
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json)
Hash identifier: tM5VxRUoLYnaff137onF+xJcwhrtQWDoDEErisOVfj8=
Subject key identifier: EF:02:DD:67:CC:CC:27:FF:D7:6E:73:73:95:87:7A:ED:5F:E8:4F:61
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
Manifest number: 015C
Signing time: Fri 11 Sep 2026 05:10:09 +0000
Manifest this update: Fri 11 Sep 2026 05:10:08 +0000
Manifest next update: Fri 18 Sep 2026 05:10:08 +0000
Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: dw0wqqJsa1M0ehP267REKaJiZmXKzXNnV6JvOXsglRA=)
2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: eZlsZmk8/ekeyqy6I3i3ZeeEd5v4ZHZyH6nwRwpqrDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Validity
Not Before: Sep 11 05:10:08 2026 GMT
Not After : Sep 18 05:10:08 2026 GMT
Subject: CN=6aa38d30-3ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:08:ca:e7:21:59:30:7f:2d:24:6f:40:f2:
00:fd:b0:74:04:31:e0:05:c9:a4:13:2e:96:be:27:
ea:24:84:5a:10:99:ef:f8:73:dc:53:b0:7d:ac:d0:
43:eb:7f:78:0e:a6:21:57:8d:bc:6f:b4:a7:0e:de:
94:3a:71:77:38:d3:0b:21:49:7a:04:71:00:d8:78:
ef:c4:6e:d6:81:a5:b0:76:73:5a:4c:5a:69:88:a4:
78:9e:f4:f8:4a:8b:b0:0a:16:fc:80:1b:f5:2c:eb:
29:c2:1b:1c:7d:e3:ce:69:d4:65:f1:b3:88:ba:fe:
a8:ea:0f:d1:c7:81:bc:5c:d1:15:09:17:5d:a4:52:
25:4c:e5:a0:31:32:8c:49:17:1b:b7:15:4a:40:61:
8d:7f:2d:d7:a6:38:29:c4:8f:25:9f:4b:c9:61:2d:
ca:10:0b:63:03:86:ca:4b:e9:91:b6:1e:c4:c8:77:
35:55:f3:d1:ab:1f:a0:10:13:98:9c:2a:71:93:db:
ce:05:3f:e7:45:88:5b:02:61:63:cb:7e:6e:1f:f4:
81:f6:3e:ff:e2:9b:99:d3:ed:46:d9:98:6e:22:df:
3d:cf:95:71:a9:5e:10:4d:e1:ca:c7:7e:1e:ae:b8:
c0:c3:bc:84:12:5c:39:46:9e:ca:e3:86:5c:c9:d5:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:DD:67:CC:CC:27:FF:D7:6E:73:73:95:87:7A:ED:5F:E8:4F:61
X509v3 Authority Key Identifier:
keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:ba:5e:3f:db:9c:90:b0:c3:a8:ff:fc:a0:90:5a:12:3f:c2:
ce:64:14:38:ae:eb:ad:0b:3b:19:16:28:35:e0:71:5d:bc:dc:
90:90:68:13:0f:83:25:e2:82:ef:bd:a3:d1:6f:1e:12:9a:3e:
0b:2e:94:e7:9a:4a:39:e2:16:9a:6a:94:cc:28:f9:6b:e1:71:
74:5c:23:bc:fa:38:4f:4d:88:b7:c3:fe:b3:3c:55:bf:79:fe:
75:c5:95:48:ce:38:f6:8b:7f:c0:5e:8d:cb:a7:ec:07:d9:8a:
e0:d7:c6:98:cc:89:85:c3:29:dd:d1:b5:64:4d:42:e2:14:f4:
c7:4c:d7:0d:f0:ff:fc:ff:93:41:ca:87:2e:11:d8:ad:52:91:
0a:f8:41:d4:f4:47:b2:6d:d9:94:06:df:57:3d:f5:7b:69:a2:
6a:50:e1:51:58:d7:65:06:07:25:9e:ac:34:ac:50:af:a2:49:
87:80:fb:04:9a:3f:a9:f8:85:95:a5:8c:cd:4a:63:fc:47:1c:
3f:79:43:a5:31:d5:eb:1b:4b:2c:8c:3e:89:5b:e8:fb:8b:02:
26:e8:c8:64:06:00:31:bb:3d:d9:c8:0f:c9:ab:a5:34:47:c9:
6e:59:eb:fc:7e:6c:83:02:49:d7:fb:74:68:70:d8:3d:f8:dc:
f5:5a:05:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE5NDExMTAvBgNVBAUTKDczMTdENzc3QkRBQTYzMzNDRDk2QTgxMDRCOTRERTBG
QTQ3NTIxMTMwHhcNMjYwOTExMDUxMDA4WhcNMjYwOTE4MDUxMDA4WjAYMRYwFAYD
VQQDEw02YWEzOGQzMC0zY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqHUIyuchWTB/LSRvQPIA/bB0BDHgBcmkEy6WvifqJIRaEJnv+HPcU7B9rNBD
6394DqYhV428b7SnDt6UOnF3ONMLIUl6BHEA2HjvxG7WgaWwdnNaTFppiKR4nvT4
SouwChb8gBv1LOspwhscfePOadRl8bOIuv6o6g/Rx4G8XNEVCRddpFIlTOWgMTKM
SRcbtxVKQGGNfy3XpjgpxI8ln0vJYS3KEAtjA4bKS+mRth7EyHc1VfPRqx+gEBOY
nCpxk9vOBT/nRYhbAmFjy35uH/SB9j7/4puZ0+1G2ZhuIt89z5VxqV4QTeHKx34e
rrjAw7yEElw5Rp7K44ZcydVE0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8C3WfM
zCf/125zc5WHeu1f6E9hMB8GA1UdIwQYMBaAFHMX13e9qmMzzZaoEEuU3g+kdSET
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85QjNEMjU0OEEw
QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6UE5scWdRUzVUZUQ2UjFJ
Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N4ZlhkNzJxWXpQTmxxZ1FTNVRlRDZSMUlSTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTk0MS85QjNEMjU0OEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6
UE5scWdRUzVUZUQ2UjFJUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE7peP9uckLDDqP/8oJBaEj/CzmQUOK7rrQs7GRYoNeBxXbzckJBoEw+DJeKC
772j0W8eEpo+Cy6U55pKOeIWmmqUzCj5a+FxdFwjvPo4T02It8P+szxVv3n+dcWV
SM449ot/wF6Ny6fsB9mK4NfGmMyJhcMp3dG1ZE1C4hT0x0zXDfD//P+TQcqHLhHY
rVKRCvhB1PRHsm3ZlAbfVz31e2mialDhUVjXZQYHJZ6sNKxQr6JJh4D7BJo/qfiF
laWMzUpj/EccP3lDpTHV6xtLLIw+iVvo+4sCJujIZAYAMbs92cgPyaulNEfJblnr
/H5sgwJJ1/t0aHDYPfjc9VoFEg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 11:27:30 2026 by rpki-client