
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier: QMvZ7q4zYrX+FveIM6IabfoBjxX13xvvQoiKwKugeOg=
Subject key identifier: 1F:7E:0F:AA:65:B7:07:4D:F9:B9:A1:65:67:74:FB:84:1F:F6:C6:32
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 3155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number: 30D8
Signing time: Fri 06 Mar 2026 15:22:49 +0000
Manifest this update: Fri 06 Mar 2026 15:22:49 +0000
Manifest next update: Fri 13 Mar 2026 15:22:49 +0000
Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: kWXxsVIMYjDbZeTU8cn1rII6/fWu0vkTt5cRP4cWFXw=)
2: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: w6jopDYdBCSKneIqUB+uGylPK/ivurOX7DEN4AdjgnA=)
3: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: BRSGBu/6q3GwQLt600UgprgrzUqX0i//fWpSz8ak1m0=)
4: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: de2C8Xu2sn4wIkObgdX6KvmUkB+P2+zRTh51LUtEnFY=)
5: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: SmQ5CGEJCE3s9/YNxwJXtFcb33wFKBOX7DlFwf6j2G4=)
6: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: tIuCeWt8loP5ZmBWFAM7052UGdSqIBcg6mUyDDDPLo0=)
7: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: y5ciIKx3lqS7z/BR3HumcZnil59gOk0O6RNJFaL0JeY=)
8: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: ccU5A3TwZ5EmSAvHoBQM+S9rDORLffXDKuCFeSF3XaM=)
9: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: wmmz/QZK42uhoPNkWkDZAabuw7FDO3k7EWNvm0NWAOw=)
10: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: UIF18yXEMKB6Xi+ID1n3xjpnZMc0AimyXBIjScTOYBA=)
11: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: ZCk+fEsQHe2jlnBNkTm2b7TPnu7HbyKCFYwP585vSWU=)
12: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: /FrpL0qVU1o4ddXI6hWw5Yj8pF2l/G6Nolhot450TQg=)
13: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: fcJYmXSZeVG/6eLQqu0NVh0YwupBcKyyjG3vFyzIP2U=)
14: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: gko9Q35KdBOiYMYQc7V0na7o/2+tf0Ti0oIVrHZBvXA=)
15: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: Mu9rMlzhoKL6wcm2IQfT1fYiz3u1EpWT7mob7q7u//c=)
16: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wbfTUnUAKsJRrWfnHjlaeLodofy5Oo1bl9O6vPfn9a4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12629 (0x3155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Mar 6 15:22:49 2026 GMT
Not After : Mar 13 15:22:49 2026 GMT
Subject: CN=69aaf149-b6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:af:78:0f:76:fc:35:65:7e:05:78:01:bb:
b1:aa:02:39:db:5a:b7:33:3f:d2:21:49:95:e3:a8:
d4:14:b6:e1:2d:73:84:31:f4:cc:37:dd:fb:41:e7:
ea:61:3e:ef:23:60:39:09:f4:5b:96:24:b2:68:6c:
0b:59:10:73:85:f2:2e:8d:d8:ed:cf:0e:84:99:f6:
96:6e:07:88:7d:7c:1d:eb:69:e6:bd:09:c2:54:6b:
22:96:3c:6d:23:6e:52:fe:fd:c9:58:bb:5c:1a:af:
8f:d5:b3:ed:19:85:8d:4e:76:2d:39:84:11:50:b2:
eb:de:a5:b8:70:74:7c:48:3b:cb:cb:4a:53:c0:c4:
b2:65:bb:c3:0d:54:26:fe:41:3b:06:18:07:07:b6:
34:ab:6b:e6:6d:c9:c4:2c:07:7a:e5:d9:b2:ca:3f:
93:78:fa:5d:df:48:28:3a:29:b1:dc:1c:1c:07:a4:
88:83:c2:33:c8:85:8b:0a:21:26:68:3b:bd:df:0b:
b5:ec:b3:f4:e0:32:b8:1e:5b:9a:20:c9:09:66:ac:
55:13:2e:77:da:96:72:20:d1:e4:65:03:9a:e8:52:
57:35:73:be:c7:77:91:74:f2:e3:2e:d3:fd:2b:62:
cf:b3:a0:28:e9:47:42:52:b0:9a:0a:8e:e8:84:d8:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7E:0F:AA:65:B7:07:4D:F9:B9:A1:65:67:74:FB:84:1F:F6:C6:32
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:b4:1f:f7:0e:ea:21:ce:2a:64:7b:19:f6:91:ad:90:07:
61:06:98:92:6d:ca:40:a8:5f:3f:b5:ec:65:cb:ff:95:6f:ce:
b8:cd:33:fe:40:bc:74:e8:3a:3f:30:30:02:45:26:73:ae:9e:
fc:ab:48:f3:2d:fe:61:f4:c8:16:e4:a5:3c:71:25:a3:50:a0:
af:b9:df:7b:07:5c:1d:65:6d:6e:64:c6:0f:2f:cd:3f:02:2e:
62:d8:44:c1:cb:6c:4c:73:e1:3c:d3:59:9a:18:f5:05:f7:77:
8a:8f:00:84:aa:6f:e6:10:96:35:bb:6c:84:88:63:ed:ff:82:
4d:07:f8:ff:6e:bd:d6:8b:75:59:19:87:37:8f:23:b7:51:89:
d5:7c:bd:2e:4a:b9:ea:cb:ee:e3:ba:8f:21:02:84:8a:e2:f9:
40:4d:8f:fa:fe:3a:73:44:6e:de:15:2a:a1:4c:7a:38:7a:43:
88:c6:e1:e3:32:69:41:d6:5e:b7:b5:26:05:89:48:0c:71:42:
65:c2:74:72:aa:ba:20:21:c6:48:02:65:21:bc:fb:27:89:63:
ea:e0:9f:65:80:fa:3a:39:1c:ca:c9:03:fe:84:60:5d:4a:a8:
0b:b7:23:d0:d7:ed:34:fc:8d:1d:6a:27:34:3c:6c:31:e9:27:
7f:e5:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:05:13 2026 by rpki-client