
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
File: xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json)
Hash identifier: Gb+uml8Xd6dT1BAb+zOEh72PDdL9DY43lBtZQNwxfOU=
Subject key identifier: 56:32:3D:49:97:C4:CA:F9:16:66:AF:7E:22:04:BD:73:B3:2D:8C:43
Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Certificate issuer: /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
Manifest number: 95
Signing time: Sun 25 Oct 2026 07:54:29 +0000
Manifest this update: Sun 25 Oct 2026 07:54:29 +0000
Manifest next update: Sun 01 Nov 2026 07:54:29 +0000
Files and hashes: 1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: jX6oHF7P59iBsCAKBJt9Pf/ZNjjOiAFnVKnWvxHgQhw=)
2: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (hash: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=)
3: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (hash: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 07:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Validity
Not Before: Oct 25 07:54:29 2026 GMT
Not After : Nov 1 07:54:29 2026 GMT
Subject: CN=6addb5b5-4aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:1b:0a:13:7d:03:a9:40:97:77:4e:f6:60:
28:73:5c:97:6e:dc:91:ec:ac:ef:e7:ad:5e:61:b7:
b8:8d:fe:65:57:08:c1:8e:5c:2e:2a:fd:39:7d:82:
da:ea:80:d1:79:0e:c0:a4:22:77:11:95:64:51:a4:
97:74:e2:80:69:32:ea:7a:72:b0:88:65:80:61:b0:
81:5c:66:26:05:d3:9b:ca:10:05:9b:5e:de:bf:86:
27:47:5a:71:71:2a:0c:10:6d:ea:88:9e:02:0f:c1:
f4:69:dc:ef:f2:cd:3a:fc:79:11:3b:a4:dd:88:0f:
f4:a6:2c:53:39:9c:fa:6a:bc:fa:8d:14:12:6a:c0:
e7:8c:97:59:eb:bd:32:05:04:d8:0b:98:8f:a1:17:
66:43:09:c8:7b:40:34:1a:4b:7c:4f:46:b3:d3:da:
16:35:17:b9:1c:5c:70:e6:32:d0:1e:62:a9:42:ea:
9b:b5:43:56:98:47:ac:8f:20:df:b2:0c:78:06:89:
ae:f7:09:e1:27:a9:44:f9:3c:c0:74:65:1a:4a:65:
77:5a:ae:b0:50:b0:e4:01:31:c0:d0:b0:14:3a:3c:
a3:fb:a1:bd:a7:61:1d:e7:2c:a9:1c:5e:a3:2d:81:
0f:e2:86:23:dc:2d:ba:e0:a4:39:31:04:c2:26:ae:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:32:3D:49:97:C4:CA:F9:16:66:AF:7E:22:04:BD:73:B3:2D:8C:43
X509v3 Authority Key Identifier:
keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:3c:f7:6a:1d:7e:c0:92:ab:35:30:1e:9c:ff:70:a6:ce:1d:
ef:6c:0f:29:50:a8:b7:9d:4f:89:f3:dc:09:ef:18:73:c3:03:
25:d9:00:65:7e:0e:bb:66:ad:ab:c8:32:30:83:03:ec:5b:5f:
10:6c:54:d3:86:d5:e4:ef:2e:db:7d:f5:4e:72:e2:2b:2e:f0:
34:fa:20:2f:59:47:58:37:8d:51:12:2b:08:0e:7b:39:c2:0c:
80:fd:08:f2:46:b5:89:22:4a:9f:38:65:c9:83:b7:0c:b8:41:
38:16:fb:6d:57:7f:b3:91:44:57:61:c3:34:65:35:11:84:c1:
ee:43:15:b1:e1:31:ad:25:ec:9c:a2:23:e2:31:46:ae:af:cb:
a3:b6:22:c5:50:04:e5:a1:60:af:c7:29:74:72:b8:60:4e:36:
54:b8:94:8c:46:82:71:ca:0e:da:1e:7c:d3:ca:d3:32:c3:53:
98:bd:58:11:c6:e5:1e:ca:8f:5e:d7:4b:87:5e:17:6c:1f:c0:
14:bf:dd:b5:92:c0:85:4b:a9:60:54:1f:26:35:e2:ed:44:59:
e6:ed:34:27:52:44:d1:05:d1:0b:cd:92:5f:c1:cd:ef:82:1d:
2a:f4:be:77:78:03:67:26:df:48:c0:f0:77:0c:01:5e:fd:0f:
f9:7f:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:03:09 2026 by rpki-client