
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier: O0grWv1k/Mm+sFr/ZSk0nWleSpftr+mSnegjApHJy0s=
Subject key identifier: 11:CE:BA:87:67:38:22:5F:94:DB:14:5D:7F:9E:C0:47:D8:14:4C:7F
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial: 26B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number: 2693
Signing time: Sun 04 Oct 2026 15:42:13 +0000
Manifest this update: Sun 04 Oct 2026 15:42:12 +0000
Manifest next update: Sun 11 Oct 2026 15:42:12 +0000
Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: a82iifmcEtMng5TSarTMUvaoZ85x+WIxeTpvSA/3rNE=)
2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: 8wXuS4+JORHsa5NlR+0rKW7paq6mS+3bQqZ2PWslzSo=)
3: _zFIF_w1IpGh0U1VEgKBMOKFSnY.asa (hash: qsfBtk2vYjShZQg62qEa1GR7o9AshRc7T3aD6G1Egno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9905 (0x26b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Validity
Not Before: Oct 4 15:42:12 2026 GMT
Not After : Oct 11 15:42:12 2026 GMT
Subject: CN=6ac273d5-e8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:01:35:96:6f:60:a7:71:71:3a:e6:f7:a9:
bd:c3:9d:f3:3c:35:4c:6b:f1:bb:40:e0:40:00:47:
d6:58:e4:4e:b1:7d:c4:75:55:db:b5:06:fa:b3:ae:
56:ee:4a:a7:cd:c3:5f:5e:a4:d3:79:3d:41:bb:5b:
8e:97:df:d0:5e:e4:5c:3d:af:f7:3b:73:a1:93:20:
04:b5:9d:05:88:d9:99:fd:32:d6:45:27:47:86:32:
a7:d2:d9:fa:73:7e:12:6b:42:72:94:9d:6c:59:30:
56:d1:c2:c0:29:04:d3:68:8e:31:55:48:6e:8c:9c:
62:a6:13:6b:b4:8c:71:da:df:c1:d6:0c:b5:bd:fd:
f3:71:24:18:91:e6:b6:d0:d0:79:e8:17:a3:ab:c4:
45:9f:8a:e0:08:cb:e9:fe:80:94:a5:d0:b6:ef:4b:
1b:86:fe:0d:d6:c7:25:6d:04:f1:5a:c1:a8:8a:09:
58:21:7b:b5:2a:7f:2e:7d:17:47:99:5f:01:0c:6f:
e5:1c:aa:dd:f8:a0:3b:95:a2:fd:a9:47:af:e9:35:
6a:fa:ac:ae:33:41:38:70:d0:4a:8d:56:20:bc:bd:
72:f0:c1:29:0f:52:ed:f5:b2:5a:1d:07:0f:4d:c3:
5a:99:db:40:58:a9:2f:4a:22:c9:e5:69:a7:44:eb:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:BA:87:67:38:22:5F:94:DB:14:5D:7F:9E:C0:47:D8:14:4C:7F
X509v3 Authority Key Identifier:
keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ef:b0:41:b1:fc:b9:92:4d:1b:4c:09:49:81:82:15:59:85:
9a:74:b5:c8:33:26:3a:06:93:b4:52:6c:b3:91:57:14:de:af:
f4:84:c9:96:ec:cb:f6:9f:87:57:8f:69:1c:f9:41:f7:bf:05:
ef:7d:d2:12:99:5c:f3:3b:b1:96:03:36:84:36:8c:89:5b:85:
af:3d:69:03:3b:ef:7c:83:9a:5f:35:bb:a8:3c:74:89:a7:fc:
81:93:fc:5a:1d:d8:76:56:71:48:28:c4:04:8c:8a:c6:6c:5a:
ca:73:08:94:4a:10:be:ea:94:c2:02:fa:cc:8f:40:23:80:fd:
70:6c:ca:11:da:d4:59:ac:4b:11:60:09:83:14:ed:f8:42:ca:
58:3d:9a:1f:e9:54:32:e8:6a:a8:9e:ad:eb:4c:7f:15:71:08:
d1:b9:ae:66:45:c3:0a:90:5c:3c:1c:19:42:49:6d:e1:cb:03:
59:c0:05:81:22:0e:62:cc:f8:48:20:ae:a3:e3:a3:eb:03:49:
fc:1c:da:c6:80:36:f2:82:da:67:c8:c5:66:b9:eb:be:8f:20:
12:af:33:5f:0b:bb:1e:52:d7:09:de:62:32:8f:49:67:26:ea:
38:27:08:69:3f:79:0d:ec:1d:eb:d3:a0:da:19:a0:ee:68:10:
64:fa:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:32:19 2026 by rpki-client