
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier: G3aiKHA77fqCOAZFlHAGbMP3HPKC6TNyW0ajpRYkbHo=
Subject key identifier: AF:AE:67:C6:69:6E:E3:55:3E:6C:99:96:7C:0A:9F:65:E2:DD:F6:E9
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 0540
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number: 04F7
Signing time: Wed 02 Sep 2026 23:44:41 +0000
Manifest this update: Wed 02 Sep 2026 23:44:41 +0000
Manifest next update: Wed 09 Sep 2026 23:44:41 +0000
Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: fqqa1uEACRMO0kZwnEjQVyGxxjjxf1HSPjv6MSteuE0=)
2: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
3: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
4: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
5: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
6: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
7: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
8: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
9: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
10: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
11: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
12: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
13: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 23:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1344 (0x540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Sep 2 23:44:41 2026 GMT
Not After : Sep 9 23:44:41 2026 GMT
Subject: CN=6a98b4e9-8281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:62:f5:d6:18:54:7c:3d:22:f5:a0:84:7f:
49:ab:0b:4e:79:87:da:25:44:95:2a:85:ab:c9:bf:
dd:77:92:07:e0:1a:d9:8c:fd:64:e7:a1:fe:45:54:
df:de:4d:9a:79:a1:e2:35:51:34:24:34:e7:48:2e:
9e:93:10:cb:3b:d1:76:66:9f:10:97:2d:d8:54:1b:
0d:55:6e:22:d2:cf:7a:28:fb:9f:7f:17:aa:8d:d1:
05:7c:09:52:a9:ce:6c:39:20:d7:0f:29:74:c9:7f:
f0:c7:57:aa:58:ed:19:f6:b7:f0:e5:43:17:93:00:
35:87:41:5d:36:f8:dd:75:c7:da:bc:b1:c7:9c:a7:
9f:3f:d1:64:b5:43:72:a0:d3:ef:54:cc:49:e2:82:
5e:82:b9:77:65:39:38:3e:6c:e9:51:94:ca:62:ab:
71:46:52:57:f1:3a:ff:2e:66:41:7b:0a:fe:1c:6f:
42:65:2f:48:15:5a:fc:f2:ec:72:3c:47:2c:6c:eb:
0a:4d:84:26:49:21:a2:36:f7:cd:d4:f9:9e:e3:4b:
25:e2:54:f9:59:c8:ce:20:e4:4b:7b:5d:d7:22:b1:
c9:16:2c:c9:6e:c3:9d:a4:89:6b:67:c4:e7:24:1c:
3e:5b:88:be:9e:64:87:07:a9:9f:e5:ce:98:25:ac:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:67:C6:69:6E:E3:55:3E:6C:99:96:7C:0A:9F:65:E2:DD:F6:E9
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fb:c6:9d:14:07:e1:85:9e:48:49:0f:9a:e8:08:c8:07:5c:
19:17:5c:9e:75:9a:2c:c9:9d:3c:09:45:f3:e8:c7:fc:99:e6:
29:21:0a:46:a5:23:6e:d5:dd:1a:cf:81:08:6f:b7:0d:c9:0a:
f9:21:3c:34:d3:c2:06:17:c6:7c:d9:de:85:5d:b8:3f:f8:ca:
3a:33:bb:c7:15:25:34:dd:d3:ce:2a:e9:2d:1a:d6:ce:cc:2b:
4d:22:66:a8:f5:8e:72:2a:21:ae:e4:76:e9:fa:40:e7:5c:8c:
e0:4b:42:85:9e:1b:28:59:ed:39:f8:b4:d5:8f:59:75:fc:ba:
cd:b8:4f:de:44:a3:ca:45:01:79:9d:a8:1e:6b:3f:7a:b4:8c:
16:78:8d:9c:0d:8e:e4:3e:92:3c:02:31:68:5a:dd:7e:ba:1f:
f8:30:83:73:c1:41:7a:ac:3a:d4:ab:24:ce:60:b2:75:e6:3d:
4c:bd:e3:dd:d0:92:8c:36:1b:ee:c8:b1:40:c1:5e:92:08:33:
4e:3f:68:0d:b2:01:8b:1d:ab:68:23:dc:09:ba:e5:2f:89:c1:
29:db:92:42:31:4a:7b:d2:90:de:26:2c:f0:69:35:89:3d:44:
fb:33:4e:12:b9:58:74:69:e1:44:16:e0:f4:01:f0:c9:b5:a1:
74:62:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:26:29 2026 by rpki-client