
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json)
Hash identifier: pgaWsMzPQoQ8ADwI7Q7SAbHjlCcngi+Q1BK50WcmtV4=
Subject key identifier: D1:C7:7F:9E:33:95:7E:55:E7:85:B8:2C:8F:0D:C3:FB:2B:34:D3:26
Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
Manifest number: 0243
Signing time: Mon 05 Oct 2026 02:47:03 +0000
Manifest this update: Mon 05 Oct 2026 02:47:03 +0000
Manifest next update: Mon 12 Oct 2026 02:47:03 +0000
Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: /tD0fYE+8vJUBROiQx7gWdwVwSy2tW9YmvMBRd4fXZM=)
2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: Q+PqjUyyIbMBWSpORGj6TQ+PmdOe/qs7/MICLEALP84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Validity
Not Before: Oct 5 02:47:03 2026 GMT
Not After : Oct 12 02:47:03 2026 GMT
Subject: CN=6ac30fa7-fd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:99:16:7f:10:90:44:07:02:74:f2:8b:54:
47:eb:40:2a:53:28:28:38:87:26:7e:42:db:96:a6:
72:39:5c:7f:ba:c2:31:15:5b:c3:4d:8e:80:5c:be:
4b:0d:22:ff:61:25:9b:ed:69:a9:9e:f8:21:8e:14:
6c:6f:00:04:b1:1a:0f:32:3a:2a:e4:00:dd:66:d1:
05:8d:c7:42:ed:2b:67:60:39:eb:19:54:25:e9:a7:
b1:16:a8:c6:39:a2:e0:4a:33:d7:0f:f1:a9:ef:f4:
a5:24:d7:54:1d:e2:e9:71:82:e1:18:e7:f3:06:0a:
96:5c:7f:85:73:8f:8d:6c:c8:7b:02:bb:a7:6d:ee:
e8:da:18:48:c7:a9:e9:de:a9:d8:8c:8c:c1:f7:90:
15:82:c2:b5:7b:7f:36:17:6d:b0:e0:9f:b1:f1:73:
0c:5c:1d:c4:d8:ce:3a:60:bf:0f:3f:08:28:09:e6:
27:2b:b2:b2:26:5e:c6:d0:3e:93:31:9f:a5:2f:df:
c2:51:83:d2:35:25:52:c5:f8:91:50:6a:ad:d3:c4:
0f:a8:fd:68:ab:d8:1c:d9:66:2a:94:06:71:56:69:
a1:b4:7f:f1:bc:f3:3b:00:8f:3e:e8:62:40:11:e2:
35:78:94:75:ce:83:84:29:4a:bd:bf:96:aa:f9:a2:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C7:7F:9E:33:95:7E:55:E7:85:B8:2C:8F:0D:C3:FB:2B:34:D3:26
X509v3 Authority Key Identifier:
keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:78:ac:58:8e:31:a9:fa:ab:2a:9f:b3:6d:73:3c:fe:69:98:
51:26:31:fe:35:4b:f2:92:60:ed:30:54:2b:8c:3b:2a:a1:d3:
20:3e:b5:83:bb:ac:16:d2:f6:7e:2f:18:85:2b:5f:11:11:c3:
b9:09:bc:c5:b2:fe:f5:e7:30:62:88:9c:d8:88:aa:af:54:2a:
2d:20:d1:6e:72:4a:fc:2d:a4:1e:38:58:04:8c:6b:70:70:c4:
b2:20:3e:b7:75:8a:c2:02:ce:53:ab:95:5f:a3:57:da:44:c4:
f9:6f:40:67:69:4a:a9:f4:04:ff:94:4d:6d:51:5c:c1:88:2c:
2d:69:dc:0b:95:c8:4e:05:18:fd:9d:54:7e:5a:05:07:50:19:
df:6c:40:43:23:c9:33:83:f0:ad:b2:d9:2a:8a:0e:d4:d2:77:
62:35:6b:b6:c2:be:6c:27:1e:1b:68:48:8f:0c:d1:03:eb:bb:
a8:1b:f9:db:86:59:57:89:5b:a5:95:d9:ff:6c:1d:75:75:18:
2a:df:fb:85:b3:a7:5a:54:6f:aa:d9:29:63:f0:00:fa:58:ed:
0a:43:f6:26:b9:40:66:42:d2:fa:2e:bd:fe:58:42:24:59:c3:
27:78:81:26:23:77:39:bb:c5:e2:98:78:3f:51:88:b0:b5:7b:
1a:5b:11:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC
MDU5MTFCOUMwHhcNMjYxMDA1MDI0NzAzWhcNMjYxMDEyMDI0NzAzWjAYMRYwFAYD
VQQDEw02YWMzMGZhNy1mZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2OKZFn8QkEQHAnTyi1RH60AqUygoOIcmfkLblqZyOVx/usIxFVvDTY6AXL5L
DSL/YSWb7WmpnvghjhRsbwAEsRoPMjoq5ADdZtEFjcdC7StnYDnrGVQl6aexFqjG
OaLgSjPXD/Gp7/SlJNdUHeLpcYLhGOfzBgqWXH+Fc4+NbMh7Arunbe7o2hhIx6np
3qnYjIzB95AVgsK1e382F22w4J+x8XMMXB3E2M46YL8PPwgoCeYnK7KyJl7G0D6T
MZ+lL9/CUYPSNSVSxfiRUGqt08QPqP1oq9gc2WYqlAZxVmmhtH/xvPM7AI8+6GJA
EeI1eJR1zoOEKUq9v5aq+aKjNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHHf54z
lX5V54W4LI8Nw/srNNMmMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE
RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH
NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6
NnAzWmRRTzhuU2l3V1JHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPXisWI4xqfqrKp+zbXM8/mmYUSYx/jVL8pJg7TBUK4w7KqHTID61g7usFtL2
fi8YhStfERHDuQm8xbL+9ecwYoic2Iiqr1QqLSDRbnJK/C2kHjhYBIxrcHDEsiA+
t3WKwgLOU6uVX6NX2kTE+W9AZ2lKqfQE/5RNbVFcwYgsLWncC5XITgUY/Z1UfloF
B1AZ32xAQyPJM4PwrbLZKooO1NJ3YjVrtsK+bCceG2hIjwzRA+u7qBv524ZZV4lb
pZXZ/2wddXUYKt/7hbOnWlRvqtkpY/AA+ljtCkP2JrlAZkLS+i69/lhCJFnDJ3iB
JiN3ObvF4ph4P1GIsLV7GlsRuQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 14:41:01 2026 by rpki-client