
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
File: XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json)
Hash identifier: 9NeqT2RpVmvoYEGA2m572gmbBx+oq1u4g1/0xwqTeiE=
Subject key identifier: 47:7E:9F:33:C4:67:2E:6E:C2:EC:EA:E4:6B:C2:E8:ED:C3:88:56:06
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 2879
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
Manifest number: 25C2
Signing time: Fri 06 Mar 2026 15:42:45 +0000
Manifest this update: Fri 06 Mar 2026 15:42:44 +0000
Manifest next update: Fri 13 Mar 2026 15:42:44 +0000
Files and hashes: 1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: HHnO7InMSuI240PPCy69WoK7hOnxN2/4JTbkceVYVnc=)
2: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: mkkrpYAc62uJl+jjvWkmWkJGP/zvMOqOxQnQZpYQcSI=)
3: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: hdRZz4PYypmi6oZKRc7Dq31CNga1n58N64naKfC7sA4=)
4: F1475E928C5611E792848B4AC4F9AE02.roa (hash: ihcECGfuT0+8ivFOorKnocXRziH0FCu5p7ykCay0JwY=)
5: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: K/m2a9ngKa6moyBMKEpXRF5zdMnYdabzk/Bqhdzc11M=)
6: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: rBEsPqz/eejMO1DeLbNWYxAxiZKOWGMoUhEr7szctWA=)
7: 5366509AC63511EAAC843455C4F9AE02.roa (hash: LDxg+AB2TirUVMScrJxflfGfwGCZPaKZqe8lg8qNz4A=)
8: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: rKjjHee6JIYauM+6orDTrmCs5dwV2vCzo13l1rP7xP8=)
9: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: 0P6zp99JvOKnEDRYbUmkJjgXkbLRxd0vYlDdUw3m04k=)
10: 543386248C5811E782F42951C4F9AE02.roa (hash: VXbaNAWvoJ+rU4BxeUcqpfRS7xG8p7um2aWWgzOxJa0=)
11: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: GKLAv7r6GFsHVcACckOngetZZX1ncOPPVJbbepufrm4=)
12: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: BisWLGErVCTv5Qa0nGnq8ztgTMqrwHUCEdPIhyradOY=)
13: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: hl2rDKwh9bOpzCWqWF6tDDGVTzib9DwDXvZWv4JCJo8=)
14: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: ZkAhjY5zuPxc/VH6m5qHh2ghC+SKS4DvYMz9KSrCHJ0=)
15: F688FE388C5611E792848B4AC4F9AE02.roa (hash: JLpjFQM8x6HCIL2rwRfohxKcFe1oyJ992vBWZ+ItaHQ=)
16: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: JJBxhoqci9cxFp2jWn+LeaikdLK+S7mtJq7CSj8Yovw=)
17: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: 6YytcINZZVnRPu2rbB3XDoSjreHTn1uu1/H+rGbv5Z8=)
18: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: +vR+Qf874FzaB8J72tdgK88qeTknxNOTf4HTIhy1Brs=)
19: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: ejrbn1cXQIOSDIP8FAmGTsCzRd86mlRV6HJ14LG2j6E=)
20: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: 1kSu8z1hzSifiJE3S6lbLqYfJxwXIC8W9/8I944dCzE=)
21: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: SfS3vnYd6UdQ/1y75gwTCWPjMYiNZ5ebmcTK/cgakv8=)
22: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: cJEHBjaWoZAYCAIuSskRztc/35ypdzkq1zp55zUeLck=)
23: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: FQJxl3qailGJWSGWxgaRIe9FV0K2xswkQ2Iukjo/NzQ=)
24: F04860C28C5611E792848B4AC4F9AE02.roa (hash: OgWe7bBGar3bCQa6Jnjwzs5biYdG0XSpCqXLzHl7I3U=)
25: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: bnkg+VZiiym47n5YofK4MQC7UGQT8ZSBirCZbhmR8wY=)
26: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: TurE4bOXkkunPMoZt2yibGFXJ26tpZyckbjTcrfmDFo=)
27: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: RuJ8/CJ+f/mvLhzK25ICG0nUWf9Q9yyLvCoDe7PdE8k=)
28: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: gPbn3ZlxkJOB2EvSUd7Qu5VCMxsl3O+APXI6TCulcQ0=)
29: 3EBDB08806F911F1AFB1D0741F3D8C67.roa (hash: aSUSGWuA1SFVq9paDYEX2N4a9fSQlt9Kp0EfXO0DAMw=)
30: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: PXTnWXXMq7/r7irTs3x8Iooef5ROsI6ZyonWBN94pTc=)
31: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: gZZzBzDD+TICCubVSPx80rr0Kl1zCE8jx3bcXra60KQ=)
32: 14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (hash: JR0lf9Tz8IbMxdEKbfKHP0TINFSDMM0kEkaesNKxFow=)
33: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: Q+2z8wZLFlDkKJOMBjZqn7jgkCCpibh/fHlvEkrBWSk=)
34: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 6ez40T/kWsOD42AMvkDdOjlfAfmn6uYbyfNAHmlFN9w=)
35: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: ArgsxP2sLySElCV6E9319sOSOpXMuLb9HOsFnGtKI6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10361 (0x2879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Mar 6 15:42:44 2026 GMT
Not After : Mar 13 15:42:44 2026 GMT
Subject: CN=69aaf5f5-0a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:00:d2:0b:42:b3:fc:33:39:d3:e8:ad:98:64:
18:14:58:9b:13:c9:92:30:fe:80:b6:40:b7:e5:02:
f6:f8:39:88:3b:66:58:4e:bc:33:f7:3b:85:06:f9:
ee:e0:e9:4a:5f:45:98:3e:4b:6b:ff:26:f7:70:82:
da:18:d3:d0:a1:c1:84:62:7f:96:2b:15:ce:f4:4f:
ae:37:6c:ee:1a:a5:5b:ba:31:c5:96:87:ab:d0:fa:
9e:cc:9c:c3:d3:c3:d1:0a:e8:ee:23:2a:17:a0:c0:
d4:bf:22:44:b7:08:8f:32:6b:fa:d2:44:5b:2c:40:
cb:b0:f5:51:18:6a:1c:f2:5d:f9:0f:bc:51:92:88:
2a:84:f7:90:05:f1:3b:87:5e:b7:7e:19:d7:9e:b1:
2f:44:9c:4b:fb:2a:e0:5f:ef:c1:51:71:06:ac:e0:
91:45:f6:41:8f:18:39:a5:53:d7:03:62:16:24:76:
25:90:f6:74:a5:9d:73:8d:bd:39:45:c2:e2:f2:8d:
77:43:f4:5d:9a:88:98:a8:33:81:4d:ef:3d:78:61:
c9:c9:18:4c:f6:59:a1:53:59:80:7e:a8:b8:2f:b0:
81:19:32:11:28:9b:ed:5b:6d:c6:f6:c7:1d:80:e0:
67:8d:e7:ab:ff:f6:cb:3e:02:23:cb:a3:70:69:7c:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7E:9F:33:C4:67:2E:6E:C2:EC:EA:E4:6B:C2:E8:ED:C3:88:56:06
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:b5:55:a8:82:0f:a2:6a:df:61:03:cd:c3:06:77:8d:ca:5d:
35:41:2b:33:6a:a2:e6:8c:b3:37:9c:9b:ae:05:1a:e0:84:98:
66:de:af:ce:58:1a:d6:99:fd:33:91:f9:f3:f5:d9:89:92:95:
1c:ee:78:4a:6e:27:15:20:e6:ed:da:89:09:40:6b:77:39:27:
c1:20:cc:a6:d0:e2:ff:23:7d:30:73:d8:5b:f5:c3:99:50:66:
21:6e:89:94:9f:fe:bd:43:15:0b:7c:11:52:07:9e:13:07:6f:
38:0c:2d:3e:84:64:e8:7b:18:57:18:a9:5a:71:e7:15:30:50:
2f:13:91:31:7c:d3:fb:fb:04:ab:62:d2:dd:a2:ac:d4:40:f8:
e8:38:b9:28:da:a2:49:1d:fa:b4:22:5a:87:b7:34:ef:ec:f4:
8e:df:25:fb:3f:e7:17:c2:c9:a9:ad:e8:b1:42:27:fc:c5:e8:
7c:72:a9:0b:f9:ae:98:7a:dc:aa:41:ef:6e:45:33:90:5f:70:
04:c4:a2:1f:43:ba:d1:c9:b8:9e:a8:95:8d:28:eb:7b:b0:4e:
24:07:bb:f5:7e:a4:0c:d6:4a:d3:69:55:bf:1e:ac:e8:47:3a:
d6:9b:41:07:78:e8:e9:30:ab:18:08:e6:4c:53:84:e7:16:20:
5a:2e:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:35:32 2026 by rpki-client