
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
File: X1zijATRbpUODrzVlVVCSD05VtA.mft (raw, json)
Hash identifier: buB7ZM1hgNtDGtle824cCMm98F78B6zaEabVHbTuho4=
Subject key identifier: D0:F0:BA:66:B4:42:DB:D4:B8:A2:A5:D3:73:6C:64:E7:2D:CC:2E:26
Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
Manifest number: 01CF
Signing time: Wed 25 Mar 2026 03:00:37 +0000
Manifest this update: Wed 25 Mar 2026 03:00:36 +0000
Manifest next update: Wed 01 Apr 2026 03:00:36 +0000
Files and hashes: 1: X1zijATRbpUODrzVlVVCSD05VtA.crl (hash: +ep2OAOrX1xu+a7Ploa9QAS14CbIXKpYHAbcUowr/N0=)
2: 85BF2BE4710111F093C54468C4F9AE02.roa (hash: j9SKLInNcpVR2MVZ8Thc62Fi6/lQmCSnVrmSmxlo0RM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0D86, serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Validity
Not Before: Mar 25 03:00:36 2026 GMT
Not After : Apr 1 03:00:36 2026 GMT
Subject: CN=69c34fd4-41b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:05:b9:45:be:db:2d:9d:7c:23:1b:a3:c4:
d3:1f:79:cf:d3:cf:9e:7e:c2:7f:63:c6:40:23:cc:
dd:db:64:99:15:0a:a1:78:e8:73:de:f0:31:dd:b1:
5b:cc:2f:a0:3c:7a:ab:aa:3a:9f:6c:09:38:01:af:
87:bb:b8:e3:38:8d:48:d4:b6:11:7b:ec:f2:31:bf:
d7:da:de:59:28:89:ff:78:46:89:f3:4d:b1:d3:ef:
bf:1c:de:bc:53:1b:e0:20:74:eb:58:38:c5:3c:c5:
de:a8:20:c8:65:f9:97:64:0b:f6:f9:93:0b:16:5a:
0a:eb:32:70:d0:d4:8a:4d:96:02:24:ac:3b:45:07:
0a:8d:33:bd:93:65:c0:02:5d:3c:15:12:ad:c7:a3:
70:ec:e1:e9:7f:28:f0:78:ee:97:12:25:36:f0:1b:
3e:29:b5:d6:52:c7:67:a4:f4:3f:d6:cc:85:ec:36:
6a:a8:c4:b7:c4:80:d7:43:eb:ef:d7:01:c7:b6:4c:
e9:ff:aa:1e:74:17:da:ee:5e:ab:5b:e2:e1:9b:18:
d5:9c:6a:14:79:01:e1:3e:2f:90:d5:08:26:1b:9b:
ec:1d:44:95:72:83:42:e2:16:98:9a:fc:fc:95:8a:
7a:e3:b0:7e:fb:f1:e0:8e:8d:db:3c:22:8a:4a:1f:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:BA:66:B4:42:DB:D4:B8:A2:A5:D3:73:6C:64:E7:2D:CC:2E:26
X509v3 Authority Key Identifier:
keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:46:ce:e8:a8:ec:94:7f:24:09:a8:46:fc:68:45:72:86:3e:
8f:d1:71:fd:a6:7f:3b:ba:1f:c5:2d:09:62:64:a2:b8:51:4c:
6e:34:69:e9:50:0d:cf:7b:8f:55:12:b4:2b:90:03:93:2e:74:
c8:9d:28:d7:4d:82:15:70:53:78:96:5b:10:2b:06:cc:4e:5a:
1d:09:a5:db:25:95:2c:83:10:43:26:c4:0d:b8:41:f6:f3:54:
45:a4:4a:de:65:86:9c:d8:ba:38:90:12:1d:cb:c4:31:24:ca:
b2:1c:17:42:6c:cc:ff:f3:c8:7e:9a:39:14:4f:c0:84:71:8e:
cd:bf:0d:9b:0e:cd:37:cc:c1:ba:51:71:27:93:2c:59:15:02:
26:cc:07:88:9b:f3:58:93:50:7f:bc:7b:41:09:08:54:26:ad:
18:04:3c:5c:b4:aa:a9:a0:b6:b1:aa:29:ef:9d:a9:64:65:55:
ec:e8:4c:92:74:2f:02:8f:4d:b9:30:fc:cd:bc:a2:05:0e:e4:
b4:70:fa:0a:42:06:4a:39:62:14:c6:1a:85:e2:c5:39:6b:a8:
49:15:0b:de:38:4b:81:e0:b9:7c:60:a0:85:4d:12:89:12:ad:
31:fa:28:16:ca:3a:a4:cf:db:48:29:57:b8:f3:5f:51:c4:fe:
e5:bf:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:26:18 2026 by rpki-client