
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json)
Hash identifier: CsHdIf/WbZql98V7aMBYToD2NUWsBYhSu3mCeNyNNok=
Subject key identifier: B3:6A:14:CD:DC:9C:0B:2D:DB:DF:3B:92:E6:B2:2E:12:6E:C4:57:C6
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
Manifest number: 01FE
Signing time: Fri 25 Sep 2026 03:24:17 +0000
Manifest this update: Fri 25 Sep 2026 03:24:16 +0000
Manifest next update: Fri 02 Oct 2026 03:24:16 +0000
Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: puHI+cgGdLMRBNZi8NpUYk8hOCjMUCgvJSnfXroHTn8=)
2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: eKVOlBNn+5WuwNFphnK/oDxQ3aByduRE2UhfBxYvHBw=)
3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: X6aIaG1zQqgDiSqMFiuqRqeQ5WZkrDJTEHFLzyOj2LU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: Sep 25 03:24:16 2026 GMT
Not After : Oct 2 03:24:16 2026 GMT
Subject: CN=6ab5e961-ff4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:24:54:6e:7a:b8:b4:8c:4e:64:89:ec:ee:
26:5c:03:a5:ed:ca:3c:6e:67:d3:c1:8a:78:10:28:
3e:d8:16:ae:3a:96:04:76:92:65:9e:30:ad:85:36:
18:3d:c6:dc:f3:ec:1a:2f:e9:93:cb:ac:f0:a1:d2:
00:65:c7:03:40:a6:36:16:06:ae:68:90:65:57:eb:
9d:ae:14:a8:27:16:b1:ac:6a:3d:4c:6b:97:b8:78:
b8:cf:e7:bc:99:06:0e:9b:f5:d1:62:76:42:7b:cb:
21:2d:89:cb:2d:c9:e0:7c:d1:7f:f3:9e:bd:c1:32:
55:64:8a:1f:ac:6d:b4:a0:31:9c:97:ac:7d:b6:f6:
84:3b:4e:0d:c3:df:1f:90:0a:01:d1:13:fb:e4:54:
74:3d:c0:30:8d:51:27:bb:b9:38:40:07:25:24:b2:
94:6b:47:28:df:9a:cb:ac:47:eb:bd:f5:99:c9:7e:
1c:bb:89:34:ff:e6:eb:89:fe:3a:98:26:9b:70:84:
9e:8e:c7:32:b4:91:e0:78:fc:5e:a0:56:7e:ff:56:
f2:cb:9f:3b:bd:cc:e3:a1:2a:67:e1:7f:27:3c:ea:
07:59:d6:d6:19:44:ac:df:1f:ec:1a:66:73:b6:ad:
04:a3:25:18:6e:f0:40:2d:4d:44:18:a8:95:97:76:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6A:14:CD:DC:9C:0B:2D:DB:DF:3B:92:E6:B2:2E:12:6E:C4:57:C6
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b0:08:3d:0e:fb:2f:5b:d7:c3:61:1f:27:28:9a:42:cd:85:
33:3e:8a:7a:f8:7c:14:ae:d6:5c:48:a3:9e:66:15:80:d6:0b:
72:ac:f9:17:ef:75:0c:22:3d:a6:1b:90:2c:ae:7b:81:7b:9d:
d5:4e:98:73:81:fd:26:82:27:d8:80:f7:b5:b9:2b:16:b6:5a:
ca:17:fe:5e:64:fc:30:74:1a:f3:cb:d8:75:2f:25:b3:b9:1d:
41:5b:8b:59:fd:76:78:7f:ac:dd:68:26:58:80:cb:18:63:01:
6d:72:ef:fc:fc:f4:5d:a5:7f:56:28:77:6f:8b:1a:8e:46:be:
71:f1:92:9d:43:2d:2b:ae:33:0e:75:ea:b0:bb:24:7d:58:04:
4b:b4:1b:a7:27:f2:99:a6:59:ff:71:00:d6:ab:25:13:d0:89:
92:12:64:e1:a0:74:13:c2:b9:0f:f4:1d:39:f3:36:4c:16:29:
e2:ff:40:0d:d7:7d:9f:00:28:ca:ee:e4:01:62:5d:a2:00:67:
fa:5f:f2:f2:5e:5e:51:36:c5:2d:af:60:76:2c:22:81:34:91:
74:5a:1f:22:50:4a:58:8a:3a:b0:40:88:c1:9a:9d:4c:71:e1:
7a:64:45:fa:81:e1:07:4a:c8:99:63:42:5a:d5:8f:f9:0c:09:
87:f6:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:43:59 2026 by rpki-client