04:4b:
31:d4:6c:6d:d0:1b:ef:54:f7:d0:fb:db:0b:da:21:
bd:4b:d5:4e:2f:20:a3:0a:af:2c:3d:fe:fd:a9:dc:
2c:b0:e7:3b:a3:7a:9d:d3:c5:52:6c:1f:53:5d:4b:
84:64:7b:62:34:74:39:e9:16:28:08:ac:32:37:d6:
f0:c2:b8:bb:e0:83:e3:3e:d6:7c:89:d9:24:26:98:
3f:b4:1e:41:b6:7b:1c:75:c8:a8:bf:02:db:8b:01:
79:89:99:9a:e3:69:8a:38:4e:54:13:72:b6:bb:16:
58:4c:00:0d:00:f9:71:e1:7d:bd:46:38:f7:1e:1b:
57:5d:8a:58:c4:18:e6:11:f9:6e:8f:7a:b6:45:04:
3c:f2:64:72:f4:e1:cc:d1:91:a9:a5:21:78:9e:57:
7b:15:cb:89:45:e8:d9:e2:40:a7:bc:95:25:d0:29:
9f:d2:89:c2:22:d3:18:1c:23:9c:14:89:8a:3a:4d:
65:d5:da:4d:53:d4:cb:2b:9a:1b:b8:02:5c:06:03:
41:f0:3e:bb:6d:8e:65:0e:76:98:ae:e6:e1:55:e3:
56:c0:ff:33:cc:15:d0:7c:e4:66:8b:af:6c:31:06:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C5:FE:1D:C8:07:F0:DA:AD:E9:B7:1B:FD:8F:6C:42:39:F4:81:2B
X509v3 Authority Key Identifier:
keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:e7:45:18:7a:ac:da:95:63:2e:18:1f:bc:2d:91:ef:71:a3:
de:7b:01:d7:13:9c:d1:d6:97:30:35:ed:0a:a3:0d:02:c5:de:
45:e3:19:ab:06:2b:35:e8:50:0a:03:cf:22:62:95:a9:67:d2:
de:51:fb:ea:e7:cc:ed:5d:e0:e7:81:92:70:2b:91:46:4a:04:
8d:0e:bd:7d:51:3a:2e:c5:ed:77:bb:71:38:a7:d0:5c:78:c4:
2f:5b:1f:2a:8e:0a:8c:ea:01:42:65:04:04:41:e7:bd:d9:7d:
3f:49:d4:71:32:8c:e0:e9:e4:db:21:d0:9d:22:35:b0:2b:06:
c8:e9:b9:e2:57:b3:7e:a8:c7:af:7b:e5:b1:6e:2d:59:1a:94:
de:c9:6d:a9:b0:dc:d9:6e:e6:0c:40:ad:73:e6:4e:8b:ba:4b:
fe:01:9d:cf:d7:c1:a0:bd:bd:c4:bf:a8:64:e2:26:1c:f2:50:
f7:62:28:3a:3a:d1:ee:09:a3:d1:a9:70:19:bd:40:01:34:f8:
a8:97:d6:ad:7e:b4:a3:ea:06:f3:1a:06:6a:77:f0:76:1c:e4:
c6:48:c3:3b:17:a0:dc:32:f0:b8:23:2b:02:e9:d1:38:fb:b0:
b8:e1:00:b6:a7:1c:31:41:56:3f:52:ff:6b:c1:97:03:08:f5:
07:8f:62:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx
NUY3MDA2ODQwHhcNMjYxMDIyMjEzMzA0WhcNMjYxMDI5MjEzMzA0WjAYMRYwFAYD
VQQDEw02YWRhODExMC03MDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthunWmOM10UYMZpewIY6GIuZShN+sA+JxZ0hBEsx1Gxt0BvvVPfQ+9sL2iG9
S9VOLyCjCq8sPf79qdwssOc7o3qd08VSbB9TXUuEZHtiNHQ56RYoCKwyN9bwwri7
4IPjPtZ8idkkJpg/tB5BtnscdciovwLbiwF5iZma42mKOE5UE3K2uxZYTAANAPlx
4X29Rjj3HhtXXYpYxBjmEfluj3q2RQQ88mRy9OHM0ZGppSF4nld7FcuJRejZ4kCn
vJUl0Cmf0onCItMYHCOcFImKOk1l1dpNU9TLK5obuAJcBgNB8D67bY5lDnaYrubh
VeNWwP8zzBXQfORmi69sMQYDgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7F/h3I
B/Darem3G/2PbEI59IErMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1
MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC
b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5
WDZPV2hCdTNjOW9WOXdCb1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVOdFGHqs2pVjLhgfvC2R73Gj3nsB1xOc0daXMDXtCqMNAsXeReMZqwYrNehQ
CgPPImKVqWfS3lH76ufM7V3g54GScCuRRkoEjQ69fVE6LsXtd7txOKfQXHjEL1sf
Ko4KjOoBQmUEBEHnvdl9P0nUcTKM4Onk2yHQnSI1sCsGyOm54lezfqjHr3vlsW4t
WRqU3sltqbDc2W7mDECtc+ZOi7pL/gGdz9fBoL29xL+oZOImHPJQ92IoOjrR7gmj
0alwGb1AATT4qJfWrX60o+oG8xoGanfwdhzkxkjDOxeg3DLwuCMrAunROPuwuOEA
tqccMUFWP1L/a8GXAwj1B49idA==
-----END CERTIFICATE-----
Generated at Sat Oct 24 02:13:31 2026 by rpki-client