
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier: CPLtwV8cVVuunfUrkesr/s/Wth/ru3mggOlfg7Y3v+U=
Subject key identifier: 8E:6E:A4:5F:8C:63:42:98:1D:9E:B4:47:08:E2:4C:0E:9A:97:10:1E
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 31C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number: 3138
Signing time: Fri 04 Sep 2026 15:24:24 +0000
Manifest this update: Fri 04 Sep 2026 15:24:23 +0000
Manifest next update: Fri 11 Sep 2026 15:24:23 +0000
Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: eZtL0ygon2QZCHiqLVxPaZvV4mTZplDQrNtKhjarffc=)
2: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=)
3: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: Bh0KOlYAcUWAXt3WdoXHJOCw2Q1uBx39GJDLv8eD0T8=)
4: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: U3Ln4yzn8NQ06p1eFYCEFA90g6K7BH94tZxVPn7SxXk=)
5: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: /ot5DoHQF40alQvvcmtFXp57ebCwbLGHhRnrByVbsDA=)
6: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: Hl3h+xajA6uyUcgR+szgYx0GkKpSQx8UaQOMAFI5mWs=)
7: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=)
8: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0AZBDmh8J9l8VOqehLNqWYnMqjkmPYEkpVJJP0YL/UM=)
9: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: LToWIQ1COMbsBcEbH54cRu/d6HNi0lrBivKKu1OeKJk=)
10: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: 7qL24XtJJGYddBNzZ1f8/6sYDORXFfhTRLN+KXoF1UE=)
11: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=)
12: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: NR3htRP9a6F2ckA37vX/zVJgydrhk/y6ALKCOIGQr/c=)
13: F1A29F32843111F18303D56C65A30FBC.roa (hash: 5a8O9Z1V3ja/5ztqSfJLuOOFIOZvUJHqD1otnk0gm90=)
14: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=)
15: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: aSXWB68fSWHHDo5FqMadmbWywQoiETk4RCpEwtCS3cM=)
16: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=)
17: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12741 (0x31c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Sep 4 15:24:23 2026 GMT
Not After : Sep 11 15:24:23 2026 GMT
Subject: CN=6a9ae2a7-91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:81:22:de:34:73:3e:8f:75:1b:77:36:44:
50:74:a9:a0:24:b3:ef:c4:18:52:d8:7a:8d:51:3d:
1c:9d:05:a9:24:a4:0d:9b:5b:1d:6d:df:82:22:96:
ec:02:8c:8a:44:0d:62:50:bc:6a:eb:3a:63:86:62:
85:a4:f2:51:01:19:c0:97:ce:4c:d7:d0:db:df:bd:
44:18:df:ed:0d:82:9f:9c:32:8b:d2:b3:da:2a:38:
69:94:3a:9e:c9:8f:a9:a6:3b:80:77:69:1e:91:0c:
91:d6:62:4d:7f:a5:bc:ae:d3:f9:72:6c:9b:8c:d3:
c8:cb:7f:45:9f:72:f6:26:1c:4b:4c:36:bf:1b:45:
5b:25:a1:04:3f:13:dc:2a:56:c8:8b:5d:c6:cc:8c:
51:e4:b0:bc:60:a9:cc:10:54:63:c5:16:52:d5:25:
81:a9:6f:33:0f:a6:b6:f8:98:48:31:fd:fe:cd:d5:
2d:9a:25:03:3d:fc:52:97:aa:fc:c2:26:22:79:3a:
71:65:96:26:32:05:a1:b2:3b:b8:e7:8b:bf:03:d4:
f6:68:fd:fa:cf:ff:91:e4:0f:59:2f:b7:d9:06:68:
d5:12:a9:62:d7:cc:00:4d:71:2b:b2:0a:0e:22:75:
49:bc:41:89:d6:08:1e:75:9b:2b:b8:82:4f:f7:ac:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:A4:5F:8C:63:42:98:1D:9E:B4:47:08:E2:4C:0E:9A:97:10:1E
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:34:14:27:8f:92:45:51:07:7c:75:13:e3:29:19:f5:c0:ca:
ee:21:75:cf:c9:3f:de:28:47:2c:17:e8:24:57:48:9d:d6:0a:
95:06:0b:84:6a:c3:cd:ed:36:25:e0:43:b2:54:6c:1a:a0:88:
32:d5:29:25:9d:ff:25:04:45:e9:f4:0e:7e:28:be:5f:8f:46:
33:9c:5d:c0:0e:1d:ba:bb:1c:ba:5c:c7:a3:03:d0:90:38:ff:
5f:f7:00:7d:1e:ee:eb:8c:aa:8f:7d:61:b9:63:b2:78:14:5a:
e7:9e:df:7d:ea:be:f9:5e:46:cf:48:71:ec:4b:bd:29:35:23:
bf:b3:de:63:73:21:d3:47:09:9c:bd:f6:8a:fe:4a:27:b6:9b:
f3:ea:2e:3e:01:7b:94:4e:1c:94:db:61:72:3c:0a:be:83:f0:
0b:3d:4d:c7:5b:37:f6:0c:33:92:4c:47:46:ac:f3:47:0f:62:
f4:b2:0d:83:eb:ee:26:ae:47:98:b8:8d:00:3f:64:12:d8:eb:
41:da:4b:6c:e5:53:7b:a0:16:ff:e9:b3:61:32:3a:09:9a:3f:
dd:55:12:4c:08:6b:ad:3b:c8:84:78:64:fe:47:d5:4a:4d:b7:
d1:93:4e:47:57:79:4a:c1:7b:62:a5:e1:80:eb:ee:39:31:0f:
15:7e:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:53:58 2026 by rpki-client