
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json)
Hash identifier: iQz6+dB2+ct8ppGnnxiarfn99wcQitPxim/bu/EPprM=
Subject key identifier: 9F:C0:9A:9C:B5:79:C5:E5:75:1C:E2:59:BF:B0:65:6A:FF:02:A5:EB
Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
Certificate serial: 01C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
Manifest number: 061F
Signing time: Wed 23 Sep 2026 00:31:04 +0000
Manifest this update: Wed 23 Sep 2026 00:31:04 +0000
Manifest next update: Wed 30 Sep 2026 00:31:04 +0000
Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: auOCcNXvWrX4zx5H36kM3u9S55ywnlYfIb8s9QrsOeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl
rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
Validity
Not Before: Sep 23 00:31:04 2026 GMT
Not After : Sep 30 00:31:04 2026 GMT
Subject: CN=6ab31dc8-6fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:44:3e:c0:67:a1:5a:12:2d:cf:63:24:a6:
c1:3d:9f:4f:39:00:ed:b6:49:0c:cc:89:d8:11:ce:
a9:78:81:77:fd:48:76:c3:cf:cc:ca:a6:96:51:7a:
54:65:cf:a3:88:e3:1d:22:a2:6c:c7:7c:0d:e9:3b:
16:cd:a3:cd:ab:73:f4:63:d2:5e:47:33:0d:5b:9d:
02:87:6d:00:2e:b1:29:4f:44:0c:e1:cf:59:d7:a8:
2c:6c:48:53:0b:96:c8:a5:76:97:6d:31:59:75:bf:
61:e9:11:6a:4d:81:8c:92:d9:6e:6e:ed:71:a6:be:
8d:a2:dc:f7:a0:f9:f0:7a:ef:ad:8d:28:dd:50:ba:
2c:75:6b:f0:06:cb:ba:18:db:7b:2a:e2:f6:e8:da:
c3:b2:f6:c2:44:98:31:68:3b:04:b9:bd:84:3a:f5:
6e:0f:42:3e:32:a9:a6:0b:85:a2:ba:fa:e4:65:27:
79:5e:ba:d5:3c:ef:5a:dd:f8:ca:ed:bb:e4:44:0e:
d3:7c:f5:a6:01:91:5e:7d:62:10:f4:fd:91:4a:48:
71:aa:eb:81:3e:f7:1c:cc:07:29:20:b7:77:29:06:
54:e1:d4:5f:c5:96:ff:f1:bd:52:a5:74:f8:5f:fd:
3b:4b:2a:3c:90:bf:08:11:f7:90:4b:29:87:37:c0:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C0:9A:9C:B5:79:C5:E5:75:1C:E2:59:BF:B0:65:6A:FF:02:A5:EB
X509v3 Authority Key Identifier:
keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b6:b2:22:31:1e:0d:93:00:4b:d5:ea:29:d7:37:61:c3:14:
1a:fc:2d:0f:43:e4:75:a2:1b:d6:86:79:b6:cc:d1:ea:7c:c7:
52:d5:78:c3:5b:2d:8b:85:c2:82:61:76:cf:4b:61:86:03:50:
5c:b2:fd:c7:bf:0c:f4:b2:a8:e0:a4:ee:9a:7b:23:90:e3:28:
9c:f9:bf:49:28:35:13:c0:b3:99:0b:46:86:d3:5b:10:0c:d6:
d7:3a:4c:08:5d:1d:35:42:5d:0b:f8:2f:af:32:55:43:11:ff:
19:7f:a1:cc:00:74:68:d1:b5:14:07:e3:46:cc:b8:c9:ce:ea:
29:6c:c5:37:56:b2:af:5e:97:94:c9:5f:b9:36:1d:d8:16:01:
a2:b0:25:1c:5a:ae:b4:e0:70:5e:1a:4f:93:f0:77:5d:80:9f:
ca:1d:d3:7d:27:4a:b1:8e:90:d2:97:ea:a1:67:2c:37:5a:05:
32:e0:16:5d:9b:63:f5:93:8a:20:8b:7e:b3:a9:b3:5b:1b:8b:
0e:ca:fe:84:fc:6a:92:ce:4f:4a:bf:b4:d5:7d:78:8f:3b:41:
9f:9c:0d:a3:3a:c6:41:72:c5:a1:01:ed:9c:2d:22:89:19:d8:
53:41:98:9b:e2:6c:54:1f:a3:f2:8c:c5:8e:fd:bf:48:1a:08:
d6:49:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:07:30 2026 by rpki-client