
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json)
Hash identifier: jsHu5/zosv9xdYK56oe9ktzC+H117pDf2IqMEcGsd6M=
Subject key identifier: 55:91:93:4D:A7:9F:1C:AC:EE:8C:7E:43:92:9F:AE:C7:48:C0:1D:72
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
Manifest number: 01E3
Signing time: Mon 05 Oct 2026 03:50:31 +0000
Manifest this update: Mon 05 Oct 2026 03:50:31 +0000
Manifest next update: Mon 12 Oct 2026 03:50:31 +0000
Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: cD0bUc9mu0oceaOJSB9E9HxgPmJFlhxeCqSCGIskXQE=)
2: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: 3E36B1MpZYDiaAYeovA9u0vflfKd+OIxRnYYoJKDjag=)
3: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: dTKobTpgmqVlw9+3THmdhV/OqwJR2m6apo+OjMA3HTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Validity
Not Before: Oct 5 03:50:31 2026 GMT
Not After : Oct 12 03:50:31 2026 GMT
Subject: CN=6ac31e87-528c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:47:8f:f2:1c:08:ba:b6:3e:0a:80:a5:4f:
f1:6b:da:4b:76:60:3a:7f:78:2c:0c:58:f8:4e:bd:
c8:d5:1f:2d:c1:89:a9:d5:ff:c9:90:2e:74:90:0e:
b4:8a:d2:c2:4e:87:51:8c:84:dd:d7:99:f0:c0:98:
ed:c0:56:67:2b:85:4b:eb:79:4e:3c:ff:4d:35:ed:
43:c5:d5:ad:62:7d:b2:a0:b4:ee:29:fd:ec:31:f3:
9f:fb:1d:05:2a:68:14:48:8e:d4:30:7d:d0:79:55:
a9:99:7d:5b:88:5d:33:72:48:aa:3d:95:c1:41:44:
d4:f2:be:cb:e9:0e:65:d9:0f:32:d2:7a:19:0b:93:
99:a5:2e:ec:f5:69:f2:7a:16:4f:a5:4f:08:44:d4:
af:65:7d:77:d8:0d:81:bf:92:5d:39:5f:d8:31:4f:
00:36:ad:90:b7:84:bd:49:c0:0d:8f:b7:7b:ff:7f:
ca:87:8a:67:27:94:1a:32:8d:4f:8d:82:8f:7f:77:
67:11:a0:21:29:a4:57:ba:94:30:49:0a:b8:ac:dc:
b0:c9:74:29:7f:2c:d1:13:9b:b4:47:7f:31:eb:7b:
b5:93:ff:99:fc:c5:ef:de:96:1f:8c:e6:a9:f3:e5:
64:8c:46:1b:c0:e8:f3:53:91:33:ec:87:89:87:ec:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:91:93:4D:A7:9F:1C:AC:EE:8C:7E:43:92:9F:AE:C7:48:C0:1D:72
X509v3 Authority Key Identifier:
keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0f:3a:4d:9d:49:e2:d7:b6:a4:d1:35:b1:dc:f2:c1:fc:8d:
31:39:bd:c9:1f:23:92:bb:e0:47:c0:b6:d6:d4:13:23:29:6f:
ac:aa:fb:0d:a8:d5:67:0b:b4:06:81:ca:e6:e3:be:5d:3a:c9:
c6:ba:eb:d1:31:30:a2:f7:c3:c6:ed:b5:cc:c0:1f:45:c8:af:
31:a5:a9:1a:25:7b:48:8b:c4:d3:b4:60:ee:c3:99:00:da:ea:
84:41:32:1c:94:f4:7c:b3:05:74:c3:df:53:48:69:c3:43:b9:
8a:c0:f0:d3:04:5b:18:c5:e6:b3:80:2d:87:e9:b8:d1:01:e7:
01:e0:6d:85:29:cf:95:95:7b:b9:41:dc:25:13:39:c5:d6:e2:
f4:4d:8f:24:04:a5:d1:0e:bc:2d:88:05:20:33:d3:4c:7a:d5:
f2:d7:ed:d0:20:e5:46:fd:6e:48:38:3b:1a:3e:3f:da:4c:4f:
8c:f4:aa:6e:f9:b0:43:aa:db:0f:64:64:95:1a:94:8e:19:b6:
45:16:b9:a4:00:51:f6:e9:af:f5:29:da:91:4a:fc:5b:6f:67:
cf:01:ac:a5:ab:94:2b:d9:61:ca:4e:62:a6:9f:58:10:81:9f:
3f:05:ce:cc:a0:c8:f5:c1:7d:20:32:90:e6:a2:6f:af:e0:fe:
d8:93:87:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy
OTFDNDdCQUYwHhcNMjYxMDA1MDM1MDMxWhcNMjYxMDEyMDM1MDMxWjAYMRYwFAYD
VQQDEw02YWMzMWU4Ny01MjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyiRHj/IcCLq2PgqApU/xa9pLdmA6f3gsDFj4Tr3I1R8twYmp1f/JkC50kA60
itLCTodRjITd15nwwJjtwFZnK4VL63lOPP9NNe1DxdWtYn2yoLTuKf3sMfOf+x0F
KmgUSI7UMH3QeVWpmX1biF0zckiqPZXBQUTU8r7L6Q5l2Q8y0noZC5OZpS7s9Wny
ehZPpU8IRNSvZX132A2Bv5JdOV/YMU8ANq2Qt4S9ScANj7d7/3/Kh4pnJ5QaMo1P
jYKPf3dnEaAhKaRXupQwSQq4rNywyXQpfyzRE5u0R38x63u1k/+Z/MXv3pYfjOap
8+VkjEYbwOjzU5Ez7IeJh+w8YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWRk02n
nxys7ox+Q5KfrsdIwB1yMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx
MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw
UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiw86TZ1J4te2pNE1sdzywfyNMTm9yR8jkrvgR8C21tQTIylvrKr7DajVZwu0
BoHK5uO+XTrJxrrr0TEwovfDxu21zMAfRcivMaWpGiV7SIvE07Rg7sOZANrqhEEy
HJT0fLMFdMPfU0hpw0O5isDw0wRbGMXms4Ath+m40QHnAeBthSnPlZV7uUHcJRM5
xdbi9E2PJASl0Q68LYgFIDPTTHrV8tft0CDlRv1uSDg7Gj4/2kxPjPSqbvmwQ6rb
D2RklRqUjhm2RRa5pABR9umv9SnakUr8W29nzwGspauUK9lhyk5ipp9YEIGfPwXO
zKDI9cF9IDKQ5qJvr+D+2JOHcg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:57:05 2026 by rpki-client