
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json)
Hash identifier: ckRmrN9qRExdWfkUkle4H4Qoro2YYy7hdo8NUHjm+2I=
Subject key identifier: B2:2B:1C:64:E8:D0:E4:16:C0:10:56:9E:2B:66:5B:05:98:8E:FD:62
Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Certificate serial: 261E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
Manifest number: 260A
Signing time: Tue 18 Aug 2026 15:43:37 +0000
Manifest this update: Tue 18 Aug 2026 15:43:36 +0000
Manifest next update: Tue 25 Aug 2026 15:43:36 +0000
Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: FRDoQgkB/Ab4BDv99p0IkU76iary4aQ5cTws/NSjQXI=)
2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: H9FBin+3iFpCvFQYKLKBdVVFwBLL9x/T3GklTxzrl8g=)
3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: 2QSZtWOqDrHks96zM5GIiao6cA8Lcs0F/CmHj2Ncbeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9758 (0x261e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Validity
Not Before: Aug 18 15:43:36 2026 GMT
Not After : Aug 25 15:43:36 2026 GMT
Subject: CN=6a847da9-984b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:c3:f0:cd:19:bc:b0:a1:60:f3:7e:15:cb:
df:31:b7:c4:c6:06:08:a3:40:1b:8d:e5:c2:71:40:
0a:ad:12:0c:ce:17:be:6d:de:ab:44:ad:1d:9b:79:
7d:c5:51:38:33:a9:e0:c4:53:6e:1e:c1:48:ca:c1:
1a:a9:3f:9a:61:0d:63:22:4d:8b:85:b7:a2:a6:2b:
b7:26:32:41:2e:7c:7b:3a:f2:c0:99:cc:36:8d:18:
24:fc:2d:11:ae:b0:4b:c6:04:9c:f9:39:0b:19:d5:
be:d7:0f:ed:41:b5:ed:51:7a:de:b8:ab:7b:76:cb:
68:46:ae:37:11:88:53:7b:6d:e0:6b:d8:07:05:d4:
ea:6b:31:3e:da:bd:cf:a9:38:9d:ef:01:cb:b0:b1:
c6:72:04:aa:7d:da:a7:af:f0:63:ba:7b:ad:1d:3c:
9f:dc:3b:94:eb:6e:59:2c:d0:d9:e6:a2:f5:e1:2a:
9e:f1:96:eb:d9:11:61:f6:b5:44:7b:b8:de:9d:2e:
f0:87:01:a6:b6:1a:d6:80:ac:02:93:7d:de:81:54:
0e:66:f0:ec:50:c4:1d:55:5a:3c:ad:6c:4a:a6:63:
f1:e6:d4:d3:94:98:da:6f:a1:de:22:70:13:a0:c6:
dd:fa:fa:5d:fa:e7:85:c1:44:2b:09:09:3f:01:b4:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2B:1C:64:E8:D0:E4:16:C0:10:56:9E:2B:66:5B:05:98:8E:FD:62
X509v3 Authority Key Identifier:
keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:3a:9f:f7:88:dc:74:91:b5:5a:ef:33:b7:57:9b:c1:10:21:
3b:8c:fb:1e:f6:c2:f3:53:6c:c6:43:90:b6:aa:c9:f6:c1:dc:
32:41:eb:b2:1b:d5:5d:90:33:e2:0f:0b:4a:4d:58:31:a1:ab:
55:19:9b:d0:05:56:86:c6:be:b8:9a:0c:f9:b6:52:09:90:77:
88:61:b9:b8:c1:8c:e1:e6:62:21:dd:ca:61:0e:a3:61:5d:c7:
f2:80:36:cb:c4:23:69:fe:08:b9:5a:58:7c:d9:40:5a:c9:24:
4d:94:71:38:cc:2f:25:28:b0:b9:65:f8:05:3a:6d:b8:21:87:
e7:02:c3:c5:36:fd:b4:5c:72:e4:f2:9a:b8:ff:b3:9b:0a:0f:
65:7f:b7:63:d4:ae:e5:90:35:8a:17:8b:86:d8:da:49:a8:8e:
a1:4d:74:e9:5e:a0:94:58:be:a0:fc:d1:eb:25:9b:20:47:5d:
d0:f1:74:cd:25:f7:29:8f:96:7d:db:e1:87:ae:5f:fb:f8:10:
fe:b3:47:51:9b:1a:75:55:ae:4a:69:44:67:43:56:3e:7b:2a:
ee:09:d0:50:e4:14:5e:96:09:43:7b:3d:84:52:53:02:06:84:
04:e5:78:fa:d4:2a:4c:a4:13:9a:74:1d:9e:e2:63:c6:30:69:
c9:86:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:52:37 2026 by rpki-client