
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json)
Hash identifier: 19cdfa+C2uQD6FgXtuw3KUGfSMy1Oc1dXIZEhGOXG0w=
Subject key identifier: CA:41:18:EE:6B:D7:D9:72:38:45:D8:6E:D7:33:8A:A2:60:EC:09:D8
Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A
Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A
Certificate serial: 0A37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
Manifest number: 0A2C
Signing time: Thu 24 Sep 2026 19:40:43 +0000
Manifest this update: Thu 24 Sep 2026 19:40:43 +0000
Manifest next update: Thu 01 Oct 2026 19:40:43 +0000
Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: cHFYAGaj+uSzixlhmvDklcxRQfKFd/7A8GosuP0+N8U=)
2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: rI4b1YgzMPn2BfRwdTDQyxiYnkW+OyQNTTa1mQYXQvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl
rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A
Validity
Not Before: Sep 24 19:40:43 2026 GMT
Not After : Oct 1 19:40:43 2026 GMT
Subject: CN=6ab57cbb-4549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:8e:de:23:b5:f1:45:9d:da:5c:8b:2f:04:
4f:7a:f4:cb:ab:fb:3d:a3:24:11:f8:d5:41:76:6d:
b6:b0:2c:bd:5f:df:20:7c:80:95:63:58:37:13:38:
48:dc:c3:9f:ac:c0:00:d8:60:04:a3:da:85:0e:56:
0b:4d:c4:80:35:26:b9:2d:f5:2c:9f:2b:00:03:3d:
78:e3:7f:9b:7e:aa:a2:30:73:f5:ba:42:ce:d4:e3:
da:15:05:56:68:71:8e:52:57:2b:2a:55:24:63:38:
46:e4:4a:bf:28:8b:31:53:b3:fe:2a:78:99:18:68:
15:81:fd:ce:d1:5f:65:6f:25:19:03:b1:90:dc:b1:
6d:de:8d:b9:91:1e:23:6e:8d:60:cd:4b:67:22:05:
67:29:27:b1:89:f1:0f:cd:89:17:0e:30:8e:36:32:
7f:be:7d:a6:16:6f:65:ab:d3:e6:e9:47:3e:99:d1:
52:89:ed:b4:01:1d:96:d2:0c:6a:5e:c3:27:53:5a:
d7:65:d9:a0:49:29:30:db:e1:e4:d7:c3:c2:13:a5:
de:9b:40:75:e7:6c:f2:59:16:3b:05:8a:bc:54:da:
23:15:6b:bf:60:8d:73:95:ff:b2:cf:ad:c4:dc:6b:
36:dc:a7:e4:73:0d:77:af:73:d4:a3:e5:30:27:10:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:18:EE:6B:D7:D9:72:38:45:D8:6E:D7:33:8A:A2:60:EC:09:D8
X509v3 Authority Key Identifier:
keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:84:e6:d8:f2:50:02:74:2c:93:e3:c0:80:b8:7a:be:0d:f2:
61:34:f4:75:df:cb:5f:7c:b2:07:6a:eb:77:2e:88:75:d1:78:
f0:a9:e9:7d:ae:be:3c:e2:dd:d2:9d:75:0f:d1:e0:63:a7:e1:
61:1d:df:19:53:16:e6:0e:37:ed:c2:f9:54:70:a8:57:e3:98:
6f:6a:12:e0:43:9c:3f:82:70:55:ad:de:23:20:a7:bd:45:3c:
66:7b:ab:15:c3:9d:1c:b5:0d:6e:89:6d:35:38:dd:ec:88:72:
e9:94:7c:70:0b:a3:65:ac:67:50:54:1f:bc:bd:cf:55:0c:ce:
6b:59:07:72:99:4e:32:e2:d6:a5:e2:e0:74:2c:aa:be:b1:c1:
c6:50:6f:74:9d:56:42:cb:10:f5:b1:98:b9:40:f1:6c:1c:b9:
87:56:73:43:58:2c:06:a9:0d:df:06:ab:34:ac:3f:33:1f:02:
0d:77:36:81:c0:b5:37:76:60:65:bb:e4:b2:dd:9e:da:38:41:
35:c2:ac:1e:ba:35:92:0b:29:14:1e:39:c8:3e:5f:1f:60:8c:
4a:8b:16:0d:4f:64:b2:b7:f7:e9:85:7a:95:b8:dd:56:47:ea:
76:f6:20:ac:0f:05:f9:3b:11:cb:5e:72:03:09:c9:22:19:05:
e1:19:03:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:41:59 2026 by rpki-client