
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
File: XozcAfwJtFN0mgHuUjmzXt4kvmw.mft (raw, json)
Hash identifier: B9VcgYRWjxe3J+AFq2zzZYBsAQJh/7h5kKBhGYnBPJE=
Subject key identifier: 29:09:67:4F:FF:CA:69:59:86:2C:CF:26:AD:01:D1:16:B4:BF:86:74
Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Certificate serial: 083B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
Manifest number: 0833
Signing time: Tue 06 Oct 2026 21:14:51 +0000
Manifest this update: Tue 06 Oct 2026 21:14:51 +0000
Manifest next update: Tue 13 Oct 2026 21:14:51 +0000
Files and hashes: 1: XozcAfwJtFN0mgHuUjmzXt4kvmw.crl (hash: lSoon2SkSRGwpGxfgs1Tg893FoB9adFLyM1Ta2A1uQI=)
2: A5D573E4305A11EB921D6332C4F9AE02.roa (hash: EXIodqZO0EV9Q7D8N2AnvfLDO9Fid8uBbsf7/azJXeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2107 (0x83b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Validity
Not Before: Oct 6 21:14:51 2026 GMT
Not After : Oct 13 21:14:51 2026 GMT
Subject: CN=6ac564cb-b833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:65:29:cc:a0:0d:44:85:bd:d0:31:52:a2:
2a:cb:fe:17:19:02:55:ae:5f:10:aa:ba:a5:b1:38:
dd:f9:63:d6:61:2f:e2:be:10:fd:57:59:26:f3:f2:
1f:f8:b1:d2:c9:7e:b7:a0:34:46:98:09:dd:2f:6f:
6f:c3:28:f4:6c:9c:4f:07:ec:74:37:58:0a:98:82:
90:57:08:ca:af:7a:a8:79:5b:8d:37:1e:91:7c:3b:
c6:5c:13:37:ca:ed:85:63:d0:5c:d5:79:b2:90:a5:
f8:be:09:ee:39:c0:e1:13:be:7e:bf:47:6a:e0:15:
d6:19:6e:97:e8:b8:e5:9e:61:53:71:62:1e:57:2e:
5b:58:4d:58:4a:0f:9c:22:ea:2b:6b:b8:3a:11:20:
c4:88:4a:5b:34:74:5a:2e:3f:85:b0:d4:e0:ab:86:
22:af:f9:43:57:41:be:60:e9:f9:02:e4:ee:c5:c3:
b8:d3:69:89:13:21:1b:7d:29:71:d9:af:28:68:81:
94:54:6e:40:91:6a:c7:a6:2e:73:6b:2c:06:19:30:
b0:03:ce:bb:0d:77:99:12:c3:86:ef:00:f0:ab:51:
7a:e7:d6:fa:a9:60:7f:b4:72:5e:3f:49:a6:82:76:
b2:e6:25:7c:88:13:d8:d3:50:54:81:a5:d3:81:06:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:09:67:4F:FF:CA:69:59:86:2C:CF:26:AD:01:D1:16:B4:BF:86:74
X509v3 Authority Key Identifier:
keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:3f:8b:d5:bd:95:d7:5e:f1:f5:0a:52:26:a3:7d:8b:b6:fc:
dd:61:b3:68:62:d6:e1:10:82:b8:74:88:45:98:eb:bb:43:93:
9a:64:d8:76:54:84:6b:ea:47:cb:22:3d:94:ae:a0:a6:23:bb:
f3:6c:6f:b6:26:b5:2c:95:f4:d5:56:0a:e3:7b:bd:bd:98:bd:
e9:b8:fe:3e:d4:af:8f:b1:ac:b7:cb:1f:26:a3:bf:6b:d3:54:
e9:e4:17:a0:fb:f6:16:62:4c:89:48:cd:4b:cc:85:5b:ce:36:
68:00:87:21:2f:83:2d:35:57:25:8f:43:cd:81:7d:c9:61:c6:
6f:1f:5c:70:e2:bc:2e:8e:69:ab:56:e0:31:10:b8:b1:5c:0a:
da:61:be:bf:ab:e8:57:35:90:14:f7:b2:44:46:76:5e:be:c1:
93:4a:e1:11:bb:f7:a2:71:fa:f8:95:f2:28:43:4c:28:1f:1b:
01:fa:dc:2f:79:22:08:b7:7f:eb:66:66:22:83:83:7f:00:64:
29:e2:8b:1c:28:e6:fb:29:b6:5d:8a:7c:5c:08:18:fe:d2:8c:
b2:c7:8d:02:b2:42:df:90:dc:7a:ce:2e:11:fc:96:f5:2e:47:
9d:72:a3:6a:f3:86:69:d7:42:4f:7c:8c:e8:6e:e6:77:a7:ae:
db:52:e2:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRDRkExMTAvBgNVBAUTKDVFOENEQzAxRkMwOUI0NTM3NDlBMDFFRTUyMzlCMzVF
REUyNEJFNkMwHhcNMjYxMDA2MjExNDUxWhcNMjYxMDEzMjExNDUxWjAYMRYwFAYD
VQQDEw02YWM1NjRjYi1iODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsvFlKcygDUSFvdAxUqIqy/4XGQJVrl8QqrqlsTjd+WPWYS/ivhD9V1km8/If
+LHSyX63oDRGmAndL29vwyj0bJxPB+x0N1gKmIKQVwjKr3qoeVuNNx6RfDvGXBM3
yu2FY9Bc1XmykKX4vgnuOcDhE75+v0dq4BXWGW6X6LjlnmFTcWIeVy5bWE1YSg+c
Iuora7g6ESDEiEpbNHRaLj+FsNTgq4Yir/lDV0G+YOn5AuTuxcO402mJEyEbfSlx
2a8oaIGUVG5AkWrHpi5zaywGGTCwA867DXeZEsOG7wDwq1F659b6qWB/tHJeP0mm
gnay5iV8iBPY01BUgaXTgQbe1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkJZ0//
ymlZhizPJq0B0Ra0v4Z0MB8GA1UdIwQYMBaAFF6M3AH8CbRTdJoB7lI5s17eJL5s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNENGQS8xQzJGQUIyRTMw
NTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRGTjBtZ0h1VWptelh0NGt2
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hvemNBZndKdEZOMG1nSHVVam16WHQ0a3Ztdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NENGQS8xQzJGQUIyRTMwNTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRG
TjBtZ0h1VWptelh0NGt2bXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcj+L1b2V117x9QpSJqN9i7b83WGzaGLW4RCCuHSIRZjru0OTmmTYdlSEa+pH
yyI9lK6gpiO782xvtia1LJX01VYK43u9vZi96bj+PtSvj7Gst8sfJqO/a9NU6eQX
oPv2FmJMiUjNS8yFW842aACHIS+DLTVXJY9DzYF9yWHGbx9ccOK8Lo5pq1bgMRC4
sVwK2mG+v6voVzWQFPeyREZ2Xr7Bk0rhEbv3onH6+JXyKENMKB8bAfrcL3kiCLd/
62ZmIoODfwBkKeKLHCjm+ym2XYp8XAgY/tKMsseNArJC35Dces4uEfyW9S5HnXKj
avOGaddCT3yM6G7md6eu21LivQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 02:35:09 2026 by rpki-client