
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
File: XUofz1MBwCdZyE7qVZFeJcFxpz8.mft (raw, json)
Hash identifier: 7jXmdmjO9nqFcFDVqTiOJTeisr4F8LFkqLd70cI+/+s=
Subject key identifier: 73:DE:41:AF:37:05:DA:FA:B9:E7:32:BF:DF:D7:77:77:63:C8:B4:42
Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Certificate serial: 038E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
Manifest number: 0385
Signing time: Mon 21 Sep 2026 00:34:24 +0000
Manifest this update: Mon 21 Sep 2026 00:34:24 +0000
Manifest next update: Mon 28 Sep 2026 00:34:24 +0000
Files and hashes: 1: XUofz1MBwCdZyE7qVZFeJcFxpz8.crl (hash: 3OgBQqpT0W17qrtUFnS0dsFYlObiwoR3Vqt20osK/Fc=)
2: 388802BC067711EDA1DEB529C4F9AE02.roa (hash: 4y97Cz+0NkvrW6iabyeon+58TjVg/RlH4aalzb3X3X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Validity
Not Before: Sep 21 00:34:24 2026 GMT
Not After : Sep 28 00:34:24 2026 GMT
Subject: CN=6ab07b90-cdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:e3:5a:a0:69:c2:5d:6a:01:f8:42:93:cb:
38:1c:ea:23:aa:8b:e8:53:f8:3a:e8:94:76:17:15:
66:9a:80:77:32:cb:9f:02:73:0b:51:29:2c:8b:d0:
52:1a:16:94:3d:9f:49:4a:8f:2f:e8:bb:eb:a3:03:
81:51:47:3a:3a:9c:58:4d:e4:b5:4a:65:d3:a8:28:
2c:52:b4:41:84:1f:84:9a:84:4b:42:1b:8d:e3:98:
e9:7c:fc:23:7f:68:8e:65:b9:07:2a:ab:75:a4:fb:
46:38:17:54:4c:f0:9b:cd:8e:b5:66:d7:21:9b:b6:
f8:f2:db:58:07:11:ff:78:b1:85:1e:74:bd:61:bc:
ed:6a:1c:ca:b8:bd:50:05:0d:82:55:87:ba:b8:98:
a7:79:78:42:48:ea:69:86:5e:34:96:31:85:59:4e:
62:e1:01:46:23:fe:9b:d4:f0:09:c9:65:bd:1e:5d:
c6:42:65:34:90:3c:a1:a2:89:3b:43:24:7e:1d:1b:
79:70:ac:5c:7c:bb:0b:8c:9c:75:c8:1b:08:37:3c:
6f:62:2f:44:4a:21:be:5b:19:b3:10:44:c9:17:37:
d5:6f:62:eb:36:eb:5e:43:53:3d:f2:6d:01:0a:d3:
6f:ba:11:fb:5b:87:15:72:c8:69:de:a8:57:a3:6c:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DE:41:AF:37:05:DA:FA:B9:E7:32:BF:DF:D7:77:77:63:C8:B4:42
X509v3 Authority Key Identifier:
keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:56:78:39:77:87:69:84:25:61:39:64:a6:11:2e:dd:74:c2:
6e:24:7b:69:04:32:75:70:29:df:1b:b7:a2:65:8e:63:b3:8f:
85:ba:51:c9:51:de:2a:45:1a:46:2a:dc:72:bd:a0:63:12:19:
f4:5c:17:5c:10:46:2b:fd:90:14:0f:0a:27:17:8d:28:c7:ec:
3c:49:01:d7:97:8d:a8:1f:ab:cd:95:1c:b3:7e:2c:72:61:01:
d8:15:c0:7c:41:d6:1b:5a:26:a3:f3:4f:6b:42:1c:de:7b:18:
3d:90:6f:98:59:12:bf:e8:61:f8:15:a2:bd:dc:40:59:9f:75:
88:3c:43:54:fa:df:53:8e:c4:cc:5d:c9:c4:eb:71:11:7e:63:
86:cf:42:ec:f7:19:df:a4:a3:a1:65:bc:78:02:60:5b:73:00:
49:d7:bc:31:53:01:f1:07:df:2b:4a:d2:70:2e:77:09:b4:b0:
e0:ef:e0:a8:42:36:cf:4e:e2:e5:6b:11:33:0d:0d:2c:d9:f0:
86:bb:7c:7f:a7:de:64:b7:4e:e1:2c:a1:01:ac:3d:df:41:ff:
47:4d:b6:8c:3d:32:67:8b:89:65:90:d0:20:a2:b7:8f:79:53:
4a:3f:c3:43:c2:c2:18:1f:b7:ef:38:27:4e:c4:85:b6:e8:7f:
ba:99:de:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:07:57 2026 by rpki-client