
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft
File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json)
Hash identifier: wQxtIMN5rDzcEONAJg83kdD4vBYHgDEdTXSpjIEBn7A=
Subject key identifier: 8A:0C:A9:A8:A7:A2:16:2A:61:75:03:57:F2:35:DD:00:F8:F9:A4:88
Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D
Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft
Manifest number: 015B
Signing time: Wed 07 Oct 2026 04:40:18 +0000
Manifest this update: Wed 07 Oct 2026 04:40:17 +0000
Manifest next update: Wed 14 Oct 2026 04:40:17 +0000
Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: wv87GnmVuXQiSIGZJ9Qtn5qthaEsNu73fX6cI22nvpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl
rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D
Validity
Not Before: Oct 7 04:40:17 2026 GMT
Not After : Oct 14 04:40:17 2026 GMT
Subject: CN=6ac5cd31-bf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9d:41:ce:00:e6:1d:42:db:cd:d4:50:c9:60:
5a:d3:a6:16:2e:3a:d6:ce:24:da:5b:f0:f9:62:19:
04:50:26:cb:5c:b0:23:82:84:bb:e7:51:31:41:96:
89:d0:80:fd:2b:a6:d7:bb:d7:6d:be:a0:e1:09:cd:
6c:5f:d2:d5:e0:e6:1f:bb:69:9f:a1:54:2c:d1:37:
fb:62:12:d2:ea:43:c2:1d:15:3e:55:6f:c2:1d:79:
ec:fd:90:44:31:1c:24:e5:55:e4:2b:ac:f1:00:ea:
bb:f3:34:50:e4:d8:0b:a2:c2:91:5e:c4:85:19:6d:
f8:91:9a:5b:0b:65:27:ee:24:72:66:f8:91:02:9d:
dc:5d:36:c5:26:fa:ea:78:2c:54:5d:5b:79:62:e1:
08:e8:65:4a:0b:65:92:08:6f:94:e1:75:66:85:92:
47:6d:95:1b:86:a3:e3:37:f8:6b:ec:44:53:32:4b:
ad:b9:d7:b8:66:c7:c4:1c:9f:6f:8a:2f:1a:4f:5c:
a5:e5:ca:3c:61:63:d9:c0:54:2b:d0:7b:91:9f:35:
bc:c1:91:8e:7d:36:51:bd:a5:f0:19:2f:8e:7a:b8:
26:3f:f2:97:35:61:6f:a9:95:5a:59:61:31:79:6f:
53:e1:fe:2a:27:68:0d:b6:ed:ab:54:f1:1f:ac:af:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0C:A9:A8:A7:A2:16:2A:61:75:03:57:F2:35:DD:00:F8:F9:A4:88
X509v3 Authority Key Identifier:
keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:89:10:0a:16:cd:38:23:8d:8f:9c:ed:8c:ec:a1:a6:8b:df:
cb:cb:bb:c7:1e:fd:dc:ad:4c:6b:e3:31:11:e3:76:c9:4e:e8:
95:e8:6a:f4:cc:24:14:08:63:95:91:8b:68:04:a5:af:c7:a0:
db:30:d8:73:e2:6e:a0:39:48:3a:3a:df:22:ee:90:e7:81:6b:
0b:d8:20:32:b5:7c:cf:8b:23:1b:a3:3e:15:e5:21:91:42:fb:
6f:d9:b5:bf:43:89:2e:06:05:04:10:88:89:75:e6:20:f9:bf:
4c:4f:41:d3:06:05:7d:e8:bd:9b:56:53:03:9c:e6:09:86:bf:
9d:b4:93:fd:f0:04:a0:22:b9:e6:b1:94:3e:24:ed:23:00:f1:
76:0e:54:48:58:7e:f9:d3:f1:76:d9:b3:88:bd:21:cf:0c:31:
79:d4:ac:40:26:c5:7e:c1:f5:a6:c4:51:78:ed:5d:c7:e0:ef:
2f:22:f0:14:da:36:92:01:62:05:b0:f7:91:f1:4d:d0:c8:fc:
ff:14:49:20:ad:00:92:04:86:a2:a2:bf:48:11:47:56:56:7e:
27:fc:80:cc:80:36:a7:91:82:6a:46:db:b4:73:49:d8:f0:0d:
8a:1c:4d:83:26:ce:9f:ff:c4:46:45:f7:a0:86:de:ab:55:a9:
f7:2d:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:45:36 2026 by rpki-client