
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
File: XTDuvxHkF41iO-G95Nu0y1nMhDc.mft (raw, json)
Hash identifier: iQDSd0P5VdvvJjkkfhGiUIB+7rMc+eEDNJ13rig41ac=
Subject key identifier: 10:D4:87:47:49:79:0C:91:35:04:F5:88:51:77:D3:03:7D:6E:66:23
Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37
Certificate issuer: /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
Manifest number: 98
Signing time: Tue 29 Sep 2026 08:02:35 +0000
Manifest this update: Tue 29 Sep 2026 08:02:34 +0000
Manifest next update: Tue 06 Oct 2026 08:02:34 +0000
Files and hashes: 1: XTDuvxHkF41iO-G95Nu0y1nMhDc.crl (hash: ZQhYj477bSjPbXDvPA1iYDoykf51IUn+NffDTwvXWHM=)
2: 24992E62E0FC11F0B50D6A7D5F6F56BC.roa (hash: eAx7dd7W8IzFugozPftJzHrtY4Ej4f42CnK31HLLaRE=)
3: 253978EAE0FC11F0B50D6A7D5F6F56BC.roa (hash: 6RxldyO2/Y3wToEhzB/mHNRPtNgIGcUmqFl9NgQBrdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 08:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
Validity
Not Before: Sep 29 08:02:34 2026 GMT
Not After : Oct 6 08:02:34 2026 GMT
Subject: CN=6abb709b-4cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:1f:ea:8a:51:7a:da:bf:3e:98:bf:10:21:
76:e0:1d:89:5d:c6:05:23:0a:c3:77:54:fe:3f:6d:
4b:9c:a1:cc:36:dd:08:be:47:d7:66:01:8f:dc:1c:
be:55:ff:a9:d3:9d:73:e7:c8:e9:1f:c5:e0:b6:30:
33:c3:14:e2:cf:d0:c2:6d:65:68:43:a6:97:2f:58:
63:7c:26:77:7c:96:d6:5f:21:5f:d2:ae:d0:dd:6a:
e6:82:f1:2c:2f:a8:7a:0b:0c:57:ce:02:da:02:97:
36:94:b9:0d:bc:fd:48:42:a2:7c:13:c8:93:ae:44:
3e:f4:e0:f2:f5:ac:b0:d8:1a:29:11:a3:fe:b7:cc:
81:63:d0:bc:39:1c:86:ec:c4:cd:7d:39:ad:c9:6a:
6e:61:74:cd:9e:fe:21:53:94:26:f4:64:2a:2a:9f:
f1:73:49:a9:78:04:67:09:13:1a:34:6a:42:89:eb:
ec:f0:32:e7:a5:71:78:db:03:b3:18:90:47:db:ca:
a7:ad:02:dd:40:52:00:49:a5:33:4e:36:b0:69:d4:
fc:f7:d8:26:38:99:f1:69:d8:a3:dc:53:aa:3f:70:
6a:b4:87:e9:fb:b8:f5:9d:6d:69:c3:b2:79:39:c2:
4e:90:d7:6e:4f:fa:9f:a9:03:a2:73:ca:77:f3:d9:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:87:47:49:79:0C:91:35:04:F5:88:51:77:D3:03:7D:6E:66:23
X509v3 Authority Key Identifier:
keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:82:92:29:39:e4:c2:75:29:19:db:49:f7:5d:b0:fa:0f:aa:
a2:a3:4f:28:15:92:c5:8b:76:c3:38:8c:54:d5:13:11:0d:2e:
27:2a:a5:41:74:5e:04:e9:95:49:ca:31:93:20:0d:8f:36:80:
e5:55:3b:2a:65:af:9a:ae:3c:4a:d5:62:ef:cf:ab:76:a1:bd:
f7:31:d1:1f:b1:34:5f:33:b3:be:1d:d0:71:88:56:79:9e:50:
9a:67:8c:e7:bb:66:65:2a:3d:58:80:c7:69:06:57:4a:3b:41:
86:fe:a8:e3:49:eb:07:84:66:54:e5:12:2e:15:42:9c:d6:d4:
74:ba:11:d2:4c:81:50:6b:0a:80:9a:69:7e:58:8f:dd:c6:5b:
df:0f:c1:32:d8:42:ce:3b:63:83:b8:1c:be:2c:f5:61:ff:4f:
b4:54:0f:cb:3b:aa:70:8d:96:77:41:8c:84:bb:e3:a6:ea:fb:
fa:f6:e7:b7:c0:2d:dd:99:35:98:e9:4f:05:ff:66:5a:58:29:
f4:4a:d3:cd:d7:e2:ac:90:e9:9b:0f:81:1c:21:14:bb:22:9b:
85:36:0f:45:57:8a:01:82:37:13:04:09:f7:84:69:cf:08:6a:
30:09:a8:78:ea:54:16:bc:c5:5b:8b:a0:b5:ec:28:43:fd:68:
f3:92:cc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:47:21 2026 by rpki-client