
$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier: 5dugYJbVuxs6LBfTDhDKQBxIEB/hSWT54i50UsieL5s=
Subject key identifier: 04:1A:4C:48:A6:56:75:8E:98:79:7F:24:D1:3E:96:F0:71:D8:78:B4
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial: 083E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number: 082D
Signing time: Fri 06 Mar 2026 20:39:50 +0000
Manifest this update: Fri 06 Mar 2026 20:39:49 +0000
Manifest next update: Fri 13 Mar 2026 20:39:49 +0000
Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: lL8CSld9qU+HVRIaPqGO7bRWmgpiXilNmWCSj2no+Ec=)
2: 21EE9510083211EB81509633C4F9AE02.roa (hash: iKMQHOBFrgyHmy/Ps4jIsLKGqzItSxXRkBRTt6rveQ4=)
3: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: 4D8RNBVxZ4n/YFoAFxcO6RiKNijl1P5296cdlR8pmnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 20:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Validity
Not Before: Mar 6 20:39:49 2026 GMT
Not After : Mar 13 20:39:49 2026 GMT
Subject: CN=69ab3b96-2754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:a9:3c:3e:3c:0e:e7:ea:e0:86:81:68:46:
a3:5c:17:d3:3a:cc:42:2f:e5:27:69:13:5f:fb:66:
87:d1:ea:ec:53:aa:cb:32:d6:34:dd:31:e4:d0:1d:
36:7b:9b:ed:f2:5a:3e:97:5c:88:ab:ac:a6:3e:b7:
bc:02:2b:a2:26:80:e0:1a:07:c8:cf:ec:86:8f:5d:
f2:a6:fa:b5:77:e6:3e:36:ad:48:0b:9c:37:a0:87:
a9:dd:7f:0f:42:7e:9b:f4:0e:a7:7b:67:2b:e7:ea:
90:a3:d7:6e:80:a9:07:48:d6:63:f6:f6:c5:d4:52:
23:88:84:f9:3b:3b:b9:f7:4a:83:16:fe:68:f6:c1:
06:4d:a4:c2:cd:07:38:2c:87:71:5e:a8:b3:22:f4:
aa:27:7b:c4:32:e4:81:7c:eb:f2:87:90:a6:85:e1:
7e:bc:10:3d:07:5f:b8:ee:bb:1a:ed:4e:a4:02:e8:
aa:67:94:9b:4b:da:1f:c0:b3:44:36:f8:5d:9d:68:
68:4e:de:fa:8d:14:46:e4:7b:54:01:0f:71:a5:62:
5a:f2:d3:1e:f8:7e:6c:2c:00:0d:67:85:8e:20:c8:
73:50:9f:d9:a5:61:e6:6e:8a:aa:4c:4a:85:08:3d:
10:75:26:c4:78:43:9b:78:15:dd:90:26:10:6c:5b:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:4C:48:A6:56:75:8E:98:79:7F:24:D1:3E:96:F0:71:D8:78:B4
X509v3 Authority Key Identifier:
keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:cd:d7:e4:3c:a7:6f:d3:a4:86:f6:f3:ea:7c:93:f6:4b:f4:
19:c9:1e:b9:2e:28:bc:92:28:e6:12:7e:be:6a:29:d6:37:54:
67:fb:d8:29:17:f4:13:45:ad:ea:dc:41:6a:9b:e8:9f:99:f4:
a8:a0:a2:22:5a:ea:46:d5:c7:bf:36:c2:33:47:06:67:20:0d:
02:51:bb:0b:f2:1e:ba:8f:6b:f7:65:df:06:33:7e:45:fa:bd:
04:42:ab:ed:5b:33:e6:2d:05:aa:25:02:1c:3c:71:e5:4c:55:
01:7e:a8:59:7a:ff:d0:8c:a8:a4:de:7c:bb:d9:e9:d0:d8:83:
67:e2:cb:b0:46:f6:71:e4:34:1b:99:03:53:39:bf:bd:ae:4b:
fc:af:70:0d:8b:52:ef:f4:b5:c3:58:c7:0e:96:37:aa:8c:ac:
78:7c:f5:fd:96:5f:7b:b5:fc:4d:7c:e6:fd:a5:db:7d:59:5c:
7b:c1:b2:d4:1b:69:bf:80:a5:74:95:ea:ac:0b:9c:e7:f9:7f:
35:c2:d1:f9:64:33:63:e0:3c:2c:99:f5:af:0f:94:4e:9f:03:
25:c6:1e:a3:fa:1a:2f:c8:cb:9e:64:59:51:42:71:f9:d6:91:
e6:ca:cc:84:ad:e8:92:9c:94:bf:03:ad:91:bc:16:fe:a5:09:
8f:f4:fe:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:52:41 2026 by rpki-client