
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
File: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft (raw, json)
Hash identifier: 3puAeci0QRyBd2WCBPtl2NVl84e8ngilKqlkvcWyZ8k=
Subject key identifier: BF:20:78:CD:15:D6:1D:83:0B:4C:7A:67:CA:A5:A3:7F:4A:8F:FF:A0
Authority key identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54
Certificate issuer: /CN=A91B4F01/serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154
Certificate serial: 0567
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
Manifest number: 0560
Signing time: Thu 24 Sep 2026 23:13:37 +0000
Manifest this update: Thu 24 Sep 2026 23:13:37 +0000
Manifest next update: Thu 01 Oct 2026 23:13:37 +0000
Files and hashes: 1: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl (hash: UBd0by0taPM7CVTmYYnv9uPJ98UvhqJXbfSAWV0lRLo=)
2: BD115AB24B7C11ECA63C0038C4F9AE02.roa (hash: +GvQ/NXwtK6n9zSmGQYOiyRLx0NfuJisquadWhY4pho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl
rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1383 (0x567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4F01, serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154
Validity
Not Before: Sep 24 23:13:37 2026 GMT
Not After : Oct 1 23:13:37 2026 GMT
Subject: CN=6ab5aea1-72bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:0e:58:41:1a:ab:2f:fd:7b:5a:b2:94:48:
cb:7e:c1:0b:e4:86:65:2f:bf:ec:54:f6:90:9c:48:
33:d8:b7:20:1d:aa:c5:29:e9:e9:ba:08:b6:9d:b8:
9e:05:f4:b5:a7:89:b0:dc:16:5c:3a:ae:4b:6d:25:
29:8b:44:19:06:d2:f3:c9:55:86:45:65:1f:1a:cc:
6a:f8:ae:35:0f:ab:9b:54:42:d4:b5:ca:cd:60:f2:
f3:da:2b:d0:91:b5:b3:d9:ff:79:e8:cf:d4:0d:29:
f7:aa:a0:8d:d4:20:6b:73:fe:f7:6f:23:6d:7b:89:
9a:3c:f0:29:50:11:dd:88:39:49:c7:b5:df:61:74:
c3:07:a0:ad:53:b3:77:de:a9:27:20:70:52:01:6c:
3f:88:1c:50:32:a8:ce:ff:dd:b9:99:c0:a4:df:79:
69:e7:e2:66:68:51:2b:37:6e:c8:bb:9a:2a:c2:9c:
67:af:f4:ff:27:69:8b:4e:f3:19:11:df:24:b3:2d:
ce:6b:97:36:61:91:ed:43:da:87:a6:47:47:dc:3a:
e2:22:12:8f:01:61:07:76:08:ee:97:70:4a:70:43:
2c:1b:90:99:16:1b:ef:9b:2b:9f:69:33:30:52:cd:
2d:30:ee:12:ba:c6:ca:28:5a:88:91:2e:a6:db:96:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:78:CD:15:D6:1D:83:0B:4C:7A:67:CA:A5:A3:7F:4A:8F:FF:A0
X509v3 Authority Key Identifier:
keyid:5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fd:a8:70:1c:8b:85:df:49:b2:ec:9a:24:be:50:f3:86:6c:
fb:06:08:06:be:f1:a7:88:fa:4f:6a:fb:ca:fc:9a:cb:50:99:
04:2d:6c:49:4d:19:0a:85:9d:64:f4:6b:be:d4:ec:02:cb:2f:
59:60:7e:ad:4d:b5:15:88:d3:56:f5:f1:a2:09:ef:51:70:77:
c2:b2:e4:d8:53:91:a2:23:ad:2e:ee:0b:f3:90:ae:9a:34:e2:
02:cd:bc:07:d3:0c:f1:27:3c:2f:5a:1e:87:32:a9:14:29:b8:
cc:4f:c6:52:4a:9c:17:35:f5:50:ef:53:0b:00:52:21:5b:3d:
ee:ee:f9:59:58:76:22:d6:b7:45:08:4f:8c:26:40:3f:97:69:
14:9e:4c:16:e3:4c:7f:f8:a7:9e:0b:8a:d1:19:59:89:4b:fe:
f8:44:af:ee:77:52:08:b7:19:b2:3b:1e:bd:af:0d:d9:19:ec:
92:dd:5c:2a:3f:42:1c:e1:ad:00:d2:a7:87:2e:fe:e0:87:2c:
af:ba:43:0e:a7:7c:75:ee:b9:5f:9c:8c:e7:36:c3:b5:0c:5c:
db:56:5e:33:b1:22:ff:35:f6:dc:96:f7:38:b3:f9:6c:20:ef:
1d:8b:d1:76:ce:c4:c3:52:41:d4:ce:e3:ca:16:09:0a:18:fe:
f6:4d:8f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:40:34 2026 by rpki-client