
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
File: Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft (raw, json)
Hash identifier: 9kC5pNSJXyZWfRa3vpmV2+GvSWTdR1Qg+sshrq1s8Tg=
Subject key identifier: 9C:E7:CD:AD:A7:CA:A3:0F:DD:98:3E:B5:9F:1D:AA:7D:A5:3D:96:11
Authority key identifier: 5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
Certificate issuer: /CN=A91D1E2D/serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
Manifest number: 54
Signing time: Tue 29 Sep 2026 08:52:04 +0000
Manifest this update: Tue 29 Sep 2026 08:52:04 +0000
Manifest next update: Tue 06 Oct 2026 08:52:04 +0000
Files and hashes: 1: Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl (hash: umNXvy8Ar1lfHeD6B1fyXiZpC46A2HIFfmBf1e7Zh9c=)
2: 8533A604448D11F19D9C22A9A7833773.roa (hash: ud2XdvTOeMSMCgpchf7dcf0qY7ZIOdm72flkkkj9uWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl
rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 08:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E2D, serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Validity
Not Before: Sep 29 08:52:04 2026 GMT
Not After : Oct 6 08:52:04 2026 GMT
Subject: CN=6abb7c34-b53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:c9:6a:a1:1c:36:45:b0:11:1e:12:ee:ca:
2f:25:31:6e:54:cf:8d:f0:45:ee:d9:51:1c:28:52:
9c:c0:c9:fc:ef:53:4f:9f:35:d9:05:3d:45:da:30:
4b:0b:fd:36:8f:2c:c3:30:f4:09:97:15:35:f3:e1:
c6:6d:c2:ae:18:d9:a8:2b:25:4b:68:17:ba:ee:1d:
ce:99:cb:b9:09:83:c1:2f:40:48:bc:2e:5c:35:10:
bd:f3:31:22:a0:71:83:ee:36:63:a5:27:36:74:12:
bf:3d:0b:41:fc:aa:c1:43:3d:ce:86:88:46:2f:2d:
ab:88:84:53:fa:4e:4f:ca:a4:d7:3b:1e:49:f2:3d:
77:4e:d7:ca:dd:53:d0:62:2c:63:e1:79:68:f2:94:
d2:9e:15:b2:64:79:c4:29:e2:04:d0:01:d7:e0:37:
74:15:e8:03:0c:df:b6:50:34:5c:0c:57:d8:f7:7d:
61:d1:b6:f4:1f:5b:a1:19:19:3e:51:27:33:ff:bc:
c3:4c:82:78:09:4b:b6:9e:ef:81:9e:9f:ff:c5:cb:
9e:b1:24:1b:a7:2d:cb:d6:db:5d:76:5d:65:13:eb:
3e:3f:d4:21:e3:13:c2:36:d8:9f:99:1d:27:6e:b8:
e8:07:66:18:d0:57:4e:e2:46:e6:92:f2:64:dd:0a:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E7:CD:AD:A7:CA:A3:0F:DD:98:3E:B5:9F:1D:AA:7D:A5:3D:96:11
X509v3 Authority Key Identifier:
keyid:5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:d5:b4:6f:92:97:46:cb:e7:23:d4:76:44:82:ce:b7:64:2a:
33:4a:d5:3d:61:46:7f:35:f4:69:34:7c:f0:29:bc:74:46:f4:
61:ac:99:e0:75:58:5f:78:64:35:12:27:18:ad:0d:42:f5:a2:
7c:cd:f7:95:46:31:d5:2d:70:5e:42:40:fa:17:3a:ba:ab:b5:
11:a7:fb:f9:60:c6:10:7d:9c:97:08:14:6f:b4:66:6d:cc:09:
cf:46:fc:97:1c:dc:e0:7e:75:7b:09:b2:48:60:ab:76:fe:d6:
5e:af:ab:ae:e9:26:9d:69:9a:c5:e6:14:0a:40:ac:c6:d1:c4:
a9:58:5a:2b:c2:a0:85:d6:82:7a:e3:7f:26:b4:c2:35:62:b1:
d2:88:1a:f5:65:9c:95:81:d8:a7:e1:46:ad:18:b1:34:75:fe:
d6:3c:d4:b1:96:64:dd:c8:15:ce:8c:dc:89:0b:8e:e6:de:be:
59:82:b7:0e:93:e0:16:d7:cb:3e:6c:5e:47:13:f4:34:95:fb:
df:5e:4c:fc:10:5e:68:e8:62:27:18:18:1d:ed:32:aa:79:e1:
32:4d:5e:81:38:f9:20:50:4d:8b:94:63:d0:49:30:a8:77:7a:
0f:80:df:28:2d:7e:e1:0d:32:51:64:c8:81:21:82:38:1e:94:
57:22:92:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:52:13 2026 by rpki-client