
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
File: XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json)
Hash identifier: 34f+rBNzQhZVXtTGCSpbTscpuRirHurcqLwyRQqrxdk=
Subject key identifier: 3A:A2:2D:86:06:8D:36:7C:5F:2D:1D:DD:79:CA:2B:DB:44:02:B6:EB
Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
Certificate issuer: /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Certificate serial: 0602
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
Manifest number: 0602
Signing time: Tue 22 Sep 2026 22:35:51 +0000
Manifest this update: Tue 22 Sep 2026 22:35:51 +0000
Manifest next update: Tue 29 Sep 2026 22:35:51 +0000
Files and hashes: 1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: XqPfB4do3iQ0XfFD6TSa/KDeyVPYzpdMEED96N0s4KM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1538 (0x602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD89, serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Validity
Not Before: Sep 22 22:35:51 2026 GMT
Not After : Sep 29 22:35:51 2026 GMT
Subject: CN=6ab302c7-4639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:82:bd:73:0b:6a:bf:69:03:89:90:a1:8f:
64:23:31:13:33:4e:30:a7:57:89:20:50:06:6a:40:
19:59:d1:36:ed:ab:3e:fc:02:b4:f2:07:e7:77:22:
25:ef:17:6a:4d:4a:51:22:21:74:4a:fd:9e:cb:c5:
da:95:6b:86:b8:7a:7a:92:86:ab:6c:ea:be:35:1f:
a0:1a:5b:eb:38:07:45:a0:4f:1a:6b:3c:c3:65:32:
e5:e3:e9:c9:75:57:c6:0c:0d:b0:39:0e:77:20:08:
64:24:8f:47:9b:45:c2:16:6d:ea:1f:04:17:05:8e:
ef:df:ef:03:7a:66:4b:d0:25:ca:fc:67:1a:69:68:
5d:30:f1:bc:4f:4b:28:38:e2:1f:6e:1d:3d:c5:2c:
78:81:fb:cf:17:1a:35:09:10:f9:84:47:69:3a:7f:
f3:ce:7c:af:c2:3c:9f:77:59:b0:91:a4:b6:e2:de:
7b:92:6d:c2:c6:38:44:bc:58:45:4b:45:50:6d:3b:
9e:41:92:68:04:a5:d0:4c:88:d8:87:8d:2c:6f:0a:
e0:25:36:f0:1b:ba:b1:86:ad:e1:15:cc:26:12:a3:
c2:e4:d9:87:11:80:b3:d8:53:d4:27:63:a8:71:14:
17:fa:6f:17:e7:9d:e8:92:d5:e1:12:92:96:1d:0a:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A2:2D:86:06:8D:36:7C:5F:2D:1D:DD:79:CA:2B:DB:44:02:B6:EB
X509v3 Authority Key Identifier:
keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:54:76:fb:8e:8a:27:f1:7b:f2:3e:77:53:df:aa:4a:b8:fa:
d1:1c:a9:ad:d8:9e:cb:47:c5:38:76:a9:e0:31:ff:9c:6d:87:
bc:8c:34:4a:a4:49:4c:ac:44:19:33:a2:12:e9:9d:fa:12:eb:
3c:91:02:74:97:5c:ce:fe:f1:d5:29:9f:2b:5c:ec:57:c3:1d:
86:09:bf:5c:21:52:48:aa:40:03:c6:f3:71:80:4f:2c:77:31:
93:50:b9:3d:ef:3d:ce:7a:7d:d7:1c:17:8e:89:09:9e:3d:ed:
61:7b:53:72:1b:b8:dc:50:3f:bb:d5:31:18:3e:68:33:df:b9:
f6:ad:e0:c4:3c:0c:18:b2:d2:85:03:d7:34:cd:4c:67:42:26:
ce:3c:4d:66:e5:07:6a:3e:35:83:df:eb:78:b6:61:50:b7:17:
8f:6c:82:f1:d8:a2:b9:50:e4:3f:b7:65:e8:81:d4:09:62:6f:
84:a4:c7:b7:a9:bf:c4:6a:99:2c:08:0b:91:a4:8e:70:e0:c3:
85:c6:d3:dd:b4:7f:a0:0c:2e:9b:4d:bd:77:28:05:4c:7e:6b:
8b:d7:2a:d7:a5:26:cb:a2:8e:c4:0c:94:97:99:1f:62:7e:d5:
00:f0:74:d0:29:c3:68:58:97:4d:f6:ca:f9:49:60:50:fe:85:
90:a8:fa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:42:34 2026 by rpki-client