
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
File: xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json)
Hash identifier: cdNBCuab4yIbTilUhmjJ12Ee0q0HRE71IvdozT+6HCQ=
Subject key identifier: A0:58:73:B8:BA:F0:B4:56:78:86:CE:C9:2A:CE:3E:71:EE:25:76:AA
Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Certificate serial: 0396
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
Manifest number: 0387
Signing time: Fri 09 Oct 2026 00:57:54 +0000
Manifest this update: Fri 09 Oct 2026 00:57:54 +0000
Manifest next update: Fri 16 Oct 2026 00:57:54 +0000
Files and hashes: 1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: 7PRTAt8WM2ll5GS8ImzA2RKcu9uf5zdGlNJwCVT+VZc=)
2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: irQw+aFcmVSPBIfolj9woj/L2mmaCgcdWKwM8y5LFZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 00:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918 (0x396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Validity
Not Before: Oct 9 00:57:54 2026 GMT
Not After : Oct 16 00:57:54 2026 GMT
Subject: CN=6ac83c12-b826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:02:cc:71:67:a9:ce:52:1d:ad:d3:16:b5:
22:66:6a:d7:30:dc:50:e6:19:e8:5c:44:be:1f:ad:
28:25:96:15:a3:1f:7f:59:e2:f3:19:a8:57:a0:67:
93:ef:f2:10:70:13:b6:72:b5:75:6b:24:51:2a:71:
86:89:29:3d:50:e0:72:f0:82:af:33:aa:d5:7b:e2:
3d:0a:53:d1:01:53:28:bc:37:c8:69:8d:e5:fb:10:
48:ae:96:66:66:f4:0c:1e:ef:30:79:42:61:26:5b:
38:ee:ef:1f:3e:eb:44:a5:49:4c:d0:fd:48:9f:72:
3f:7c:01:60:86:d7:59:d9:6a:3b:1b:f1:3f:36:66:
ec:a2:d5:e8:49:13:1b:9e:3f:c0:ec:8e:52:aa:74:
16:cc:9b:21:ed:b2:c0:d8:6a:37:81:cc:d1:d0:92:
1b:98:b0:4d:d3:08:f9:6e:4e:fa:10:8d:72:dd:e1:
89:55:f7:4c:f0:ce:60:94:77:81:b1:6c:51:ca:39:
ca:cf:10:f9:0b:95:a0:9e:03:90:50:bc:42:2d:e7:
70:10:83:78:0b:a4:7a:9a:cd:a2:d4:92:01:7e:02:
5c:3b:43:0d:d4:7d:c8:10:24:b1:72:7c:a1:43:b0:
fe:ef:a7:bf:77:74:da:4c:43:1d:75:9c:a9:04:ec:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:58:73:B8:BA:F0:B4:56:78:86:CE:C9:2A:CE:3E:71:EE:25:76:AA
X509v3 Authority Key Identifier:
keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:59:ea:c2:cf:25:9f:88:45:39:a9:c0:f9:b6:eb:31:6d:
18:eb:85:e2:36:62:04:53:e9:ca:b0:9e:a6:e7:7e:05:4e:42:
31:bb:88:a2:17:ed:96:78:53:c0:3b:c7:78:80:69:ef:d6:82:
90:c8:ac:1d:9a:54:95:c8:b2:af:55:43:04:4e:66:f0:96:ea:
77:56:6b:ee:90:f8:b0:41:b2:29:cd:30:07:a1:6b:72:a6:37:
d7:f5:74:cf:81:55:5b:58:25:40:ac:63:23:67:66:ba:2d:1c:
06:64:b9:dc:1a:fc:ff:2e:9a:85:d6:60:07:39:87:3e:38:c8:
0d:c4:c1:0d:bb:30:a8:dd:17:13:ff:e4:39:a5:22:65:47:1a:
37:16:7a:8c:df:77:d2:11:90:cc:e4:5a:ea:fc:09:7c:49:e1:
65:2f:69:88:5c:72:60:61:0b:46:42:e2:6b:1c:01:7b:6f:ce:
91:6e:68:8a:c9:2c:4f:b9:f5:72:6d:06:f3:af:39:5b:b4:29:
68:c8:af:e3:22:50:e4:0d:19:da:f5:09:7b:cf:ab:3d:1b:f4:
e4:cd:ec:e1:b6:92:d8:a4:6e:8a:21:32:d2:ee:ea:ad:a4:c9:
62:38:50:e1:a3:8b:ef:c1:3d:4d:c9:52:f1:8a:77:1b:74:3c:
5d:86:95:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:16:29 2026 by rpki-client