
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
File: XmtaBob1a6DA93-zvzGzhWMiCCQ.mft (raw, json)
Hash identifier: CSwS8PG8dPMATpk2N6pH83vsTHTKWiwaCTMQFADR8n0=
Subject key identifier: 54:4F:83:D9:CA:17:0C:DE:A7:CE:F2:46:A3:0A:B5:AF:11:A6:DF:D1
Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
Certificate issuer: /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Certificate serial: 237C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
Manifest number: 2361
Signing time: Thu 12 Mar 2026 15:45:08 +0000
Manifest this update: Thu 12 Mar 2026 15:45:08 +0000
Manifest next update: Thu 19 Mar 2026 15:45:08 +0000
Files and hashes: 1: XmtaBob1a6DA93-zvzGzhWMiCCQ.crl (hash: nT8XfaHtfDC37SlQ5an2PEyOOms/fccKSep7tjK8g40=)
2: 44C007B0A0D611EDA2603C4EC4F9AE02.roa (hash: R5xEKjp2COzsPx07QmJ9ZHVVMUSggpYYD3FgaBWcVMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 15:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9084 (0x237c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE107, serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Validity
Not Before: Mar 12 15:45:08 2026 GMT
Not After : Mar 19 15:45:08 2026 GMT
Subject: CN=69b2df84-a04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:46:8d:1d:f3:89:29:26:41:04:11:6b:8a:
c5:96:a7:3c:9d:ca:8b:02:99:c0:e5:1f:b3:3b:1c:
d8:89:1c:8e:c6:fc:c1:45:70:57:6b:5c:58:7d:e7:
a0:54:b1:d8:25:62:7c:70:92:6c:e0:16:1e:1f:75:
b9:3d:2a:49:ac:5d:69:d6:03:09:39:5a:3c:b2:83:
13:10:4a:13:1b:df:a8:ce:56:19:29:49:8a:ac:2c:
c8:c1:7f:21:06:2f:84:b3:b3:b3:6b:3e:77:75:bf:
30:33:fa:3d:16:a2:ae:29:40:ff:61:74:09:34:6d:
1c:db:e8:90:1a:26:5f:23:64:20:50:98:ca:61:2d:
d1:3d:dc:42:1a:2d:7d:c9:f8:a3:b5:3f:2b:8f:fb:
2c:9b:a1:c9:86:66:dc:42:a2:15:0c:cf:62:de:b7:
c3:19:d8:49:f9:f9:c1:00:a2:c2:89:62:c9:af:e8:
45:24:a3:12:99:6d:af:37:f9:36:8f:6b:e4:51:dd:
db:40:07:7c:b2:82:7d:e2:ce:1a:6d:b8:6b:4a:2e:
78:5c:16:ac:5c:84:c4:18:a9:ee:27:04:b6:01:f1:
46:3c:d5:ef:ce:8b:df:75:70:cc:3a:38:69:c5:07:
74:fc:b9:26:53:2d:09:6e:ab:25:78:36:b4:79:9a:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:83:D9:CA:17:0C:DE:A7:CE:F2:46:A3:0A:B5:AF:11:A6:DF:D1
X509v3 Authority Key Identifier:
keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:34:e6:93:64:27:60:f4:c6:89:cc:1b:f4:15:45:8e:2c:34:
c7:20:21:52:8f:60:88:25:3e:42:05:c2:01:69:18:fd:31:a3:
6d:14:1f:65:d5:50:16:f6:6f:6b:50:d8:f1:5a:44:af:6f:ab:
64:9c:e5:c2:f4:db:f0:e6:e9:39:d1:41:ad:30:0d:69:b4:05:
8b:4d:d0:3c:c2:68:7e:b7:f3:28:60:2a:57:65:c4:09:ee:69:
bb:cd:5e:5c:d6:e7:87:11:03:87:b3:d3:b3:d1:36:78:c2:80:
e2:83:bb:30:a9:f8:fe:b8:76:0b:96:3f:d7:1b:0f:59:78:77:
aa:fa:63:c8:2d:0a:d3:2e:db:91:bd:16:34:af:28:ac:80:35:
0c:9d:69:f6:01:05:48:44:1e:b2:35:42:71:01:28:3d:e5:10:
48:5b:de:26:a9:f6:82:b4:c0:82:fc:b4:15:7a:13:c4:01:cb:
a0:8c:a5:a5:e5:68:04:30:d2:03:62:b4:f5:60:82:7e:9b:ac:
1d:df:f4:ed:ba:3c:47:83:f3:62:15:c2:c5:da:f2:2c:56:5b:
42:44:3e:45:60:38:59:35:a4:e4:8b:74:a8:30:19:86:21:b7:
82:1b:dd:04:9e:ad:00:94:56:98:8e:19:d6:8e:52:bb:30:63:
8e:fb:b3:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICI3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkUxMDcxMTAvBgNVBAUTKDVFNkI1QTA2ODZGNTZCQTBDMEY3N0ZCM0JGMzFCMzg1
NjMyMjA4MjQwHhcNMjYwMzEyMTU0NTA4WhcNMjYwMzE5MTU0NTA4WjAYMRYwFAYD
VQQDEw02OWIyZGY4NC1hMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmEdGjR3ziSkmQQQRa4rFlqc8ncqLApnA5R+zOxzYiRyOxvzBRXBXa1xYfeeg
VLHYJWJ8cJJs4BYeH3W5PSpJrF1p1gMJOVo8soMTEEoTG9+ozlYZKUmKrCzIwX8h
Bi+Es7Ozaz53db8wM/o9FqKuKUD/YXQJNG0c2+iQGiZfI2QgUJjKYS3RPdxCGi19
yfijtT8rj/ssm6HJhmbcQqIVDM9i3rfDGdhJ+fnBAKLCiWLJr+hFJKMSmW2vN/k2
j2vkUd3bQAd8soJ94s4abbhrSi54XBasXITEGKnuJwS2AfFGPNXvzovfdXDMOjhp
xQd0/LkmUy0JbqsleDa0eZq5yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRPg9nK
Fwzep87yRqMKta8Rpt/RMB8GA1UdIwQYMBaAFF5rWgaG9WugwPd/s78xs4VjIggk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTEwNy9FRTM1QzQ0NjlF
NjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2REE5My16dnpHemhXTWlD
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1htdGFCb2IxYTZEQTkzLXp2ekd6aFdNaUNDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTEwNy9FRTM1QzQ0NjlFNjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2
REE5My16dnpHemhXTWlDQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiDTmk2QnYPTGicwb9BVFjiw0xyAhUo9giCU+QgXCAWkY/TGjbRQfZdVQFvZv
a1DY8VpEr2+rZJzlwvTb8ObpOdFBrTANabQFi03QPMJofrfzKGAqV2XECe5pu81e
XNbnhxEDh7PTs9E2eMKA4oO7MKn4/rh2C5Y/1xsPWXh3qvpjyC0K0y7bkb0WNK8o
rIA1DJ1p9gEFSEQesjVCcQEoPeUQSFveJqn2grTAgvy0FXoTxAHLoIylpeVoBDDS
A2K09WCCfpusHd/07bo8R4PzYhXCxdryLFZbQkQ+RWA4WTWk5It0qDAZhiG3ghvd
BJ6tAJRWmI4Z1o5SuzBjjvuzUQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:13 2026 by rpki-client