
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier: YYKsPjUZEf9Gj8JmYhZZHdIWoNp/SfpVXO+JGpzKtmg=
Subject key identifier: CB:78:FA:10:EC:C1:C0:8E:84:7E:AE:6B:7F:C8:13:43:03:2B:79:5E
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial: 08BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number: 08A7
Signing time: Mon 26 Oct 2026 20:39:14 +0000
Manifest this update: Mon 26 Oct 2026 20:39:14 +0000
Manifest next update: Mon 02 Nov 2026 20:39:14 +0000
Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: E/q0QSNi4CbpmenYRZWNLdhEKfmup/tcHWbJk0vEikM=)
2: 21EE9510083211EB81509633C4F9AE02.roa (hash: iKMQHOBFrgyHmy/Ps4jIsLKGqzItSxXRkBRTt6rveQ4=)
3: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: 4D8RNBVxZ4n/YFoAFxcO6RiKNijl1P5296cdlR8pmnU=)
4: 12B8820E32E811F183E6E984A4833773.roa (hash: 6EFTeBZ1wXqiO/PUIgVs+ZVAsoL+Rx0rt9GNyp8g/+E=)
5: 03DBE96C27D311F1B9B43B2EA5833773.roa (hash: S3e+5praX3fveUx0PS8OILIaCoCyEFWJPJkSDQ7Hz+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 20:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2235 (0x8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Validity
Not Before: Oct 26 20:39:14 2026 GMT
Not After : Nov 2 20:39:14 2026 GMT
Subject: CN=6adfba72-7407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:11:90:5c:2e:ad:29:98:cb:c5:03:6b:a1:
3d:4a:a2:3e:00:0f:86:45:aa:9b:22:82:6b:6e:f0:
db:9d:57:ce:f5:d6:4b:61:c8:0d:27:35:12:ef:6d:
e8:29:58:05:29:26:36:7e:bb:d5:14:40:1b:da:17:
98:34:4b:13:ed:0a:9b:c5:b3:f8:39:d2:d9:92:df:
4e:eb:31:81:31:b8:a7:71:2f:9f:1e:25:23:c3:76:
c3:b9:55:d1:f0:86:f4:6a:fa:71:79:88:db:bb:65:
84:a7:ad:11:4a:95:c4:b4:68:a8:ed:48:58:03:24:
26:a5:7a:94:54:d6:cc:2e:17:65:cb:73:0b:1e:53:
9b:79:f9:1c:3a:61:8a:17:97:f4:5d:86:3a:57:fc:
d8:65:8b:e8:1d:0f:8f:03:6d:b7:6f:ca:0a:be:99:
b2:44:e9:79:58:3e:61:77:7a:94:1a:c5:88:40:36:
39:c3:6d:83:29:89:da:0d:8f:b8:35:50:08:fb:0e:
ca:26:4f:0f:e2:02:bd:ac:46:a2:8b:b7:7b:24:b9:
69:08:4b:75:c1:d5:f2:5c:3c:bf:03:af:3d:61:9e:
91:af:9f:b7:f8:b5:71:2f:c9:01:8a:76:40:90:ee:
67:f5:0d:ee:68:64:7c:c6:26:65:36:ee:5b:97:c8:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:78:FA:10:EC:C1:C0:8E:84:7E:AE:6B:7F:C8:13:43:03:2B:79:5E
X509v3 Authority Key Identifier:
keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:ae:da:30:ae:b9:82:a3:44:86:48:d7:fb:c1:36:c9:56:ca:
a2:37:f2:e4:25:00:fd:40:fe:bd:06:de:32:c5:66:94:7f:eb:
4e:4c:20:e1:13:91:c9:f2:12:1a:9a:23:47:ef:72:d5:13:1f:
a7:c3:39:f8:45:23:d1:30:e0:40:98:7b:9d:c4:61:c8:16:ef:
45:6c:89:42:d3:74:c0:ea:53:f9:42:9c:85:a0:46:c7:af:97:
d7:72:6e:1f:ed:0c:13:c1:4d:de:7c:42:6b:2d:bf:a3:6a:5b:
6e:1a:32:cc:f1:db:a4:8f:1c:39:e6:28:7e:7a:21:e2:f7:48:
a5:9f:36:b9:3e:5f:c4:a0:26:e6:7b:1d:ae:ce:cc:f5:cd:64:
f0:06:3e:ca:42:20:6c:d7:83:97:8a:35:75:61:f7:68:9e:90:
7c:5b:ac:86:cf:85:8e:1b:1c:eb:5c:48:9c:29:57:36:3e:75:
20:9a:f0:fd:06:bf:b1:e6:e8:2e:8f:ea:af:76:ac:7f:78:56:
a0:79:61:79:69:99:85:c9:27:e4:9f:0e:39:ad:59:32:b1:a0:
94:1e:e5:34:2e:c7:47:95:0a:55:68:3f:c3:35:e8:68:ad:a2:
52:f5:ee:1d:16:0d:fc:bf:f0:64:22:f0:44:b4:c0:b8:7f:35:
d4:3f:ef:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF
RkFCMzExODYwHhcNMjYxMDI2MjAzOTE0WhcNMjYxMTAyMjAzOTE0WjAYMRYwFAYD
VQQDEw02YWRmYmE3Mi03NDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn9ARkFwurSmYy8UDa6E9SqI+AA+GRaqbIoJrbvDbnVfO9dZLYcgNJzUS723o
KVgFKSY2frvVFEAb2heYNEsT7QqbxbP4OdLZkt9O6zGBMbincS+fHiUjw3bDuVXR
8Ib0avpxeYjbu2WEp60RSpXEtGio7UhYAyQmpXqUVNbMLhdly3MLHlObefkcOmGK
F5f0XYY6V/zYZYvoHQ+PA223b8oKvpmyROl5WD5hd3qUGsWIQDY5w22DKYnaDY+4
NVAI+w7KJk8P4gK9rEaii7d7JLlpCEt1wdXyXDy/A689YZ6Rr5+3+LVxL8kBinZA
kO5n9Q3uaGR8xiZlNu5bl8gytwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMt4+hDs
wcCOhH6ua3/IE0MDK3leMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4
MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTRFOS9GRTU3QzJCQzA4MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZ
RzhYNElrRHNrNVR2cXpFWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAga7aMK65gqNEhkjX+8E2yVbKojfy5CUA/UD+vQbeMsVmlH/rTkwg4RORyfIS
GpojR+9y1RMfp8M5+EUj0TDgQJh7ncRhyBbvRWyJQtN0wOpT+UKchaBGx6+X13Ju
H+0ME8FN3nxCay2/o2pbbhoyzPHbpI8cOeYofnoh4vdIpZ82uT5fxKAm5nsdrs7M
9c1k8AY+ykIgbNeDl4o1dWH3aJ6QfFushs+Fjhsc61xInClXNj51IJrw/Qa/sebo
Lo/qr3asf3hWoHlheWmZhckn5J8OOa1ZMrGglB7lNC7HR5UKVWg/wzXoaK2iUvXu
HRYN/L/wZCLwRLTAuH811D/vKg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:54:30 2026 by rpki-client