
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json)
Hash identifier: 4zsYffNLi2MkusvTU/pZq1dv4G5lF0qjQmxJoYMpxig=
Subject key identifier: 14:73:6B:2F:A0:78:C7:EA:19:67:93:9F:5B:19:B4:EE:B4:BE:8F:92
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial: 0288
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
Manifest number: 026F
Signing time: Sat 17 Oct 2026 02:44:38 +0000
Manifest this update: Sat 17 Oct 2026 02:44:37 +0000
Manifest next update: Sat 24 Oct 2026 02:44:37 +0000
Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: zmPisn3L+/Spvgdf7k/oFqqT3fiNwcA66up25AdSUFQ=)
2: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: WQFzmtRcnRTzLa+owzbcIOOpVzi5EXn6wMZBFZmtrx0=)
3: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: mxZONybayBYjT/wE5ER2yG5aHXpF0N7OGPjQ6melKBE=)
4: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: zYrmifFyXf8eyAWgav1JJc7uPLea+6me2PDJlPHyfws=)
5: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: vDv+eD+OfMVa33qvWILzbZ7BF93e5A2vMNwg9cii/zI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 02:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Validity
Not Before: Oct 17 02:44:37 2026 GMT
Not After : Oct 24 02:44:37 2026 GMT
Subject: CN=6ad2e116-6474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:59:76:2e:f5:ef:8f:11:22:72:e3:a5:f4:
63:6b:67:77:ea:60:20:29:4f:d8:2e:d8:b9:fa:12:
c7:61:23:33:3d:94:1d:38:d5:80:79:fe:00:eb:24:
5a:0e:50:f2:d8:f8:9f:ae:a0:cb:c7:e1:19:cb:47:
a7:a0:6e:02:86:7f:c1:63:4c:bf:e2:63:35:bf:0d:
3a:95:bc:c6:45:d0:c9:17:e6:4e:36:48:5f:98:17:
5b:3a:9b:6b:0c:c8:ca:71:2a:03:80:24:d9:42:8b:
84:09:36:18:78:fa:8d:28:fc:7a:d3:e8:73:51:91:
e3:2e:8a:39:a1:4c:bc:27:1d:8e:e5:ca:76:00:46:
60:e3:3a:e1:10:a3:b7:d0:44:64:11:35:96:64:a9:
cc:99:f1:9f:e8:65:96:63:c7:0e:e2:2e:22:c8:86:
39:ba:f5:fe:55:eb:66:4d:ad:37:27:ea:8c:8b:11:
bc:6a:fb:6b:ba:b0:2b:1a:58:8c:7d:38:89:56:32:
98:5a:ba:88:6c:4a:2c:30:b7:da:34:4e:00:f2:50:
3c:1f:4a:66:df:05:e6:51:e6:ff:ce:8b:87:df:e2:
a8:31:6a:6d:91:71:f7:b1:9d:d4:85:0f:ca:c1:f5:
d7:31:16:a6:8c:cf:ad:30:3a:2d:7d:ff:64:b7:36:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:73:6B:2F:A0:78:C7:EA:19:67:93:9F:5B:19:B4:EE:B4:BE:8F:92
X509v3 Authority Key Identifier:
keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f8:ef:cf:53:1b:d4:00:8e:b5:ec:4c:9f:e0:eb:32:40:84:
be:42:a2:2f:42:78:df:74:2d:b9:b6:2d:5e:de:8a:62:ec:43:
31:eb:95:83:b6:a7:ea:86:0c:de:e6:6e:b5:c2:cd:3e:bc:f3:
73:a7:7f:32:69:07:a3:92:57:21:bd:a2:a2:ba:10:b2:03:1c:
07:84:f5:d1:d5:ef:02:2e:57:7c:97:be:8d:1c:0a:85:63:f3:
67:22:c2:95:4e:4c:15:ad:86:0a:ee:07:4a:4f:91:16:fb:c2:
1b:d4:de:61:64:33:b7:4c:c0:c3:9c:df:1d:80:36:7a:c2:bd:
e4:58:bc:61:6c:18:a4:e7:da:a1:92:ab:30:3f:c8:65:72:0b:
f7:6b:95:dc:ef:7b:f3:a3:d4:0c:0c:90:d8:9c:2c:c7:95:bc:
4c:af:41:b1:49:76:88:83:c6:98:44:98:64:43:53:bb:d0:16:
1e:00:55:af:af:cf:6c:be:f5:bc:46:c0:86:67:80:b2:cc:2c:
cc:06:6e:76:6b:ef:c7:e4:d4:1b:b3:5c:22:43:72:33:ff:a3:
a5:0a:b7:15:1b:e1:49:55:13:8b:39:a3:27:ab:cb:1b:6a:3d:
6f:4b:7e:37:94:59:6b:0e:b6:83:1d:4b:3c:6a:e3:02:bc:9d:
52:78:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:43:15 2026 by rpki-client