
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier: zK8lY6bJPM1993bcVaDU8A3iCzXStPPvgFsxcJ2zpZI=
Subject key identifier: F8:54:85:EC:A1:C4:C7:2B:20:64:9F:3B:F3:34:F9:6B:68:96:A1:0F
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 31DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number: 3150
Signing time: Thu 22 Oct 2026 15:26:54 +0000
Manifest this update: Thu 22 Oct 2026 15:26:53 +0000
Manifest next update: Thu 29 Oct 2026 15:26:53 +0000
Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: vXqQKAA37D8FJn1vonBOemuzfjnP4YIvCE02gxI/C2E=)
2: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: Bh0KOlYAcUWAXt3WdoXHJOCw2Q1uBx39GJDLv8eD0T8=)
3: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0AZBDmh8J9l8VOqehLNqWYnMqjkmPYEkpVJJP0YL/UM=)
4: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: LToWIQ1COMbsBcEbH54cRu/d6HNi0lrBivKKu1OeKJk=)
5: F1A29F32843111F18303D56C65A30FBC.roa (hash: 5a8O9Z1V3ja/5ztqSfJLuOOFIOZvUJHqD1otnk0gm90=)
6: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: /ot5DoHQF40alQvvcmtFXp57ebCwbLGHhRnrByVbsDA=)
7: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: U3Ln4yzn8NQ06p1eFYCEFA90g6K7BH94tZxVPn7SxXk=)
8: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=)
9: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: aSXWB68fSWHHDo5FqMadmbWywQoiETk4RCpEwtCS3cM=)
10: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=)
11: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: NR3htRP9a6F2ckA37vX/zVJgydrhk/y6ALKCOIGQr/c=)
12: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=)
13: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=)
14: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=)
15: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=)
16: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: 7qL24XtJJGYddBNzZ1f8/6sYDORXFfhTRLN+KXoF1UE=)
17: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: Hl3h+xajA6uyUcgR+szgYx0GkKpSQx8UaQOMAFI5mWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12765 (0x31dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Oct 22 15:26:53 2026 GMT
Not After : Oct 29 15:26:53 2026 GMT
Subject: CN=6ada2b3e-1c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:dd:19:01:84:d8:29:6d:aa:59:18:c9:2d:
31:58:da:ea:ec:6a:02:53:49:b9:06:bc:f4:61:55:
f2:7d:19:72:a4:7e:5d:42:13:52:60:24:6e:f9:e2:
4b:a9:6f:e4:d5:fb:cc:2c:b1:6e:d0:36:ee:ee:68:
45:af:58:54:7b:07:20:d9:72:46:09:96:0a:98:da:
a0:2a:7e:b3:2c:95:c2:48:47:74:7b:9e:65:8e:a4:
fb:25:44:bd:9f:6b:ee:48:9e:34:73:9d:37:ba:38:
fa:aa:bb:17:97:f8:5a:db:59:a0:2d:e8:a7:a3:f0:
9e:ad:02:b1:c2:04:b4:ee:7d:59:ba:54:0a:24:99:
82:cc:89:ee:46:c6:c7:7c:ca:4d:78:cf:98:fd:03:
54:a6:ee:a7:af:22:99:30:fa:1d:f6:90:73:f5:78:
79:0d:4c:e6:cf:49:5c:00:8f:f2:81:df:bd:40:7d:
c4:09:81:d2:98:40:02:2e:f8:b7:18:3b:77:4f:67:
1e:8a:23:b6:a5:9b:56:fa:e2:ed:b7:f1:60:10:a8:
b7:f7:ce:a0:09:9a:da:18:fb:fa:d5:af:80:72:c6:
01:43:1d:ed:6d:fd:98:c2:65:cf:77:8e:d7:b9:3b:
46:5b:9e:62:c8:4a:be:55:1a:aa:68:84:b9:57:14:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:54:85:EC:A1:C4:C7:2B:20:64:9F:3B:F3:34:F9:6B:68:96:A1:0F
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:5f:7f:38:bf:42:bb:4e:6c:78:c1:2d:60:98:14:c5:fa:58:
72:93:d6:35:7a:8b:57:1d:c9:89:a9:1b:07:e8:d8:57:ac:c4:
c8:42:06:58:79:53:0c:fb:f3:ce:87:48:f1:e1:fb:46:e3:bd:
4b:67:36:84:f5:ce:b8:03:51:d0:0d:87:ad:90:96:66:09:13:
25:e3:a5:a0:15:bc:d9:6a:3e:1f:1a:8a:7c:1a:7f:67:91:1d:
ca:04:64:8d:57:3e:13:ea:81:ac:fe:25:1f:39:d3:b1:b0:b5:
1f:21:49:42:e9:87:d5:64:c1:a3:70:84:92:e9:b9:4a:80:01:
53:49:4a:a7:f5:54:13:d6:09:d3:8b:f3:ea:2b:cc:75:1b:ef:
0a:84:ad:3a:1a:be:98:f6:02:20:a1:d2:94:11:44:a6:e5:20:
9a:fd:c7:19:dd:d6:08:a8:27:d0:85:3a:a8:c0:7f:ab:0e:a3:
e1:ca:38:1f:22:be:13:dd:1a:37:8a:33:d4:88:27:71:51:86:
5f:af:9f:90:23:30:00:b1:06:fa:80:e0:3c:7e:d7:9e:51:eb:
84:29:98:27:eb:19:43:c3:76:2b:30:24:76:77:d4:4c:f3:66:
22:b1:fe:7e:ac:67:5a:ca:f3:14:3d:69:a7:2f:ba:8f:98:74:
26:8d:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 04:17:13 2026 by rpki-client