
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json)
Hash identifier: N5q86qnDtSXFXApB/l+YEzcEhLBWmyO/PuApX+OwbvU=
Subject key identifier: BE:24:D7:14:93:44:26:6B:34:29:9A:A7:F6:8C:E5:30:E1:05:6B:30
Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B
Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
Manifest number: 01F8
Signing time: Tue 13 Oct 2026 03:48:15 +0000
Manifest this update: Tue 13 Oct 2026 03:48:14 +0000
Manifest next update: Tue 20 Oct 2026 03:48:14 +0000
Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: tUwXNB8CWStlhr8JLJgXCVZ2CodGHG4hW6k5/NLWNIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl
rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 03:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B
Validity
Not Before: Oct 13 03:48:14 2026 GMT
Not After : Oct 20 03:48:14 2026 GMT
Subject: CN=6acda9ff-296a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:50:51:94:d4:f8:c3:a9:4d:d7:98:60:24:
dc:d9:40:76:79:1d:cd:47:61:04:ff:32:5f:d6:fc:
52:00:f0:d6:d3:76:ac:2c:36:2f:9b:23:30:13:99:
82:01:ee:b1:3c:ab:f1:61:66:6d:24:86:c3:f4:ed:
9b:0c:aa:77:d1:e2:cc:03:40:ce:b0:17:74:38:98:
0d:8f:6b:96:ec:75:fa:5b:6b:34:38:f7:3d:fc:cc:
ed:57:58:fa:fd:68:9d:94:cb:83:d6:10:61:c3:31:
3a:4b:5a:e4:3d:c6:1d:92:30:33:3e:ea:fd:00:b4:
b1:ea:13:8d:0e:7b:b6:86:85:38:f7:36:8e:14:49:
a9:03:af:af:d0:44:9d:f4:0e:b5:73:c1:52:33:17:
02:e9:35:ce:62:48:82:98:49:cd:4e:bc:7a:8e:1a:
53:e4:b9:5d:0b:30:8a:88:b9:aa:38:93:e8:94:bb:
20:c3:a7:ce:97:66:d6:99:7b:8f:41:ed:f4:71:8e:
eb:c6:74:e8:de:6c:5b:ee:8b:97:d4:15:89:13:c4:
e4:1a:a0:fe:ef:90:61:87:e0:8e:93:39:a0:1b:b5:
a8:fb:e6:c8:02:e5:78:4b:e8:e7:97:bb:68:0a:02:
7b:b7:a4:d2:2c:6a:14:6c:9f:01:41:ec:ff:cd:c8:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:24:D7:14:93:44:26:6B:34:29:9A:A7:F6:8C:E5:30:E1:05:6B:30
X509v3 Authority Key Identifier:
keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:29:fc:e8:38:de:67:bd:4e:a9:6d:16:ed:e2:13:fb:8b:fe:
bf:b6:f0:5c:85:e2:cd:92:d8:da:be:32:eb:21:8c:80:2e:9e:
4e:a8:6e:bb:c8:bc:63:08:ba:10:c7:90:44:8a:f5:4c:53:86:
b9:95:59:33:fd:a9:cb:b1:27:bb:a3:07:23:7e:19:a3:46:37:
82:08:52:c3:f5:3e:6b:68:49:60:71:aa:ef:cc:be:aa:a2:fc:
69:70:88:24:27:14:2f:3c:ea:05:fa:ca:ef:67:6e:a7:16:be:
92:a0:61:81:2d:56:9d:69:e9:16:ff:6e:13:61:81:b7:62:53:
4d:0f:5b:ff:4e:2d:be:b3:d4:b9:50:31:e6:b6:62:d5:2e:5e:
54:c7:87:ad:b5:06:48:f5:12:90:53:ca:86:ae:01:9b:a7:76:
6d:e7:c3:da:b7:bf:52:57:dc:d0:b5:3b:87:11:c4:7f:5a:f5:
d5:5e:88:d6:16:73:4a:f9:c3:87:ec:db:61:b0:a1:c6:a7:79:
33:f2:0c:53:3b:6d:d1:2e:69:28:ab:a1:30:cd:a9:09:ba:91:
ca:d9:7c:27:fd:28:aa:ad:c5:b1:d7:5d:0c:10:41:d8:28:b2:
0b:00:2d:55:dd:51:12:e7:04:6c:1f:d7:99:95:c2:9c:e2:6c:
11:dd:97:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy
NzEyOUNDMkIwHhcNMjYxMDEzMDM0ODE0WhcNMjYxMDIwMDM0ODE0WjAYMRYwFAYD
VQQDEw02YWNkYTlmZi0yOTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwj1QUZTU+MOpTdeYYCTc2UB2eR3NR2EE/zJf1vxSAPDW03asLDYvmyMwE5mC
Ae6xPKvxYWZtJIbD9O2bDKp30eLMA0DOsBd0OJgNj2uW7HX6W2s0OPc9/MztV1j6
/WidlMuD1hBhwzE6S1rkPcYdkjAzPur9ALSx6hONDnu2hoU49zaOFEmpA6+v0ESd
9A61c8FSMxcC6TXOYkiCmEnNTrx6jhpT5LldCzCKiLmqOJPolLsgw6fOl2bWmXuP
Qe30cY7rxnTo3mxb7ouX1BWJE8TkGqD+75Bhh+COkzmgG7Wo++bIAuV4S+jnl7to
CgJ7t6TSLGoUbJ8BQez/zcgTFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4k1xST
RCZrNCmap/aM5TDhBWswMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw
NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln
OFNYdlFya2cxMnduRXB6Q3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFCn86DjeZ71OqW0W7eIT+4v+v7bwXIXizZLY2r4y6yGMgC6eTqhuu8i8Ywi6
EMeQRIr1TFOGuZVZM/2py7Enu6MHI34Zo0Y3gghSw/U+a2hJYHGq78y+qqL8aXCI
JCcULzzqBfrK72dupxa+kqBhgS1WnWnpFv9uE2GBt2JTTQ9b/04tvrPUuVAx5rZi
1S5eVMeHrbUGSPUSkFPKhq4Bm6d2befD2re/Ulfc0LU7hxHEf1r11V6I1hZzSvnD
h+zbYbChxqd5M/IMUztt0S5pKKuhMM2pCbqRytl8J/0oqq3FsdddDBBB2CiyCwAt
Vd1REucEbB/XmZXCnOJsEd2X7g==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:44:15 2026 by rpki-client