
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier: vqaTANzG0o8LoVib6wNLITeQ3B+1daMrj+tY6ih54tU=
Subject key identifier: 0B:4B:C4:A4:DC:18:BB:9D:3D:F5:8B:32:7C:62:86:83:2C:DD:B2:31
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 055B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number: 0512
Signing time: Mon 26 Oct 2026 23:35:00 +0000
Manifest this update: Mon 26 Oct 2026 23:34:59 +0000
Manifest next update: Mon 02 Nov 2026 23:34:59 +0000
Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: 9i8u5CVh3b8Oe7xpWCEk2cpEeFY3oZsOu0d+7HzEB1s=)
2: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
3: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
4: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
5: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
7: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
8: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
9: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
11: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
12: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
13: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 23:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1371 (0x55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Oct 26 23:34:59 2026 GMT
Not After : Nov 2 23:34:59 2026 GMT
Subject: CN=6adfe3a3-d183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:0d:90:df:f1:e5:02:88:09:69:2b:c0:6f:
44:8f:de:0e:e1:a2:e1:34:c2:84:ff:3a:a2:55:e9:
39:10:64:b5:4e:5a:ab:21:c7:e3:b8:92:3c:d4:35:
e9:ea:7c:81:00:b8:75:de:65:22:cc:96:8e:27:21:
af:cd:8a:ba:7a:9a:a4:03:5a:fe:a5:6a:13:5e:bb:
fe:7d:91:a5:69:cf:4a:de:86:4a:86:ce:94:3f:bc:
08:a5:09:69:b6:5e:bb:be:94:66:44:7f:f3:43:72:
97:54:7a:66:1a:18:39:3a:1e:96:d8:62:2a:7d:32:
4d:e2:a8:6a:42:1e:1c:ef:8c:ce:98:18:26:0f:87:
29:34:76:8d:e9:98:e5:c1:1d:77:86:e9:4d:04:fa:
8c:66:cb:84:35:04:7b:e8:aa:2b:ba:7f:ff:e6:dd:
2c:d9:fa:ad:83:c5:30:56:90:fe:cd:48:4b:b0:f9:
b7:3e:e0:af:59:22:72:d7:d5:a5:b7:36:ef:0a:6d:
86:de:ee:07:4d:ed:e0:35:98:4b:51:03:ff:aa:19:
49:65:ce:c7:97:7b:a2:36:73:62:4b:66:1c:64:6b:
f9:2a:7c:3a:2a:06:d7:9c:5b:65:e7:31:fa:65:a3:
0e:a9:58:4c:15:46:86:ec:ac:f4:69:31:63:db:54:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4B:C4:A4:DC:18:BB:9D:3D:F5:8B:32:7C:62:86:83:2C:DD:B2:31
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:24:ac:4a:90:80:08:a8:34:da:5e:3d:1d:4c:fb:93:7b:6c:
8f:9a:e1:9e:bb:26:11:00:0d:6f:f8:dd:25:4f:b0:7b:cf:5f:
04:7e:8d:be:4d:b9:f3:4c:04:4b:6a:5c:09:36:7a:fe:24:41:
c9:5f:4e:7b:2e:c7:36:42:23:47:2d:60:f1:a0:01:f1:db:89:
1e:50:9a:be:02:4f:65:24:16:3a:61:60:5a:02:ea:0e:ac:ca:
9d:6c:87:a8:08:a5:f4:80:da:11:04:f0:2e:82:e1:83:17:1e:
a5:12:e4:f5:f2:97:c2:7e:57:65:7d:45:3f:47:9f:3c:d1:a1:
2b:34:b1:a8:e9:61:17:7d:b7:35:37:7e:8a:48:ee:0e:a1:a2:
4f:1e:a4:77:d1:3c:82:a5:38:40:00:bc:c4:e7:f1:d0:5d:53:
10:c9:33:93:23:c0:01:be:d2:2a:09:3d:6e:65:07:a6:be:f9:
96:bd:26:6d:60:a0:c6:78:e0:f6:cf:f2:17:1a:3d:a6:83:8d:
e8:5d:4c:a8:5e:ae:28:79:02:04:77:e6:1d:d2:7e:c0:06:e0:
85:85:9e:06:90:7a:e4:9e:81:96:bf:cf:a6:eb:6b:71:bf:ea:
c5:fd:ef:ba:51:8d:ba:02:85:fe:04:c3:20:aa:07:8b:0c:9d:
2a:af:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:57:06 2026 by rpki-client