
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
File: XcAwMzGJiu_bheTZFABriTdr7-E.mft (raw, json)
Hash identifier: m+LE9n2GeQp6/fi2sMWq+NI43okjrCed9am0Tk2FUN0=
Subject key identifier: 10:3D:C1:75:3F:B8:DE:EB:5F:DF:1A:0D:F3:6A:E4:3B:48:F6:ED:D8
Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1
Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1
Certificate serial: 076A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
Manifest number: 075D
Signing time: Tue 06 Oct 2026 21:55:58 +0000
Manifest this update: Tue 06 Oct 2026 21:55:57 +0000
Manifest next update: Tue 13 Oct 2026 21:55:57 +0000
Files and hashes: 1: XcAwMzGJiu_bheTZFABriTdr7-E.crl (hash: rehwJ3N3NG6gg8ubrXErLYtp5AURH67CZq99B/McREg=)
2: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (hash: wnVdG3tQEExhwFfmpCLAwbgBN9gJAE52Y8V7E+ybcug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl
rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1
Validity
Not Before: Oct 6 21:55:57 2026 GMT
Not After : Oct 13 21:55:57 2026 GMT
Subject: CN=6ac56e6e-67e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:28:d6:89:cd:08:b0:a1:94:f5:c7:08:56:
3b:b0:bc:a4:2b:60:7a:cd:c5:8f:ed:58:0b:58:44:
72:e6:59:e3:9c:f4:85:e7:56:4d:bc:dc:73:57:0a:
eb:89:e7:88:c4:33:a4:da:13:b1:fe:e8:8b:26:ae:
d4:5c:f8:c7:97:84:77:3f:ff:6f:f5:75:b8:cf:e6:
60:aa:34:66:19:7f:13:56:18:59:f0:95:3b:bc:06:
e0:61:c3:e8:59:f9:5e:12:79:7f:b2:f0:d1:6b:e3:
96:13:10:7e:d6:80:e0:87:7f:9c:37:ed:da:55:83:
71:fc:0b:fb:4a:99:82:62:4c:9b:0e:6f:9c:a1:28:
d9:a6:d9:d4:49:94:41:c8:24:9f:73:13:d8:15:e8:
d0:8c:e2:ef:47:0c:8d:03:c2:d9:da:e8:43:97:ff:
a6:32:d5:46:5e:87:83:69:72:ea:b4:6a:ac:99:89:
90:13:81:8e:32:a9:23:26:8a:7a:07:b3:01:00:ce:
2b:fb:d4:f4:e6:5f:0d:2a:dc:b6:17:74:3d:58:43:
c3:5c:76:ed:29:70:e9:86:12:90:1f:d9:95:50:91:
ef:a1:a5:86:1d:cc:fe:98:38:36:dd:c7:3a:a9:b8:
d2:25:01:a3:bb:df:0e:22:9e:1b:a6:f2:24:3a:eb:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3D:C1:75:3F:B8:DE:EB:5F:DF:1A:0D:F3:6A:E4:3B:48:F6:ED:D8
X509v3 Authority Key Identifier:
keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1b:d6:4d:bb:e2:9a:b4:0f:4e:eb:da:94:d8:fb:71:0a:53:
6c:a3:01:f6:4a:3c:95:22:11:ce:32:9a:42:51:86:bc:82:9c:
50:d1:b1:d4:67:45:a9:9a:b1:5b:c1:59:89:99:06:4e:c0:52:
3d:84:21:c6:4f:78:6b:a9:4c:e1:51:f7:b6:67:ca:47:6b:6a:
a1:d6:17:6a:06:fa:91:51:d4:ea:b3:a8:c5:f5:82:21:9d:a7:
34:29:7b:99:64:2d:56:0f:f5:a1:59:ac:77:65:c6:25:1a:82:
a0:c0:68:51:c5:39:7d:4f:48:b3:76:54:b0:6c:e1:f9:d9:f3:
c3:44:a7:7d:d0:53:9d:f7:22:b9:9b:29:95:92:65:57:62:2d:
6b:ba:41:37:82:58:b1:ae:d9:21:86:dc:ea:4d:8b:46:f0:35:
af:78:64:e1:4c:dd:43:11:79:33:0f:18:01:c5:b8:6b:a2:98:
37:ca:16:06:80:81:d3:f8:c3:2f:8c:28:92:8d:c7:b0:c2:39:
2f:03:43:8d:50:d7:b3:24:52:2f:d9:fb:f4:cc:66:23:c1:30:
75:36:1d:46:7c:20:13:8d:0d:18:a3:fa:66:1d:1f:a2:c4:8b:
7a:74:60:e3:bb:38:27:b9:67:a9:77:e9:93:aa:49:63:f2:22:
8f:29:99:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdCRDQxMTAvBgNVBAUTKDVEQzAzMDMzMzE4OThBRUZEQjg1RTREOTE0MDA2Qjg5
Mzc2QkVGRTEwHhcNMjYxMDA2MjE1NTU3WhcNMjYxMDEzMjE1NTU3WjAYMRYwFAYD
VQQDEw02YWM1NmU2ZS02N2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApy8o1onNCLChlPXHCFY7sLykK2B6zcWP7VgLWERy5lnjnPSF51ZNvNxzVwrr
ieeIxDOk2hOx/uiLJq7UXPjHl4R3P/9v9XW4z+ZgqjRmGX8TVhhZ8JU7vAbgYcPo
WfleEnl/svDRa+OWExB+1oDgh3+cN+3aVYNx/Av7SpmCYkybDm+coSjZptnUSZRB
yCSfcxPYFejQjOLvRwyNA8LZ2uhDl/+mMtVGXoeDaXLqtGqsmYmQE4GOMqkjJop6
B7MBAM4r+9T05l8NKty2F3Q9WEPDXHbtKXDphhKQH9mVUJHvoaWGHcz+mDg23cc6
qbjSJQGju98OIp4bpvIkOuvWXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBA9wXU/
uN7rX98aDfNq5DtI9u3YMB8GA1UdIwQYMBaAFF3AMDMxiYrv24Xk2RQAa4k3a+/h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENC80RTg3QTQ2QTg2
QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1X2JoZVRaRkFCcmlUZHI3
LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hjQXdNekdKaXVfYmhlVFpGQUJyaVRkcjctRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0JENC80RTg3QTQ2QTg2QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1
X2JoZVRaRkFCcmlUZHI3LUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATRvWTbvimrQPTuvalNj7cQpTbKMB9ko8lSIRzjKaQlGGvIKcUNGx1GdFqZqx
W8FZiZkGTsBSPYQhxk94a6lM4VH3tmfKR2tqodYXagb6kVHU6rOoxfWCIZ2nNCl7
mWQtVg/1oVmsd2XGJRqCoMBoUcU5fU9Is3ZUsGzh+dnzw0SnfdBTnfciuZsplZJl
V2Ita7pBN4JYsa7ZIYbc6k2LRvA1r3hk4UzdQxF5Mw8YAcW4a6KYN8oWBoCB0/jD
L4woko3HsMI5LwNDjVDXsyRSL9n79MxmI8EwdTYdRnwgE40NGKP6Zh0fosSLenRg
47s4J7lnqXfpk6pJY/IijymZpg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:16:44 2026 by rpki-client