
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json)
Hash identifier: gjTxBzQqnMQeppP21CCAbHnsoPSZKKByJPU6IhtywOk=
Subject key identifier: F7:EE:22:20:26:DF:AA:07:6F:48:99:F5:31:6A:29:4F:93:7C:4C:78
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
Manifest number: 0257
Signing time: Mon 31 Aug 2026 02:45:47 +0000
Manifest this update: Mon 31 Aug 2026 02:45:47 +0000
Manifest next update: Mon 07 Sep 2026 02:45:47 +0000
Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: mWOcpdZ1K+sO7NAQh4Q19EJH5WJyfx/DDQS7g8rPkzQ=)
2: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: zYrmifFyXf8eyAWgav1JJc7uPLea+6me2PDJlPHyfws=)
3: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: mxZONybayBYjT/wE5ER2yG5aHXpF0N7OGPjQ6melKBE=)
4: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: vDv+eD+OfMVa33qvWILzbZ7BF93e5A2vMNwg9cii/zI=)
5: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: WQFzmtRcnRTzLa+owzbcIOOpVzi5EXn6wMZBFZmtrx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 02:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Validity
Not Before: Aug 31 02:45:47 2026 GMT
Not After : Sep 7 02:45:47 2026 GMT
Subject: CN=6a94eadb-ba67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:01:e1:09:e7:0f:f4:f4:e8:77:b8:d8:3e:
59:be:14:a8:fa:3a:1b:d4:c4:c1:1a:25:7e:49:75:
4e:94:1c:5f:d2:18:b6:30:09:e9:85:15:da:86:cd:
ff:c6:fa:a7:04:98:0d:f8:3d:58:4e:2f:64:e5:73:
44:f4:27:9a:4c:62:82:b0:26:b9:70:17:6e:a9:88:
b9:01:8c:b4:af:b9:3d:65:7f:34:b9:a2:af:ba:74:
ff:3d:b1:d5:00:74:80:09:87:b4:5f:75:e2:ca:9a:
07:c2:f4:11:72:68:79:b5:fc:f9:a8:f1:83:6f:af:
46:a6:48:20:45:9c:31:30:c1:27:8c:bc:42:09:d2:
73:2c:cb:71:3a:7c:91:c1:2d:7f:1d:10:b2:28:6a:
83:1d:98:15:a5:41:2d:b7:ff:3c:74:3f:04:25:7d:
39:c9:92:db:66:44:3e:2e:ac:d4:08:17:77:67:7d:
a7:fd:65:80:fd:0b:b8:d4:a2:b5:07:14:16:be:82:
fe:8a:93:c1:10:92:67:9e:0a:6d:03:21:54:f1:0c:
cb:c5:f1:56:11:4c:bb:93:58:30:6f:76:27:8a:f2:
ad:ff:25:c2:20:99:79:df:5b:1f:57:88:97:de:fc:
c3:a1:2c:6c:2c:7c:13:d0:9b:22:85:2e:ed:31:fb:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EE:22:20:26:DF:AA:07:6F:48:99:F5:31:6A:29:4F:93:7C:4C:78
X509v3 Authority Key Identifier:
keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:36:ec:71:12:7f:32:aa:cf:37:a1:73:31:dc:5d:c7:95:
16:d7:c4:80:25:69:4a:1d:74:05:97:4f:64:73:b2:8a:0d:62:
fb:61:3b:e1:e3:6d:ea:fd:f5:f5:e3:43:6f:e0:46:46:e6:31:
68:3e:5d:7b:bb:26:82:5d:67:c8:52:8b:f7:8a:b5:5f:63:a6:
65:9b:40:ce:fa:05:7b:e8:c6:92:51:91:58:c8:d0:5d:e4:a1:
78:93:e7:01:a1:23:f9:e2:19:12:87:61:1f:33:dc:8b:3d:07:
d0:19:ca:2e:6f:77:dd:aa:5c:87:1a:66:21:04:a8:f2:2d:b0:
6f:15:4f:58:39:ac:cf:0a:9e:af:7a:0a:2a:84:c8:33:6f:f2:
73:ad:96:30:ea:f2:ec:e8:8f:1e:02:f9:df:f8:28:9d:50:06:
b7:ab:87:91:c8:e9:eb:c3:f9:01:9d:1f:f0:e3:42:27:ae:82:
5e:36:9a:60:02:cf:7a:16:d1:dc:5d:33:81:4a:29:b2:74:af:
2c:79:ff:63:af:dc:5d:57:11:c3:6c:ed:13:34:95:ec:87:04:
e9:e7:ac:fb:27:44:94:f4:bf:9d:30:23:04:0a:f7:60:2d:52:
ca:51:9c:5f:de:28:b0:ca:dd:9c:f2:d7:33:53:94:02:87:85:
51:ef:5e:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB
NDk2RjQ0OTkwHhcNMjYwODMxMDI0NTQ3WhcNMjYwOTA3MDI0NTQ3WjAYMRYwFAYD
VQQDEw02YTk0ZWFkYi1iYTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs84B4QnnD/T06He42D5ZvhSo+job1MTBGiV+SXVOlBxf0hi2MAnphRXahs3/
xvqnBJgN+D1YTi9k5XNE9CeaTGKCsCa5cBduqYi5AYy0r7k9ZX80uaKvunT/PbHV
AHSACYe0X3XiypoHwvQRcmh5tfz5qPGDb69GpkggRZwxMMEnjLxCCdJzLMtxOnyR
wS1/HRCyKGqDHZgVpUEtt/88dD8EJX05yZLbZkQ+LqzUCBd3Z32n/WWA/Qu41KK1
BxQWvoL+ipPBEJJnngptAyFU8QzLxfFWEUy7k1gwb3YnivKt/yXCIJl531sfV4iX
3vzDoSxsLHwT0JsihS7tMftnMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfuIiAm
36oHb0iZ9TFqKU+TfEx4MB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3
MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k
ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXdw27HESfzKqzzehczHcXceVFtfEgCVpSh10BZdPZHOyig1i+2E74eNt6v31
9eNDb+BGRuYxaD5de7smgl1nyFKL94q1X2OmZZtAzvoFe+jGklGRWMjQXeSheJPn
AaEj+eIZEodhHzPciz0H0BnKLm933apchxpmIQSo8i2wbxVPWDmszwqer3oKKoTI
M2/yc62WMOry7OiPHgL53/gonVAGt6uHkcjp68P5AZ0f8ONCJ66CXjaaYALPehbR
3F0zgUopsnSvLHn/Y6/cXVcRw2ztEzSV7IcE6ees+ydElPS/nTAjBAr3YC1SylGc
X94osMrdnPLXM1OUAoeFUe9enQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:54:26 2026 by rpki-client