
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json)
Hash identifier: uNJcRRRM46j/nG94PyAsdUiWB/bGx362nXqOxCB0tMw=
Subject key identifier: 0C:45:2E:E6:53:5F:EA:F0:A0:F6:A4:DB:99:EC:9C:AE:17:D0:DF:4C
Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Certificate serial: 072C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
Manifest number: 0724
Signing time: Tue 18 Aug 2026 22:21:25 +0000
Manifest this update: Tue 18 Aug 2026 22:21:25 +0000
Manifest next update: Tue 25 Aug 2026 22:21:25 +0000
Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: nqNdN3EAhric4d56XleKNdM9PX3zWqQ/BfwI+4+cydg=)
2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: ya+5X2X8zd4MO/3KegCTLB9V6NcmJXOYCWI69T9MPig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl
rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1836 (0x72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Validity
Not Before: Aug 18 22:21:25 2026 GMT
Not After : Aug 25 22:21:25 2026 GMT
Subject: CN=6a84dae5-afb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:ce:f1:e3:4b:93:3a:23:b5:dc:a7:8d:b0:
c9:7f:d6:a1:a6:b9:23:dc:d9:7e:e2:d9:5e:b7:4e:
45:87:db:e6:9d:7e:28:26:ae:ce:0d:43:80:20:91:
0b:a9:d6:37:dd:f4:de:d8:76:bf:de:ff:a3:05:83:
0b:8d:f4:e8:13:0b:a7:86:ac:29:3a:b4:4e:ef:c7:
15:c8:94:70:02:da:b0:27:80:a3:7b:c3:0b:d8:71:
df:ae:9c:90:88:bd:f4:90:ff:16:a8:80:e8:d1:93:
ba:48:fc:34:2f:78:39:ed:75:8b:e3:95:02:5f:2d:
9b:d0:3a:a0:b8:e5:8d:87:98:04:7e:78:02:35:95:
42:fe:dc:da:9e:ba:6c:36:9f:70:76:81:4f:f3:a2:
f0:b4:dd:38:75:d5:c3:1e:07:be:4b:65:7b:73:e8:
9f:b2:ea:19:6e:23:2b:a8:e4:e9:22:61:e2:ec:d5:
57:6a:6d:cf:e5:08:3e:c0:07:d4:62:14:3b:b9:f5:
c6:e5:26:f3:f4:98:c5:17:9f:8c:45:ca:df:3a:4f:
a2:78:38:e0:e0:ff:57:ef:d9:5f:2b:c6:ee:8e:2f:
c8:ac:17:84:00:03:60:35:fc:1f:31:22:28:2b:06:
3f:f5:eb:e6:c7:05:f2:61:eb:52:52:5a:94:49:6e:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:2E:E6:53:5F:EA:F0:A0:F6:A4:DB:99:EC:9C:AE:17:D0:DF:4C
X509v3 Authority Key Identifier:
keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:b0:25:89:10:71:9d:14:41:45:14:e7:ed:b5:8a:b6:08:c3:
be:2a:ef:02:bc:92:d2:b1:11:78:19:ce:03:d7:e7:22:5e:36:
df:bf:71:d5:57:d6:30:c8:3c:da:1e:08:a0:c4:e0:ff:f1:03:
98:6c:0e:53:19:59:65:fe:6c:93:85:12:79:c8:1d:ad:40:f4:
b2:96:e8:1e:cf:59:a6:3c:83:07:41:b3:9d:92:ce:c4:88:74:
9c:99:67:af:96:63:e3:b1:1e:18:f8:43:cf:7e:f8:b9:24:f1:
63:ca:e5:75:ef:33:de:3e:98:74:75:a7:37:e7:06:8d:0d:bd:
2e:61:a7:3a:ef:5c:8c:9a:b8:d0:ce:55:a4:53:37:2f:69:5f:
3a:2f:cb:e6:22:74:76:2a:b3:68:16:b0:00:ac:23:c5:da:d1:
66:7c:4f:20:54:b5:4b:20:a3:53:68:f7:f2:f5:0f:9e:c0:d0:
fd:f9:5a:ce:ec:5c:d3:bc:0b:bc:48:af:79:40:81:b6:ee:20:
fe:bb:46:84:0d:c7:44:f7:fc:c0:91:81:6c:d6:b4:b8:a7:31:
31:8f:ed:8f:4e:b7:c8:56:67:2f:cd:dd:30:22:68:48:66:ab:
de:fb:79:20:8e:96:69:14:f3:09:3a:b3:89:9a:07:54:8a:97:
f1:63:47:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0
REU1NERGQjEwHhcNMjYwODE4MjIyMTI1WhcNMjYwODI1MjIyMTI1WjAYMRYwFAYD
VQQDEw02YTg0ZGFlNS1hZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugfO8eNLkzojtdynjbDJf9ahprkj3Nl+4tlet05Fh9vmnX4oJq7ODUOAIJEL
qdY33fTe2Ha/3v+jBYMLjfToEwunhqwpOrRO78cVyJRwAtqwJ4Cje8ML2HHfrpyQ
iL30kP8WqIDo0ZO6SPw0L3g57XWL45UCXy2b0DqguOWNh5gEfngCNZVC/tzanrps
Np9wdoFP86LwtN04ddXDHge+S2V7c+ifsuoZbiMrqOTpImHi7NVXam3P5Qg+wAfU
YhQ7ufXG5Sbz9JjFF5+MRcrfOk+ieDjg4P9X79lfK8buji/IrBeEAANgNfwfMSIo
KwY/9evmxwXyYetSUlqUSW4WbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxFLuZT
X+rwoPak25nsnK4X0N9MMB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx
RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR
eEJGa281SHVrRHRONVUzN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl7AliRBxnRRBRRTn7bWKtgjDvirvAryS0rEReBnOA9fnIl42379x1VfWMMg8
2h4IoMTg//EDmGwOUxlZZf5sk4USecgdrUD0spboHs9ZpjyDB0GznZLOxIh0nJln
r5Zj47EeGPhDz374uSTxY8rlde8z3j6YdHWnN+cGjQ29LmGnOu9cjJq40M5VpFM3
L2lfOi/L5iJ0diqzaBawAKwjxdrRZnxPIFS1SyCjU2j38vUPnsDQ/flazuxc07wL
vEiveUCBtu4g/rtGhA3HRPf8wJGBbNa0uKcxMY/tj063yFZnL83dMCJoSGar3vt5
II6WaRTzCTqziZoHVIqX8WNHYw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:42 2026 by rpki-client