
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json)
Hash identifier: AJyHn9HqJ4LxyfjanY8IaQUx1uSbKQLgT8lLN5QF/zg=
Subject key identifier: EF:6D:2D:1D:2D:39:20:B1:32:A5:11:D8:FC:F8:49:FC:AB:FF:1B:5F
Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Certificate serial: 028B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
Manifest number: 0284
Signing time: Sun 25 Oct 2026 02:12:12 +0000
Manifest this update: Sun 25 Oct 2026 02:12:11 +0000
Manifest next update: Sun 01 Nov 2026 02:12:11 +0000
Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: 9ND/v4a2neOozHvlyyoNipEkFbdDVyD5vfpBpm7ZCo0=)
2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: nWRLx+q0lfEoBWKjg9VIVBRs/nhFZ936B5rRLzukBEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Validity
Not Before: Oct 25 02:12:11 2026 GMT
Not After : Nov 1 02:12:11 2026 GMT
Subject: CN=6add657c-be52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:35:98:6a:e3:48:f0:1c:b2:0a:33:8d:09:
d9:c3:e1:8d:5c:71:23:b7:0a:0a:f0:26:1d:e7:61:
ba:d7:c0:47:15:7c:e0:20:d3:ca:56:23:4d:23:3b:
47:f1:45:c0:99:1d:ac:3d:73:b0:6e:d9:50:4e:e4:
cd:93:d6:c6:9f:03:58:7b:8f:d3:ec:6b:6f:5e:6b:
b9:f6:f9:53:96:7c:df:a0:39:38:9a:97:23:f9:94:
10:61:9b:bb:55:b8:74:35:ca:ab:09:26:57:12:62:
bd:b4:d2:1d:f9:66:97:3f:b1:63:81:62:db:70:00:
8d:49:ef:23:bd:6c:16:31:d5:53:45:77:ed:4a:4e:
93:bf:3b:5c:e9:c6:fd:92:2d:71:cc:cb:94:4e:37:
10:41:95:be:64:10:28:c4:2b:54:30:22:c3:cf:e2:
92:ac:c8:c6:f6:2d:53:46:ed:74:04:d2:72:57:a5:
52:3b:22:49:fc:ad:8d:04:b3:74:90:5b:21:c9:9c:
85:d1:25:10:93:e9:ae:59:a5:52:e9:86:10:65:a3:
8c:d2:5e:95:3b:1d:ef:b6:64:a3:19:f4:20:78:c5:
2d:4b:2a:9b:73:7e:a3:ac:ba:5d:67:43:9a:40:62:
15:59:f5:64:72:20:b2:05:1a:9b:a1:83:49:48:88:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6D:2D:1D:2D:39:20:B1:32:A5:11:D8:FC:F8:49:FC:AB:FF:1B:5F
X509v3 Authority Key Identifier:
keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:63:b5:b9:3e:85:41:6e:e5:ee:77:2b:3d:d0:f4:04:d1:45:
e3:d7:2d:90:c2:14:f3:f3:4f:f8:4a:5e:d0:b5:d9:1e:51:72:
86:db:d1:e4:bb:ad:db:cb:88:91:44:f5:4e:18:bd:39:02:0c:
a0:92:c6:9c:8d:3a:57:c1:7d:45:3a:6c:20:fe:61:ed:50:97:
d2:66:54:f1:b8:ae:d3:c6:62:fa:e9:a0:1a:5b:20:bc:22:c5:
f7:e8:fa:91:12:65:bc:a3:85:51:4e:d5:59:cb:36:b0:03:22:
6c:ae:32:94:0c:a5:3d:06:82:b3:cf:00:ab:7f:15:bd:bd:df:
75:d2:c4:4a:61:16:5e:2c:5a:9f:a1:c7:c6:f2:76:dd:b0:fd:
29:6e:c8:d6:46:fb:f8:4d:8f:36:47:52:ad:f2:09:e3:dc:01:
3d:0a:ce:f2:48:de:aa:a4:55:44:8e:aa:e6:ba:15:91:81:86:
b7:cf:2a:1b:60:42:2b:53:39:b5:59:23:33:57:35:18:a4:d0:
b5:b3:c4:0b:bc:5e:35:93:7a:81:57:2d:ba:01:d8:5a:99:bf:
ac:f1:c5:82:9d:20:10:65:b0:28:35:47:a8:2a:6f:cf:e9:70:
01:c5:4a:2a:64:2d:26:a7:0b:de:5e:93:a8:a0:78:8c:65:10:
12:4e:52:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:27:37 2026 by rpki-client