
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json)
Hash identifier: Aij2evorr299ybxawjJWVvq+JAHOAjJI6ppXJT1gLu8=
Subject key identifier: B5:A1:F0:8C:72:41:9F:BA:92:10:0A:AC:72:BC:08:43:2B:3E:68:A5
Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Certificate serial: 07A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
Manifest number: 079A
Signing time: Sat 10 Oct 2026 21:37:22 +0000
Manifest this update: Sat 10 Oct 2026 21:37:21 +0000
Manifest next update: Sat 17 Oct 2026 21:37:21 +0000
Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: D10+jgXWb0Gg5PAKG0Zztt5b+XLT+YJWSXMb9RGdEj0=)
2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: PPR6I7z3DbbmL+I131mljAThTVcJvZDWVc9EyKNvaNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Validity
Not Before: Oct 10 21:37:21 2026 GMT
Not After : Oct 17 21:37:21 2026 GMT
Subject: CN=6acab012-e76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:ee:96:fb:87:45:fe:28:de:c0:a9:32:07:
f8:0a:c9:00:37:88:09:ab:e4:a4:b9:9d:c9:db:e9:
06:d0:ae:e4:a7:28:79:0b:48:82:98:f2:8b:4e:24:
7a:63:ed:0b:b3:3f:a9:4b:3f:94:20:72:de:53:8f:
14:47:4a:d6:16:c1:d2:88:38:b0:4e:dd:6a:54:88:
e6:cf:5a:c3:2b:07:0b:6d:d8:73:d1:3a:06:35:9a:
1a:23:13:c1:2b:d4:4b:74:6e:40:32:37:de:07:b6:
cc:40:cb:84:d9:fd:db:bc:f4:db:37:84:76:59:a7:
12:b2:d1:68:a2:97:eb:3a:a1:24:4b:24:5e:58:c3:
69:b4:78:1a:28:a9:29:75:79:65:6e:59:89:23:e5:
a7:06:5d:2c:bd:7a:69:e1:6b:4b:c8:89:3a:45:8f:
57:9c:c7:88:61:90:2d:c2:4e:bc:95:be:b6:97:0a:
85:29:61:34:3d:49:3b:33:e7:ca:3f:10:49:7b:33:
61:60:35:25:f7:41:93:9b:23:00:af:31:35:94:3d:
a4:2f:28:d9:cc:1b:37:5d:01:dc:ca:d6:df:d4:d4:
90:2a:65:3b:38:15:13:c9:75:d0:00:e0:5b:55:33:
50:fc:be:f5:f3:d1:66:c1:94:68:1f:b8:52:18:31:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A1:F0:8C:72:41:9F:BA:92:10:0A:AC:72:BC:08:43:2B:3E:68:A5
X509v3 Authority Key Identifier:
keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:f3:5f:45:c4:8a:59:79:8c:6e:13:17:2b:05:7e:4e:d0:ef:
74:82:53:0f:90:50:4d:dd:e0:45:37:e4:3f:c1:b5:c7:11:ad:
38:04:ed:64:ce:a1:df:23:a1:76:01:25:1b:ce:ef:16:cb:14:
d3:10:97:f6:b9:c1:26:61:da:97:d9:7e:60:64:2b:c6:8f:d8:
57:94:9d:cf:b3:7b:e8:bf:d3:9b:a0:12:41:a7:d8:e8:a2:10:
98:33:fe:1c:83:db:fa:2a:3d:47:19:a1:e4:24:f7:03:66:71:
0f:25:ec:89:8b:d9:9f:a0:cd:33:d1:4a:71:38:dd:8c:7f:34:
d8:2b:60:98:ec:cb:49:73:a1:25:01:65:8f:30:1f:38:53:c6:
d2:1d:73:80:ad:cc:9c:e7:e3:d8:17:be:a3:6d:d2:70:84:8f:
3b:0f:a2:fe:b0:52:58:7f:32:72:8d:56:97:2d:1b:7c:30:ca:
62:b1:2f:45:4c:47:9a:62:42:43:cc:a5:ae:ee:82:65:7c:ee:
61:fe:d3:a3:f0:5e:b3:3a:38:96:70:ef:44:34:d2:e7:7b:88:
39:47:30:6f:af:8d:e9:76:29:43:d0:00:d0:5c:65:f3:e0:d2:
c5:1e:c0:c9:64:64:0f:64:50:b0:64:25:6d:05:96:b7:78:b3:
ee:d4:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:59:57 2026 by rpki-client