
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
File: XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft (raw, json)
Hash identifier: EiuhlltmBXbYCnvBxh5vNMFtSoMvLbKrvHMQ5JfAARc=
Subject key identifier: 38:06:71:36:EB:B6:D7:CF:4A:71:CA:F2:68:6B:A2:CC:AC:BA:99:DA
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial: 05C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
Manifest number: 0570
Signing time: Thu 24 Sep 2026 23:16:29 +0000
Manifest this update: Thu 24 Sep 2026 23:16:28 +0000
Manifest next update: Thu 01 Oct 2026 23:16:28 +0000
Files and hashes: 1: XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl (hash: tQEJCuU33c1iNHr0ebax5gAow3gPfsF6ScRmm/kjzq0=)
2: 87840F3AFBD111EFB4804F27C4F9AE02.roa (hash: vIEtRSxvBa0Xc/IiKtnrGRDGvVh6iD/nJgJJDv2I0S0=)
3: BEB34436FE3211EFAA1D9A4EC4F9AE02.roa (hash: rcOga+YGZldqreiF0WCdj8lf5Z59J1hOmyY6+goJTWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1477 (0x5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Validity
Not Before: Sep 24 23:16:28 2026 GMT
Not After : Oct 1 23:16:28 2026 GMT
Subject: CN=6ab5af4c-c6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:05:b4:e2:d1:99:93:40:da:6d:ae:7a:e2:
cc:f2:1f:f7:f0:66:57:b2:65:4b:c1:75:cc:46:1b:
70:5e:87:30:a7:25:cb:48:c5:84:0a:0d:77:32:9a:
7b:6f:38:30:6a:91:86:b1:03:fb:58:8f:c3:48:2f:
47:79:4c:3d:09:20:24:9e:26:70:05:44:63:fb:08:
95:30:c2:73:32:27:1a:d0:e9:bc:2c:98:df:02:96:
a7:30:d3:22:d8:01:42:73:a7:a0:b9:90:10:38:77:
5e:f7:bf:e8:03:97:d5:22:ad:b7:eb:c1:7c:ab:91:
65:e2:81:f7:ca:bc:6a:3e:b4:33:b8:ac:56:15:4c:
92:90:f4:ca:e6:d8:15:a8:bc:26:9a:c6:06:9d:12:
e5:2b:94:fa:a1:47:fa:e9:59:40:4c:11:fc:25:e2:
e8:a6:84:d5:6a:e9:9f:b1:6b:3f:8b:e2:0a:bf:7b:
fb:63:9b:30:cc:2a:39:46:d9:a3:77:74:a9:88:e5:
88:d9:9b:12:f4:24:dd:1a:3d:0e:fe:f1:2e:94:a1:
b9:fc:89:75:8e:48:c3:0d:97:87:41:23:53:39:49:
f5:6d:a8:ed:a3:8a:44:9e:c9:e6:25:be:49:b0:db:
95:20:a4:e9:bc:58:f1:e9:29:19:2e:ec:02:e2:f8:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:06:71:36:EB:B6:D7:CF:4A:71:CA:F2:68:6B:A2:CC:AC:BA:99:DA
X509v3 Authority Key Identifier:
keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:57:6d:42:c7:11:3c:15:f7:f0:64:21:23:d7:c9:74:e8:cf:
13:85:4d:ad:a5:88:d5:82:e0:7f:c7:3f:ae:3c:5f:cd:e8:ae:
1e:56:c8:b9:d0:1a:0a:67:49:b2:74:70:f8:01:df:17:93:a1:
4a:48:6f:33:af:aa:1a:17:87:26:23:01:08:a3:58:72:ab:ed:
ed:1a:df:ae:37:7c:0a:f6:d7:38:26:07:6a:ab:e9:5c:17:cb:
d2:19:80:18:cf:ef:d4:99:73:aa:e9:03:fc:75:c2:34:67:80:
64:a2:00:d8:3f:0d:d6:68:4a:59:50:48:8c:c4:e2:97:b8:53:
6c:7f:38:09:9d:6d:96:82:33:0d:61:6e:cb:71:1a:cb:3a:9b:
62:d1:32:62:9e:39:46:b8:e9:49:79:d4:ca:ab:50:6a:8d:01:
b8:4d:de:f2:93:c0:18:11:ec:6e:e7:9b:97:e3:1c:30:2f:d5:
1a:29:2f:53:e9:0e:73:be:6d:30:11:a5:b6:a1:6f:0d:37:22:
b8:76:5e:ba:85:08:d1:89:10:9f:20:be:ba:d3:2e:15:d4:2c:
73:6d:18:07:78:84:ed:1b:da:2a:aa:d7:6f:61:14:84:87:ac:
aa:28:49:64:98:db:78:6d:4f:19:e6:07:6a:d3:42:60:e0:77:
93:5b:5b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:44:15 2026 by rpki-client