
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier: VxMj9EaaM9Q9KVvgZPSAq0tC5bPdqY7g+WM895nVe5g=
Subject key identifier: F6:5A:5B:5C:E1:31:CA:7E:2A:5D:51:8B:27:9D:C8:08:83:62:18:B6
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 04E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number: 049B
Signing time: Fri 06 Mar 2026 23:46:37 +0000
Manifest this update: Fri 06 Mar 2026 23:46:37 +0000
Manifest next update: Fri 13 Mar 2026 23:46:37 +0000
Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: gOzOm/25AAbIOdkx5KNwVg/rmCXh0fk2yAfQXg76Bjc=)
2: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
3: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
4: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
5: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
6: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
7: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
8: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
9: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
10: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
11: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
12: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
13: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 23:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Mar 6 23:46:37 2026 GMT
Not After : Mar 13 23:46:37 2026 GMT
Subject: CN=69ab675d-8368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:60:46:3e:ce:70:44:db:0d:41:6c:07:8b:
3b:04:c6:ab:b8:98:2c:e8:a9:a1:72:e9:ee:db:13:
0d:3e:e0:f7:a6:d2:fc:34:97:a2:a2:94:87:91:ca:
76:65:a2:13:80:08:be:84:a0:6f:57:a7:5f:58:c6:
06:4e:77:17:44:e6:8a:aa:bb:1c:02:70:c7:46:9f:
bd:d3:17:2e:7f:08:1d:0f:92:1e:d0:81:ea:20:ff:
09:82:52:b1:35:1c:c6:aa:48:72:ae:90:9f:bc:6e:
0b:65:1a:24:65:bb:95:a2:d6:27:8c:af:3d:fa:73:
09:47:2e:e3:b5:4d:cd:7c:b7:14:6e:30:d5:7d:20:
fe:75:be:b1:4e:e4:9f:e7:0d:db:19:7c:76:e4:4b:
ea:b4:69:09:97:52:5e:8e:7d:46:02:bf:83:c7:27:
93:f8:61:9f:90:b2:70:9d:22:6c:69:96:cf:8d:84:
bc:3e:b9:8e:bd:a9:7a:e3:db:db:ed:fd:28:d4:a4:
0f:4d:f7:ad:eb:e5:0a:fd:01:66:4c:80:f8:9c:43:
05:22:49:3b:96:62:ee:ae:50:a5:6b:41:0f:5b:cd:
a7:7a:a5:fc:fd:5d:db:16:9a:ad:ce:53:60:9f:21:
99:bd:98:c5:1c:c9:6c:12:55:8a:79:bc:5e:36:a6:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5A:5B:5C:E1:31:CA:7E:2A:5D:51:8B:27:9D:C8:08:83:62:18:B6
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:61:3e:18:69:7a:a6:1e:c4:42:94:39:a1:ea:3f:62:55:a2:
dc:50:ea:f8:6d:5f:e5:a4:fe:2c:bc:53:32:80:6e:f8:1b:01:
57:78:cb:82:cc:e3:6c:14:87:7d:c8:f0:b9:b8:39:db:5c:d1:
a0:82:30:8e:28:2c:4f:1a:dc:75:79:c4:37:ae:f7:16:83:9f:
7d:69:ff:e2:5f:47:8c:c8:6c:77:ea:56:d6:9c:65:77:c1:2c:
55:e3:fc:3e:9e:fe:a9:29:69:b8:10:ec:b7:44:48:46:07:30:
32:53:30:45:03:c9:12:3d:b3:d7:43:15:32:6f:80:e9:bb:bf:
07:c2:99:90:40:9e:a3:8e:dc:51:72:6d:f2:23:03:5e:6e:58:
0b:12:1a:d5:71:06:fe:56:87:12:73:51:93:ae:71:a1:e0:a3:
63:98:2d:c2:4b:14:9a:b5:3a:37:34:8f:15:de:bb:c5:3b:49:
7d:2d:a6:83:e9:c9:41:fc:0e:25:84:b9:44:aa:73:31:34:3e:
7c:16:3b:6d:91:ae:63:8a:37:2e:b9:80:8f:3e:d5:eb:aa:dd:
0a:26:80:ac:51:9b:3d:14:4d:fc:2a:fc:3c:26:21:96:0f:a7:
bb:fa:f2:8a:a2:ea:f5:b5:5c:59:51:44:76:9b:fc:53:9f:16:
23:ff:92:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:55:50 2026 by rpki-client