
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json)
Hash identifier: gaGfXsC+S5eVDTh5mLW8YXt682JSE3GWdr43/hdmxZk=
Subject key identifier: 58:06:28:2D:F3:0F:78:B2:C2:EA:6E:D1:6E:36:D2:38:70:DF:AA:B1
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial: 242D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
Manifest number: 23F9
Signing time: Thu 10 Sep 2026 15:46:45 +0000
Manifest this update: Thu 10 Sep 2026 15:46:44 +0000
Manifest next update: Thu 17 Sep 2026 15:46:44 +0000
Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: D0zzQKNSryFj29LVa7CRrlAO0vHV8YxHScegb9i8nLw=)
2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: hJzT/XLLbMceVkg1RnXkgd5dOl16o+CTb6P8jS+3k+A=)
3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: uilr/VzadspQ9DLCCiVVicEIdw3R/zCYDu3WsWsjhCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9261 (0x242d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Validity
Not Before: Sep 10 15:46:44 2026 GMT
Not After : Sep 17 15:46:44 2026 GMT
Subject: CN=6aa2d0e5-c77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:92:a0:c7:41:f3:3e:31:1f:33:89:1c:63:
28:3d:2f:f4:b9:f4:ce:99:8b:64:20:3b:4d:5e:dc:
13:56:a2:e0:d2:76:eb:1f:a1:37:4e:6e:44:b7:e0:
a8:ef:16:e4:dd:51:23:71:94:90:9a:f4:6f:b2:fe:
3e:bf:44:6a:0e:01:76:0a:3f:c6:a6:38:28:4b:77:
d0:85:78:24:c0:32:fb:80:f5:56:f4:da:dd:c5:28:
a7:b0:a6:71:1e:7f:24:63:ec:7d:54:3e:fb:33:79:
e8:45:3f:6d:b1:0a:b4:17:74:c1:87:3b:cb:45:7e:
bb:51:3b:96:88:b6:ce:48:36:e6:c5:56:37:17:e4:
2f:ca:ef:0a:bd:d6:40:f1:4c:33:0a:e0:d6:e6:d5:
51:1c:5c:ca:d4:74:1a:a2:13:21:a5:04:cc:b6:42:
4d:97:a2:36:14:1b:27:bd:ce:da:5f:aa:a2:a9:8f:
d5:91:6d:15:b1:9e:1c:5f:c2:38:a0:ce:58:85:e8:
aa:30:2a:77:39:7d:6e:84:4e:1f:0d:d0:6a:05:03:
28:d7:99:95:0e:b5:e7:23:07:2d:4c:2a:ab:63:25:
f3:4c:9c:10:9d:41:21:5d:48:c7:dc:59:fe:47:52:
4b:e7:62:7c:3f:49:ab:83:e1:34:95:7b:e1:e4:71:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:06:28:2D:F3:0F:78:B2:C2:EA:6E:D1:6E:36:D2:38:70:DF:AA:B1
X509v3 Authority Key Identifier:
keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:58:98:fe:49:2e:90:7a:9b:4b:25:d9:9e:24:39:db:e4:76:
50:60:3d:61:94:dc:70:2a:98:34:2d:94:97:f4:18:0d:53:47:
92:50:d7:9d:65:85:47:df:c0:d6:5e:c2:47:2e:de:19:b0:43:
15:3d:f1:20:01:6e:a1:d4:7c:06:04:e0:68:d3:e7:64:7d:27:
f7:f3:d2:32:00:3a:dc:d4:31:39:e2:6d:d8:87:f2:49:84:31:
ad:68:f4:bc:e1:6e:6d:bf:4a:c5:00:97:ff:d8:93:16:89:dd:
15:b0:19:14:fc:0b:db:fb:af:d6:08:36:9c:a2:bb:6c:01:77:
29:07:b1:9b:61:2f:18:1d:e3:93:eb:df:cc:7f:80:5f:4a:50:
62:4d:af:78:f0:36:5a:34:9f:3c:05:d5:45:15:87:7f:61:6a:
f2:72:6a:c6:b2:c1:c4:32:55:26:90:c4:89:c8:ed:c4:8b:8b:
76:7d:87:97:82:15:21:1a:fb:cf:f0:1d:11:14:00:b7:41:76:
a4:76:68:1d:df:7c:92:73:f6:23:9f:22:11:67:fb:12:5a:aa:
9a:f5:31:39:c9:1a:34:e0:49:c3:07:3c:98:73:1a:f7:74:c5:
b0:b4:72:6d:52:1d:0e:4f:ce:e1:62:e9:a5:29:57:df:71:5b:
a7:48:c1:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1
QkQ5NDFFNDAwHhcNMjYwOTEwMTU0NjQ0WhcNMjYwOTE3MTU0NjQ0WjAYMRYwFAYD
VQQDEw02YWEyZDBlNS1jNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyr2SoMdB8z4xHzOJHGMoPS/0ufTOmYtkIDtNXtwTVqLg0nbrH6E3Tm5Et+Co
7xbk3VEjcZSQmvRvsv4+v0RqDgF2Cj/GpjgoS3fQhXgkwDL7gPVW9NrdxSinsKZx
Hn8kY+x9VD77M3noRT9tsQq0F3TBhzvLRX67UTuWiLbOSDbmxVY3F+Qvyu8KvdZA
8UwzCuDW5tVRHFzK1HQaohMhpQTMtkJNl6I2FBsnvc7aX6qiqY/VkW0VsZ4cX8I4
oM5YheiqMCp3OX1uhE4fDdBqBQMo15mVDrXnIwctTCqrYyXzTJwQnUEhXUjH3Fn+
R1JL52J8P0mrg+E0lXvh5HFRJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgGKC3z
D3iywupu0W420jhw36qxMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0
ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz
OWs1RUpKcG91VjFiMlVIa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlFiY/kkukHqbSyXZniQ52+R2UGA9YZTccCqYNC2Ul/QYDVNHklDXnWWFR9/A
1l7CRy7eGbBDFT3xIAFuodR8BgTgaNPnZH0n9/PSMgA63NQxOeJt2IfySYQxrWj0
vOFubb9KxQCX/9iTFondFbAZFPwL2/uv1gg2nKK7bAF3KQexm2EvGB3jk+vfzH+A
X0pQYk2vePA2WjSfPAXVRRWHf2Fq8nJqxrLBxDJVJpDEicjtxIuLdn2Hl4IVIRr7
z/AdERQAt0F2pHZoHd98knP2I58iEWf7ElqqmvUxOckaNOBJwwc8mHMa93TFsLRy
bVIdDk/O4WLppSlX33Fbp0jBaQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 17:02:52 2026 by rpki-client