
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json)
Hash identifier: znxCycl164uohOQgxsBwfoFawA9jKrs/AZ6cROoA1MQ=
Subject key identifier: CB:76:18:FE:FA:23:64:B4:C0:B1:8B:52:63:E0:C1:54:54:19:73:44
Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
Manifest number: 0132
Signing time: Wed 23 Sep 2026 05:34:18 +0000
Manifest this update: Wed 23 Sep 2026 05:34:18 +0000
Manifest next update: Wed 30 Sep 2026 05:34:18 +0000
Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: Dj8/ZLgeAix1qmgtTb3iH3CBuJCwQBnekbSyA+4zdt4=)
2: CCFC18C271E211F1BD2C2BF66AA30FBC.roa (hash: lK7/pu0OCI+h3zcwLpfEuVoFF+otwvw1LpftmhWb8NI=)
3: 917D3A184BED11F0A2F7CC21C4F9AE02.roa (hash: APYBzbciz7l8SWgHU+00bf2NNknyoQ64kXNxQ6wKS1I=)
4: D2E899F86EB511F0A3A63A59C4F9AE02.roa (hash: xEXvfKX+aG3p5VbMMgXsIKibCHC0+2nun/Vfmh+Twl8=)
5: 2C0E544C6EB511F094E66857C4F9AE02.roa (hash: GaPvcpyW3ZEm9wVpzfxkRaCgBptrfJgEkU41liSb2xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Validity
Not Before: Sep 23 05:34:18 2026 GMT
Not After : Sep 30 05:34:18 2026 GMT
Subject: CN=6ab364da-8f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:16:01:f5:66:3d:dd:60:32:8a:51:30:00:
a1:2c:7e:76:82:ba:40:4c:02:02:aa:98:48:6d:4c:
61:98:04:8c:c5:c4:eb:46:fd:3f:41:3a:9f:a2:df:
40:9a:e3:03:26:38:50:e6:a6:a1:e6:3e:29:ba:30:
45:ea:c3:e4:9c:fd:7a:c8:8a:52:4b:7b:da:c1:28:
5d:83:ef:33:b7:8b:97:8c:68:8a:2d:22:7c:fa:06:
2b:f3:c4:a4:b5:f8:5e:9a:ab:e2:e1:fd:c7:33:a2:
32:39:7a:b2:d9:fd:7c:6b:ec:dc:1b:4c:8b:a1:9f:
09:19:d4:04:ee:75:47:5f:64:30:7f:2d:79:aa:2e:
3e:c4:3f:73:ab:22:49:c1:98:01:18:63:a7:c6:d7:
b9:3c:3b:40:f7:a9:3e:bc:9e:01:fe:b3:0c:4c:f9:
6b:bf:da:ac:e9:64:93:d4:6b:70:f2:4a:f5:e9:83:
de:8b:08:25:bd:1f:9e:db:e7:84:46:96:09:1e:4f:
5f:a0:37:e9:42:a1:c3:1c:5b:71:e5:03:50:61:1c:
32:7f:c7:e7:71:57:29:d0:d8:84:fb:ac:c8:ed:c6:
93:9a:5b:25:49:85:f8:64:d1:46:e1:4c:2d:f1:fb:
91:90:02:94:1a:6a:b6:e6:78:f8:71:1b:83:80:b4:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:76:18:FE:FA:23:64:B4:C0:B1:8B:52:63:E0:C1:54:54:19:73:44
X509v3 Authority Key Identifier:
keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:fa:8f:20:eb:6a:bb:6b:b7:45:12:fb:d5:54:e9:2c:2e:8f:
e0:e9:7b:a8:2f:d7:f9:eb:3b:4f:a4:6a:88:89:76:c2:11:da:
6e:41:9e:a0:98:82:7b:98:f3:e1:90:38:d2:3b:cc:fc:ce:12:
04:4c:b6:9e:dd:a7:ea:f0:09:2b:e3:2d:14:ea:79:f1:ed:34:
6c:da:bb:b9:29:a4:80:54:39:1f:67:df:d5:3c:ef:9b:2c:a9:
82:35:40:4a:49:34:5f:93:a1:b9:96:2c:2e:7d:29:bd:e1:7c:
ac:9b:8b:97:62:d7:b3:c7:3d:f7:eb:ff:a7:0f:c2:1e:25:e1:
2c:47:af:b1:42:66:42:b6:4c:17:66:eb:13:37:69:c2:76:c4:
e3:05:52:77:71:6b:c8:08:50:ed:1e:ee:70:e4:b5:f4:6e:1c:
ec:f0:b1:60:b2:31:b9:f1:82:7b:f3:2c:c2:68:a1:9a:21:60:
d4:a5:13:4a:2e:7e:c3:1a:1e:24:af:1a:1b:35:ae:7a:e9:cf:
2d:17:cb:8f:ef:4d:e4:26:63:6b:2c:d0:bb:e4:df:fe:9e:e2:
fe:d2:c3:97:32:48:05:09:41:9b:4c:5b:56:f0:1b:85:4b:93:
cb:39:fc:92:1f:63:96:55:fd:8d:f5:65:d0:0b:1a:e9:01:cd:
b2:25:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:06:03 2026 by rpki-client