
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier: nsLeRlEqvbk6hFzifgT72V/BFDHYpUnW6yc1DJHaYiQ=
Subject key identifier: 8F:E9:1C:85:06:5D:97:93:32:9F:03:BC:8E:BC:02:A8:3A:4F:A3:25
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 31DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number: 314F
Signing time: Tue 20 Oct 2026 15:26:18 +0000
Manifest this update: Tue 20 Oct 2026 15:26:17 +0000
Manifest next update: Tue 27 Oct 2026 15:26:17 +0000
Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: eEFWJA2Q5DJTqiWahb1Q2gJo8m5M6wLAHEzArn9F7Qw=)
2: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=)
3: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: Hl3h+xajA6uyUcgR+szgYx0GkKpSQx8UaQOMAFI5mWs=)
4: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=)
5: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: aSXWB68fSWHHDo5FqMadmbWywQoiETk4RCpEwtCS3cM=)
6: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=)
7: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: LToWIQ1COMbsBcEbH54cRu/d6HNi0lrBivKKu1OeKJk=)
8: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=)
9: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: /ot5DoHQF40alQvvcmtFXp57ebCwbLGHhRnrByVbsDA=)
10: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=)
11: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=)
12: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: NR3htRP9a6F2ckA37vX/zVJgydrhk/y6ALKCOIGQr/c=)
13: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: U3Ln4yzn8NQ06p1eFYCEFA90g6K7BH94tZxVPn7SxXk=)
14: F1A29F32843111F18303D56C65A30FBC.roa (hash: 5a8O9Z1V3ja/5ztqSfJLuOOFIOZvUJHqD1otnk0gm90=)
15: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: Bh0KOlYAcUWAXt3WdoXHJOCw2Q1uBx39GJDLv8eD0T8=)
16: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0AZBDmh8J9l8VOqehLNqWYnMqjkmPYEkpVJJP0YL/UM=)
17: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: 7qL24XtJJGYddBNzZ1f8/6sYDORXFfhTRLN+KXoF1UE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 15:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12764 (0x31dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Oct 20 15:26:17 2026 GMT
Not After : Oct 27 15:26:17 2026 GMT
Subject: CN=6ad78819-81fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:2f:4b:44:99:c4:bf:b4:11:4a:98:b1:88:
57:b4:47:6f:f5:f6:28:76:5d:13:4b:ab:13:7f:f9:
86:4b:b2:0e:c9:8e:8e:df:3d:e4:c3:5a:87:86:7a:
d9:73:f3:de:f3:28:36:50:55:31:1e:1a:c3:3c:72:
a2:78:6f:c1:cc:a1:fe:8f:39:78:26:cc:0b:64:37:
a2:3a:1c:4d:66:9e:74:cc:99:fe:d5:0f:f6:58:25:
af:aa:c8:87:b9:0d:fd:f0:72:8c:28:11:09:0b:50:
7a:5b:d2:04:da:ca:e4:29:25:bd:35:83:83:e9:5d:
d7:95:dc:f9:69:4c:0f:00:a8:81:ab:e5:eb:4d:1c:
ad:23:21:01:cf:50:a6:b9:37:97:86:c5:78:67:84:
fe:d3:b1:38:20:4b:0b:b4:bc:d1:ea:ab:9f:fd:a8:
ba:9a:a8:3d:1a:f5:50:c9:f3:1f:8c:3b:c8:c8:51:
d0:21:92:dd:b1:a5:75:59:fe:1f:0c:d5:62:64:0c:
16:20:fd:b0:a8:2c:70:26:33:47:cb:ea:e3:23:dd:
a1:96:61:04:a3:e5:c2:b5:6a:2c:f9:c7:ee:2a:d8:
84:69:cc:65:a5:7f:77:8b:cc:3a:a4:f6:49:39:6a:
76:8a:74:d9:e8:e5:32:c9:9b:2f:f6:3c:5f:b2:38:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:1C:85:06:5D:97:93:32:9F:03:BC:8E:BC:02:A8:3A:4F:A3:25
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cf:41:23:bc:b9:1f:7f:d4:c8:77:9b:bd:40:b1:c9:13:1d:
31:58:48:cb:7d:c7:8e:0c:19:ac:f9:34:03:79:da:42:bc:b8:
ee:f5:6d:3f:9e:bf:11:d4:c0:7f:1c:7e:29:7a:e8:94:db:1a:
d7:c8:ee:d2:94:46:e0:3f:ff:92:0c:a3:3c:de:62:a4:d8:1a:
3d:90:3d:50:c1:63:35:d7:97:b7:06:41:87:c5:e0:a1:33:ea:
21:3e:12:12:42:ae:da:62:73:19:cf:b9:14:0a:cc:0c:3f:44:
14:38:c7:3d:87:d3:23:e0:48:69:2e:1b:8b:8b:bf:0e:0b:5e:
c4:92:ed:99:7d:20:10:a8:dd:5a:99:be:d7:fb:d4:01:06:fa:
a2:3c:60:2c:eb:0b:6d:6a:76:50:8b:57:8f:0f:b7:04:ff:f7:
cd:5c:cc:21:89:9d:07:7c:b4:c0:3b:e8:c8:b9:2a:ee:83:b9:
11:0d:a0:e8:99:9b:0e:bb:32:97:77:77:4e:31:9b:36:84:7f:
b2:f6:94:bb:c0:80:f7:9a:7b:5f:9c:da:ea:d0:62:c7:f8:7a:
db:bb:bc:26:3a:5a:5f:0f:01:43:ce:d2:f5:7b:7e:6d:ea:f6:
60:5f:68:33:6b:58:8f:b0:b4:64:67:50:c6:7d:c4:43:d2:2f:
ce:47:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:04:29 2026 by rpki-client