
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft
File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json)
Hash identifier: v7JspFsidJLYp8F7qmlwuRdXbXwVwKdO0+n6TUwcTxo=
Subject key identifier: AB:56:9D:DB:C0:25:EE:2F:88:19:1A:F2:DF:AF:BE:DD:44:9C:4B:36
Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C
Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft
Manifest number: 0264
Signing time: Sun 05 Apr 2026 01:41:47 +0000
Manifest this update: Sun 05 Apr 2026 01:41:46 +0000
Manifest next update: Sun 12 Apr 2026 01:41:46 +0000
Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: 9wEqv6duAAsvtaCEmUF7Aggv9yCF85RzJlEAjmF0FyU=)
2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: caBGpQ3sxKtg4mxskMeTrM5eCKMi3Wf+XfGL8QuMB48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl
rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C
Validity
Not Before: Apr 5 01:41:46 2026 GMT
Not After : Apr 12 01:41:46 2026 GMT
Subject: CN=69d1bdda-2710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:d1:fc:ad:02:dc:5f:6a:74:77:0a:9c:66:
93:4d:4e:93:59:ba:52:32:8e:e6:c9:66:73:f4:6b:
0f:5a:ac:77:13:b7:14:c4:6f:be:fd:de:92:86:ee:
c2:b0:5c:37:32:a9:9c:f4:65:2a:11:d6:c6:57:d8:
28:b4:c7:94:fc:da:e2:16:5c:6c:8d:2f:28:7b:df:
75:a6:ce:f2:40:48:88:dc:42:e8:fe:88:b1:5f:d5:
24:0a:f4:dc:08:e0:77:c5:84:38:c2:5e:df:e0:98:
5f:2c:9d:45:3f:0e:c4:88:ca:09:6d:b0:38:a1:46:
1f:77:03:61:e0:44:3a:06:a4:d6:ea:03:88:52:3b:
84:6f:dd:cf:24:d0:e8:80:de:8e:5c:b2:86:65:a3:
48:6d:7b:ce:7d:a3:2f:6a:e8:36:d5:bb:64:af:21:
d7:4e:a5:ef:48:36:6f:2b:15:91:92:21:9c:e9:cb:
8f:26:9f:a1:4e:1d:f1:a8:72:71:04:9c:25:a0:e5:
48:e9:33:5a:30:e8:1c:5d:1f:12:3d:52:9c:4d:a8:
3d:9a:be:ca:95:87:5d:83:22:68:89:8a:30:b7:89:
20:70:7d:09:cd:10:e4:d8:22:fc:c9:1c:f6:54:12:
98:6e:e1:c7:f3:1a:1c:79:a6:82:d7:e7:51:44:ef:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:9D:DB:C0:25:EE:2F:88:19:1A:F2:DF:AF:BE:DD:44:9C:4B:36
X509v3 Authority Key Identifier:
keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ae:ab:82:bd:18:f1:25:80:58:02:b4:37:aa:11:31:24:a3:
ee:b4:b1:a9:dd:07:97:04:71:fb:3c:43:63:86:cc:7f:2f:9a:
48:58:73:41:13:62:cd:8d:92:df:26:f7:b6:e9:d2:d9:ef:a3:
69:a0:4c:42:ef:cd:38:62:08:39:c9:b7:3c:07:39:69:71:25:
7f:ee:3b:be:c8:e3:12:44:5e:f9:33:06:43:d0:2f:bd:12:65:
79:a8:59:f2:ff:f2:97:b3:c5:a2:79:85:b9:56:78:74:3e:de:
0b:74:e8:4e:ae:5f:5f:a3:80:05:46:83:43:c1:ee:3e:14:d8:
9d:7f:ec:ed:ed:42:87:57:24:17:2f:98:a7:db:c9:4d:5c:4d:
83:b6:6b:0a:90:c5:e4:7b:a7:39:04:24:1b:b2:b8:55:15:9d:
9d:3f:b9:19:5e:40:b8:95:e9:d4:2a:f0:2a:96:69:7d:27:22:
34:b9:cf:bc:39:de:66:90:44:0d:38:06:aa:9c:d9:e7:ec:82:
59:55:26:ba:36:54:79:aa:96:4b:aa:90:38:06:5d:59:02:9b:
09:bf:1b:ea:8b:2a:b4:69:56:1b:fc:40:60:cb:85:42:ec:9d:
7c:ab:71:ed:1c:1b:96:fd:6f:40:47:93:5a:77:b0:f9:71:f8:
17:65:08:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4
OEQyNjlCMkMwHhcNMjYwNDA1MDE0MTQ2WhcNMjYwNDEyMDE0MTQ2WjAYMRYwFAYD
VQQDEw02OWQxYmRkYS0yNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArODR/K0C3F9qdHcKnGaTTU6TWbpSMo7myWZz9GsPWqx3E7cUxG++/d6Shu7C
sFw3Mqmc9GUqEdbGV9gotMeU/NriFlxsjS8oe991ps7yQEiI3ELo/oixX9UkCvTc
COB3xYQ4wl7f4JhfLJ1FPw7EiMoJbbA4oUYfdwNh4EQ6BqTW6gOIUjuEb93PJNDo
gN6OXLKGZaNIbXvOfaMvaug21btkryHXTqXvSDZvKxWRkiGc6cuPJp+hTh3xqHJx
BJwloOVI6TNaMOgcXR8SPVKcTag9mr7KlYddgyJoiYowt4kgcH0JzRDk2CL8yRz2
VBKYbuHH8xoceaaC1+dRRO/efQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtWndvA
Je4viBka8t+vvt1EnEs2MB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5
QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy
YzF2a3NiWEpEdHVJMG1teXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHa6rgr0Y8SWAWAK0N6oRMSSj7rSxqd0HlwRx+zxDY4bMfy+aSFhzQRNizY2S
3yb3tunS2e+jaaBMQu/NOGIIOcm3PAc5aXElf+47vsjjEkRe+TMGQ9AvvRJleahZ
8v/yl7PFonmFuVZ4dD7eC3ToTq5fX6OABUaDQ8HuPhTYnX/s7e1Ch1ckFy+Yp9vJ
TVxNg7ZrCpDF5HunOQQkG7K4VRWdnT+5GV5AuJXp1CrwKpZpfSciNLnPvDneZpBE
DTgGqpzZ5+yCWVUmujZUeaqWS6qQOAZdWQKbCb8b6osqtGlWG/xAYMuFQuydfKtx
7Rwblv1vQEeTWnew+XH4F2UIFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:46 2026 by rpki-client