
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json)
Hash identifier: KPpFBtZDzcbbrbOHGeuaGT0PU0Ir0m9rgvR8Ts2JUZs=
Subject key identifier: 46:81:24:50:D9:F3:05:D7:B5:F6:79:17:4C:FC:DD:01:8E:8D:25:1F
Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
Manifest number: 023E
Signing time: Fri 25 Sep 2026 02:34:04 +0000
Manifest this update: Fri 25 Sep 2026 02:34:03 +0000
Manifest next update: Fri 02 Oct 2026 02:34:03 +0000
Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: Ag3yjKmeiyZ23E5jG8ZLLDj+uHNH8CC0Pk8BvK1ajyc=)
2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: Q+PqjUyyIbMBWSpORGj6TQ+PmdOe/qs7/MICLEALP84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Validity
Not Before: Sep 25 02:34:03 2026 GMT
Not After : Oct 2 02:34:03 2026 GMT
Subject: CN=6ab5dd9b-0979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:f8:02:d4:f1:f2:be:5e:96:f9:29:d0:8b:
09:4b:70:39:7a:dd:3d:e6:63:6b:cd:10:88:04:b1:
35:7f:0d:a7:4d:90:68:3e:66:71:26:b3:07:18:80:
64:d3:4e:c3:8c:b9:91:5e:a1:77:db:4d:08:f2:6f:
79:95:c4:c4:53:57:c1:74:94:91:35:02:59:b3:71:
f1:10:98:61:9b:42:22:09:b0:69:7e:71:dd:74:d0:
05:b1:14:e0:f6:9e:22:e1:fb:6d:ad:8b:62:ec:41:
1a:17:80:33:4b:78:9b:c8:e0:0a:26:6c:27:26:1f:
85:b2:8c:a4:41:56:1c:07:55:f7:11:df:b7:e7:ad:
c6:1b:96:79:ed:6b:38:8c:5c:13:2f:82:b8:2d:cc:
ad:ed:61:1e:3a:df:08:fc:1d:20:de:21:e8:99:29:
f0:80:2f:7f:78:e7:a6:9f:65:7b:b3:60:48:8b:d9:
b6:42:ff:92:b3:77:14:96:7f:31:ba:10:30:f7:37:
2f:99:07:37:b0:65:0d:b4:c6:47:74:b1:8f:b9:38:
cd:34:60:6e:34:b9:c0:86:cd:18:95:0c:cd:eb:20:
f0:61:5b:37:03:e1:e6:05:64:66:1c:bb:3a:d0:12:
22:99:0b:3c:5f:84:f5:ce:25:f2:82:89:bb:4c:3e:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:24:50:D9:F3:05:D7:B5:F6:79:17:4C:FC:DD:01:8E:8D:25:1F
X509v3 Authority Key Identifier:
keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f5:2e:10:8b:bf:c7:6f:10:52:ac:77:d8:42:dc:a8:06:42:
51:07:cb:3f:76:4d:d4:15:80:d2:02:72:02:4e:71:90:4a:1a:
ed:3a:7b:5f:99:0d:2e:5e:d5:c6:44:f0:6d:f4:42:57:9e:27:
3c:6a:c6:70:f3:71:56:10:ea:9a:54:48:37:c0:ca:70:f5:c0:
f2:98:92:78:8c:e1:5d:0e:0e:45:be:b0:aa:c8:f3:ae:ac:3d:
04:2e:5b:58:16:da:5a:1a:9a:75:92:0e:77:d0:9c:0e:15:03:
e7:7a:e4:c6:9b:29:3a:74:db:eb:33:ee:5b:f2:6c:ca:68:5a:
3b:ae:43:85:1d:67:ff:fd:2e:7a:86:b9:99:a8:20:5d:a2:37:
72:7e:85:0f:75:86:cd:4d:96:e0:78:79:a7:d6:f6:03:78:4b:
a5:cd:b7:af:3f:fa:63:71:af:1a:ca:36:c5:03:89:de:68:65:
82:7c:26:3e:44:f6:f9:d0:f3:0c:a2:43:c7:6a:23:bb:e4:42:
80:b8:56:87:7c:4d:f3:86:33:29:c0:fd:db:2b:fb:be:d4:78:
04:bc:87:f6:c3:12:36:d9:70:48:72:ed:a1:04:b8:8a:9d:0c:
ea:c7:7a:af:2b:a1:4b:9f:a7:43:3f:f0:2f:e9:cc:da:15:a5:
57:f3:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:11:41 2026 by rpki-client