
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json)
Hash identifier: 079X9T20oN045iRKydjDhf6VCaPbI+8whyGSqkPLbEM=
Subject key identifier: CB:E4:78:23:55:B4:95:1D:D9:28:DF:66:2F:FE:ED:D9:57:12:87:AF
Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
Manifest number: 01C4
Signing time: Wed 23 Sep 2026 03:39:47 +0000
Manifest this update: Wed 23 Sep 2026 03:39:47 +0000
Manifest next update: Wed 30 Sep 2026 03:39:47 +0000
Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: FevsFxWlYKrCR/VXX0NqQalY4pLznNyeC5U7/8xK5io=)
2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: 3K3ILgZCY+aW8Uz31syQLaXzVT7Ru8BASPjTSZG08co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Validity
Not Before: Sep 23 03:39:47 2026 GMT
Not After : Sep 30 03:39:47 2026 GMT
Subject: CN=6ab34a03-1105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:8f:97:cd:73:3c:e1:f5:14:65:08:59:c3:
b6:d3:8e:7d:41:51:1b:b9:b7:4d:6d:21:02:e4:7a:
66:8f:79:d6:80:c6:bc:f1:37:fa:75:c8:cf:b7:81:
6c:0b:2c:e1:af:fd:eb:4a:36:40:c6:73:43:d5:b3:
07:9b:2c:15:85:56:98:4e:11:0e:8c:a4:3f:70:4f:
47:a0:4c:f6:5e:04:62:0c:df:43:f7:1e:a7:33:16:
c9:fd:98:d5:7e:d1:00:20:66:34:d9:cd:25:ed:7a:
11:1f:84:1c:fc:4c:e0:5b:ea:db:f0:45:f7:cc:06:
30:d0:b9:f8:ff:14:3d:f1:f5:75:66:22:f4:ab:f4:
9a:c8:04:2f:05:bc:15:34:55:b5:d1:ac:d4:75:88:
d9:a8:ce:c3:e3:4d:06:0a:fb:14:ec:32:e5:c7:14:
46:a3:36:18:0a:26:98:76:74:0b:69:9e:8a:a1:d1:
03:06:a8:62:4e:a9:3a:b8:9c:6e:35:12:f4:86:08:
b7:ac:39:a2:f3:bc:67:fd:5d:ec:c0:3e:53:52:90:
f7:3a:06:79:13:03:d7:4d:58:5b:64:80:76:ff:b0:
0a:cb:f4:fd:75:21:ab:e1:53:12:3b:05:e7:aa:ed:
cb:35:ea:06:2d:5f:1b:b7:84:ea:89:46:9b:31:67:
ea:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E4:78:23:55:B4:95:1D:D9:28:DF:66:2F:FE:ED:D9:57:12:87:AF
X509v3 Authority Key Identifier:
keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d5:7d:c8:eb:e9:6f:90:7e:ec:7c:a0:f6:72:3b:d0:8c:b0:
32:b5:61:da:25:c6:66:c3:6a:da:d1:9f:fb:3a:45:d1:33:65:
c4:17:fc:cb:a9:c6:64:5c:72:c8:87:58:0e:e1:70:d7:c2:13:
c1:9f:9d:9e:52:a9:05:03:cb:c2:f4:11:6d:f5:9c:a7:97:df:
05:41:90:33:16:db:66:ec:4a:a8:7f:bc:33:ef:a0:6f:6f:38:
04:cb:2b:27:d7:a1:aa:16:11:8f:bb:5c:80:2b:9b:73:c3:47:
c5:22:8b:c4:02:14:fa:a1:31:75:66:6b:79:7b:60:b3:43:03:
54:e5:0d:08:51:ee:e1:9e:bd:98:19:a7:0a:70:7e:32:01:33:
47:9d:12:fe:09:7d:5d:93:5e:66:bb:d8:f5:db:6d:c6:01:6f:
43:28:22:6a:61:b5:8d:4e:9b:30:1e:64:f1:d5:86:72:53:d1:
79:5f:6d:98:a0:9b:f0:e3:33:87:88:ae:a1:46:c7:1c:ba:75:
73:79:ce:ba:4d:8b:be:27:9e:c3:a3:56:92:93:37:07:95:1f:
8d:88:b1:1d:45:d6:df:19:a2:bf:89:fc:75:f6:e1:85:38:fb:
45:cb:e0:98:f6:af:84:e7:3b:99:d0:9e:3f:d1:c1:cf:b2:99:
12:9c:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:34:40 2026 by rpki-client