
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File: x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier: I5R85aTke4k8hxwAHzH5utQtm6Cf5ps9qShPTtzbzp4=
Subject key identifier: 8C:D0:70:1D:4D:CF:3B:9E:CB:4F:6A:1F:CE:29:7A:41:28:E1:6E:23
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer: /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial: 0848
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number: 0840
Signing time: Fri 18 Sep 2026 20:59:31 +0000
Manifest this update: Fri 18 Sep 2026 20:59:31 +0000
Manifest next update: Fri 25 Sep 2026 20:59:31 +0000
Files and hashes: 1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: sl3ngsZJV9Fto0I0DmlcHQPoWMXcEo9Mp/9H5FWcw8c=)
2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: 55CxpWCtuoXOi6t/gybs+bucccea1BToqnuBzxE+HNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Validity
Not Before: Sep 18 20:59:31 2026 GMT
Not After : Sep 25 20:59:31 2026 GMT
Subject: CN=6aada633-c3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:ff:9a:a5:df:49:9b:9f:6c:92:35:ec:0c:
bc:da:a5:5b:9c:16:b6:c3:ad:22:89:70:21:65:5d:
20:d6:dc:62:1f:ae:b0:6c:88:e7:2f:4e:93:e4:3e:
68:52:03:d1:97:c7:9e:ec:1a:6a:b0:45:eb:82:a5:
20:86:5d:a4:8a:c4:50:27:21:0a:4b:a6:4f:6b:6c:
42:2f:21:5e:46:1e:fc:fc:7b:0c:14:3f:a5:6b:46:
ed:4e:7c:cb:31:e7:35:48:b4:11:3d:e0:ce:d2:e1:
da:93:d1:a3:35:50:3e:7c:1b:4a:52:bc:05:31:fd:
7b:81:11:6f:10:02:2f:d9:dd:06:be:2b:8f:fa:af:
5e:a4:ef:b3:b2:32:f1:08:83:e6:d1:b0:ff:7d:41:
5f:78:6a:46:a5:ae:d2:19:a2:57:dd:30:b5:e4:99:
cd:6d:62:01:2b:77:30:2d:34:fe:44:cc:d1:c3:cc:
c6:34:6c:76:2d:23:4e:ba:1c:5c:6f:5c:39:ac:69:
a8:29:7f:54:48:c1:85:05:c1:24:86:24:46:00:8d:
22:aa:ae:38:38:8e:9d:d4:a4:b2:60:a1:21:54:b1:
c9:7b:f7:c0:79:54:b3:b5:67:1e:4c:3b:4e:37:15:
14:61:50:92:98:19:82:3f:33:a5:98:9e:85:f7:1d:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:70:1D:4D:CF:3B:9E:CB:4F:6A:1F:CE:29:7A:41:28:E1:6E:23
X509v3 Authority Key Identifier:
keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:9f:f2:bf:a2:20:58:98:a0:ed:bb:1f:8e:a2:21:78:e0:ed:
b0:0d:63:f9:f1:ec:69:37:c3:d6:d3:b5:a4:6f:a3:ec:d8:4c:
d3:9e:b4:26:c3:a5:d3:b0:2f:db:c9:f0:15:17:bd:39:7d:54:
48:ae:93:9a:3f:07:f3:09:f8:59:da:94:40:13:9e:fc:86:f7:
dd:d9:e0:70:57:e2:37:32:54:28:b9:af:bc:cb:f1:cd:99:a4:
fc:81:dd:02:45:47:38:98:2d:e7:72:67:86:cd:a2:c2:05:52:
6e:1e:5f:27:f2:fc:f0:a8:5c:1f:23:50:a8:73:fb:16:73:4b:
4c:ab:4c:f2:72:38:bc:0b:7c:f2:d1:6e:ab:82:1f:50:6e:b2:
4d:54:af:94:83:0f:b3:43:de:55:35:16:0e:1e:65:a6:4a:eb:
4d:2e:9f:27:f9:fd:24:f6:21:8c:08:e0:ec:d1:4a:8b:e4:11:
f2:bc:82:64:3f:97:95:4f:d4:3f:ef:31:05:7c:77:d9:41:a3:
2f:59:55:6e:e3:82:74:af:a1:68:7e:02:00:e3:04:ad:8c:d9:
14:ce:66:78:f6:ae:dc:2c:31:b0:02:1c:8c:4c:64:86:10:ba:
69:93:8a:d4:ab:0a:6e:56:a7:56:6f:84:a6:37:88:0e:d5:78:
50:b2:a6:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGRUIxMTAvBgNVBAUTKEM3OTVFNTlDMDMwQzdDOTI5RkNCRTQ3NDE5RkM1RUM2
OUUxRkFDRkQwHhcNMjYwOTE4MjA1OTMxWhcNMjYwOTI1MjA1OTMxWjAYMRYwFAYD
VQQDEw02YWFkYTYzMy1jM2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAznv/mqXfSZufbJI17Ay82qVbnBa2w60iiXAhZV0g1txiH66wbIjnL06T5D5o
UgPRl8ee7BpqsEXrgqUghl2kisRQJyEKS6ZPa2xCLyFeRh78/HsMFD+la0btTnzL
Mec1SLQRPeDO0uHak9GjNVA+fBtKUrwFMf17gRFvEAIv2d0GviuP+q9epO+zsjLx
CIPm0bD/fUFfeGpGpa7SGaJX3TC15JnNbWIBK3cwLTT+RMzRw8zGNGx2LSNOuhxc
b1w5rGmoKX9USMGFBcEkhiRGAI0iqq44OI6d1KSyYKEhVLHJe/fAeVSztWceTDtO
NxUUYVCSmBmCPzOlmJ6F9x13ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIzQcB1N
zzuey09qH84pekEo4W4jMB8GA1UdIwQYMBaAFMeV5ZwDDHySn8vkdBn8XsaeH6z9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi9CMDE4QUQ5NjI5
MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZKS2Z5LVIwR2Z4ZXhwNGZy
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g1WGxuQU1NZkpLZnktUjBHZnhleHA0ZnJQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0ZFQi9CMDE4QUQ5NjI5MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZK
S2Z5LVIwR2Z4ZXhwNGZyUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUZ/yv6IgWJig7bsfjqIheODtsA1j+fHsaTfD1tO1pG+j7NhM0560JsOl07Av
28nwFRe9OX1USK6Tmj8H8wn4WdqUQBOe/Ib33dngcFfiNzJUKLmvvMvxzZmk/IHd
AkVHOJgt53Jnhs2iwgVSbh5fJ/L88KhcHyNQqHP7FnNLTKtM8nI4vAt88tFuq4If
UG6yTVSvlIMPs0PeVTUWDh5lpkrrTS6fJ/n9JPYhjAjg7NFKi+QR8ryCZD+XlU/U
P+8xBXx32UGjL1lVbuOCdK+haH4CAOMErYzZFM5mePau3CwxsAIcjExkhhC6aZOK
1KsKblanVm+EpjeIDtV4ULKmlQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 01:08:47 2026 by rpki-client