
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
File: X1zijATRbpUODrzVlVVCSD05VtA.mft (raw, json)
Hash identifier: zK5xl9pDiY2m5zFN638b75LRvJUlz4VLfEV6RfdRFqM=
Subject key identifier: B7:B0:BF:87:BE:CC:F9:5E:A0:88:27:DD:A7:0E:1E:62:43:41:16:4E
Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
Manifest number: 022D
Signing time: Sun 27 Sep 2026 03:05:26 +0000
Manifest this update: Sun 27 Sep 2026 03:05:25 +0000
Manifest next update: Sun 04 Oct 2026 03:05:25 +0000
Files and hashes: 1: X1zijATRbpUODrzVlVVCSD05VtA.crl (hash: xHz+F1FUtQz3QZJf6VEtnews0m/TD/IyvIIp24LfZXA=)
2: 85BF2BE4710111F093C54468C4F9AE02.roa (hash: j9SKLInNcpVR2MVZ8Thc62Fi6/lQmCSnVrmSmxlo0RM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0D86, serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Validity
Not Before: Sep 27 03:05:25 2026 GMT
Not After : Oct 4 03:05:25 2026 GMT
Subject: CN=6ab887f6-7c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:c5:6d:58:f9:f3:3b:e2:76:7f:da:ad:d0:
cb:39:31:3e:fb:d8:26:55:59:5b:aa:77:ad:a3:b4:
71:c4:56:dd:db:2b:34:1a:52:1f:d0:1d:e9:ba:a3:
f3:da:c2:fb:c0:d8:ec:b4:80:c6:00:56:38:fb:47:
0e:a0:ae:c2:1b:0c:7e:82:a2:ca:c9:30:35:bb:9e:
c1:4c:c4:43:6c:f6:87:88:e7:f6:8a:0a:ef:d3:b7:
39:68:df:1c:16:6e:90:ee:69:4a:9e:f2:16:8f:18:
2d:5e:b4:e4:a1:82:ee:ca:51:65:d5:8f:9f:69:54:
12:4e:23:58:cf:1d:16:55:c8:02:82:49:e8:0f:58:
ca:a6:48:cf:87:b2:27:37:40:f8:fd:51:84:bc:4c:
0e:81:b5:c2:b8:c6:f1:2a:81:0e:19:2c:bd:19:5f:
c9:b3:08:4d:2b:6d:35:b5:c0:62:05:85:f3:1b:cc:
7e:23:d3:c0:bf:9e:68:a9:da:ca:48:87:b7:c6:98:
5d:81:ca:c9:da:60:d3:86:5e:33:65:92:17:f2:08:
ee:2e:6a:74:9e:24:10:3b:b0:fc:aa:a2:bd:e9:c4:
5d:c2:03:9c:77:c7:b1:b7:71:50:e5:b0:e5:c5:e0:
72:01:f1:0c:97:8c:34:84:ce:aa:62:65:b7:d1:cf:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:BF:87:BE:CC:F9:5E:A0:88:27:DD:A7:0E:1E:62:43:41:16:4E
X509v3 Authority Key Identifier:
keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:5d:19:75:81:6b:5a:36:82:59:8f:ce:1e:82:2c:29:c8:78:
2a:9b:5e:63:2d:7a:e4:f2:4f:12:b1:7a:ff:a1:73:21:56:6e:
c1:22:35:6d:83:5a:1a:5c:04:f1:79:2b:ef:c7:10:04:67:18:
d7:74:0a:bd:42:ce:33:b2:d4:9e:ee:8c:28:ca:d7:58:ce:82:
d8:5e:18:4d:75:ea:2c:b3:b0:b1:c5:84:55:43:78:29:5e:f0:
df:63:a5:45:c0:fd:26:0c:b1:1a:70:76:9b:83:83:f7:2b:d6:
12:74:65:0e:c5:67:12:7d:8f:18:2d:43:9c:52:3d:80:42:90:
07:7e:28:59:9e:ff:fb:db:1a:4c:f1:f1:c0:65:9e:98:3c:5b:
d1:31:f1:34:fe:aa:d6:f8:f8:7d:dd:01:1f:19:8f:8f:1b:b6:
ca:b0:5e:cd:f0:bf:ae:8e:66:a5:c6:94:ac:98:c4:87:9c:d5:
b4:27:0d:49:b9:53:b1:c3:72:f5:02:f6:1b:21:ca:1d:97:5c:
50:df:9e:67:8a:c9:d2:97:cf:be:8d:31:ce:34:a9:e0:a9:d4:
1e:f4:41:92:0a:83:87:7f:a5:ef:b8:66:86:b4:74:12:27:1e:
24:30:53:18:ca:06:48:cc:7d:0f:f9:d0:24:fb:54:ba:2a:0f:
e7:3c:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:39:17 2026 by rpki-client