
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json)
Hash identifier: xpXSeYFISKky8MjxhvL9H7kwsMmexT55qyVG7Y59JHM=
Subject key identifier: 07:BD:D9:0B:53:1B:AB:4D:1D:B9:BE:10:65:71:15:7B:D7:23:0B:99
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 1A02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
Manifest number: 1737
Signing time: Tue 28 Apr 2026 16:55:44 +0000
Manifest this update: Tue 28 Apr 2026 16:55:44 +0000
Manifest next update: Tue 05 May 2026 16:55:44 +0000
Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: +OyJck/dVjusWYL3A/H5WzK83Z6Rki1XXhgGWgAx3mc=)
2: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: BxG0F/WjWpDjPTtb5RRrHO+ss4unVJo7zC1MzAvtUtk=)
3: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: OXnUP/JG3w1yEFtXRtB3EemUPot6EKdNnxfAnstSIjI=)
4: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: S/dafMyGnoaScUVOEOAthiDLiY0z9mFaUx5kMMduICQ=)
5: 777818EE811411EABAD68C17C4F9AE02.roa (hash: yLBCrU/9RvuI/3Ay5n3EAF4Spgkoeqo4m1QHvpK9Jp0=)
6: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: ddBHtww0w889dxAapR0tDPN4CvQLtyLCegfsQh3khs4=)
7: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: hoLS1gV18m+O3GqsO6stfQ7iSMrUj2IEPQoamxZ9gzQ=)
8: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: psgGb3ANrPemsGMpfT9JCuPtdmIwAydwkIMUMCBZW4Y=)
9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: aHoZLC2L3b3zGtWoG3wC75zKVeJj+YJNHv+9PZJe2Ss=)
10: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: QEmI8rFO3uFcQUGRkaarXEyZTTwJDnEF3MflJofq8Ho=)
11: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: ICs1TEIOpnxVUHj987EsWwjf3g4Xq+0ePZB44Mwwr1U=)
12: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: 9k+NHvdwPaL2Te9EGjJfwM53cdhWCBk6SgfyxFOLTzw=)
13: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: 1HlLCwNQIyozJV4R6Hnm8QJXf/uITnPoAyb7nipvwt4=)
14: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: nT4IqSSGqtky3oV2UAtgSCBzreFM8SwkDqRJ1RnCCsQ=)
15: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: XnGwGjApnJiNJjn58kdU+fCn2kMRI3F8FSS/7+708cw=)
16: F6F34FA2EC2611F097438BD43E6F56BC.roa (hash: d4qLINHxzHC2igs+d7HFx4FkCdNcECuX29TNhu6zNb0=)
17: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: IpBvgX/8iJN/8+lDdhFGN5U95vt5chfijPRQMRrbUXk=)
18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: kxl0Ju03xol22MdSZwz8cEZSAcwOMODv9xQLWw9mcDU=)
19: 2A309FACEC2511F093ADEAD03D6F56BC.roa (hash: J0nwYlEYUE4zSCS6vykAZTwAKoV8/9btL95KquTry64=)
20: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: qwFwplU43G/hNJT02NNQ4dEUqw5/rgD0dEX0nQo6jl4=)
21: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: mPbx6GaGGpEZcuE74LbXOCQRX7Jy5PlwX+gtNN/XZgI=)
22: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: ycOq0IsrhA+YmUYWAhAsrdeYN4eebRnWEnTPZHVK1yQ=)
23: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: wKUa5/luq9B8kVj6p/G8xPQ0IZcLYJQWqnLpb5Jwx4c=)
24: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: kDxO50GD5AXFe4GFX5YhHhfReI3EK8WF+6AhrrSnCTE=)
25: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: Q48uJdRRBErvN0MaEglf3VQ+DumuMDNeFKgsuTsot38=)
26: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: E+w+5MHO8ewDddMwvBrrEc1lgQdxewrUq+QuhkdbY4w=)
27: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: SntS7Vg1oFYriW3szo2h4z7g9R8/MBi6lWybX6Gw4N8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 16:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6658 (0x1a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Apr 28 16:55:44 2026 GMT
Not After : May 5 16:55:44 2026 GMT
Subject: CN=69f0e690-0859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:8f:18:bf:2c:20:74:90:b0:d0:37:01:45:
a7:f4:4f:41:4d:67:de:12:98:11:95:7c:f9:60:7f:
7e:a9:88:49:1a:88:04:df:b4:36:a8:4d:6f:1c:7d:
7f:9e:f8:62:de:bd:59:ef:90:30:3e:bc:dd:7a:05:
4f:87:9d:02:b8:eb:33:f4:ac:75:98:03:86:10:29:
ba:3d:ca:71:90:30:cd:9c:92:33:54:2d:6e:46:7f:
0d:a2:4a:42:d6:33:c8:ba:6b:dc:68:c3:65:59:a2:
54:7b:e2:af:61:bf:bc:3b:c1:2a:39:71:35:ca:1b:
ed:9e:00:d8:6f:88:b1:6f:d0:6a:37:13:37:c3:4e:
a6:f1:31:ef:e1:cf:94:67:de:3d:80:2d:6e:d9:cb:
90:5d:c9:02:27:2c:65:ea:bf:4b:e0:ad:de:51:36:
42:d2:01:07:84:d6:5d:cb:c5:00:b6:7b:60:5f:82:
18:4c:2a:47:df:b7:78:c9:36:1c:b7:4f:bb:e5:b6:
2f:63:c2:d3:8d:68:0d:4b:71:64:08:c5:7b:89:57:
a1:19:5b:98:31:dc:05:f7:bb:42:f8:50:0c:46:68:
45:f4:36:62:ce:c4:7b:14:39:9e:c3:d5:56:34:1a:
f7:a4:05:e6:87:cb:5d:f5:bb:2c:32:6b:a6:3c:98:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BD:D9:0B:53:1B:AB:4D:1D:B9:BE:10:65:71:15:7B:D7:23:0B:99
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:65:3e:bf:06:19:a4:c4:3a:cf:9f:d5:32:ec:b5:fd:98:d8:
21:e9:04:43:70:5c:6c:a4:05:25:f4:a5:eb:f8:5d:76:e7:ba:
fe:0d:be:99:f2:7b:fb:ef:49:b5:8e:95:d0:2d:c6:4e:d5:85:
0b:59:1c:b6:8d:14:a9:1b:21:35:b1:65:27:9e:cb:7e:c1:42:
c6:cb:d3:67:78:95:ec:be:37:ac:82:07:74:01:a6:6d:29:d4:
d9:54:d0:4d:12:77:d0:d7:57:06:09:b2:d9:cc:6e:55:e6:34:
f9:32:be:7c:d0:27:23:4c:09:bc:6f:5c:86:5a:80:05:54:78:
26:86:b0:a7:11:14:fb:56:b6:cc:12:c9:d9:67:6e:1f:4f:d4:
2c:85:d3:6a:1a:c9:be:14:ef:30:75:c4:47:b8:60:ce:73:a2:
4b:16:b0:4b:61:98:ec:b8:2d:64:98:75:76:db:50:43:07:57:
32:a7:af:fe:52:31:74:4f:cf:5a:dd:a5:24:bf:dd:63:22:66:
f9:e7:d2:d4:b5:40:d3:7e:dc:ee:3f:5d:b8:d9:6e:b6:27:93:
c6:4b:81:ac:4f:17:64:f5:f2:da:9e:e7:14:c2:ef:e6:ec:ca:
21:7c:3c:33:d0:8c:26:d5:0e:37:02:da:3b:85:95:f3:c0:2e:
f2:a2:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 07:33:02 2026 by rpki-client