
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
File: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json)
Hash identifier: HpBwabnADANdqMbYaey5oU+SiWDh5Shfy34Fo+XhTSI=
Subject key identifier: E2:72:1D:E1:B0:57:34:E3:C5:33:21:FE:02:A5:19:7F:36:32:F1:7A
Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08
Certificate issuer: /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
Certificate serial: 0B96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
Manifest number: 0B87
Signing time: Sat 04 Apr 2026 18:57:31 +0000
Manifest this update: Sat 04 Apr 2026 18:57:31 +0000
Manifest next update: Sat 11 Apr 2026 18:57:31 +0000
Files and hashes: 1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: 9cDt0YYmT5LR5an1Q6k56dcWbUSiQtzNypHB8ZgjFng=)
2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: apuF+CHb5V3hRVn20QwCD8T6GZ5V5YYEYw6cYSsjqgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl
rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2966 (0xb96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
Validity
Not Before: Apr 4 18:57:31 2026 GMT
Not After : Apr 11 18:57:31 2026 GMT
Subject: CN=69d15f1b-0c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:1c:2c:c0:2f:4c:bc:16:71:ac:e1:63:6c:
87:c0:76:9d:06:7e:b0:6b:a0:e1:21:d9:11:c8:b6:
9b:86:d7:f6:5d:13:5a:43:f5:3d:07:54:f3:a6:31:
77:c9:92:e8:3a:a4:cc:03:41:2b:07:50:53:3c:03:
c8:c3:ce:20:d8:3c:28:c4:be:a7:77:9b:ab:b4:11:
2b:bd:5d:46:44:fe:e7:a2:5e:7b:a4:a2:b6:99:8d:
f3:f3:6c:e1:c6:84:db:9c:4e:4b:a1:2f:ca:5b:8c:
52:2f:c8:1c:23:be:bd:b1:78:aa:0e:2f:ce:52:ec:
40:20:8a:cd:36:1b:93:6c:62:5c:cf:2c:3c:a9:26:
80:d8:76:b4:82:35:92:37:f8:d0:f7:73:98:3c:aa:
9c:5f:e5:6d:b7:85:71:7b:04:fd:42:45:4f:d8:ff:
f0:da:b4:1c:c8:c3:b3:70:ce:01:c7:33:c8:23:65:
a7:ce:39:81:24:8d:11:23:88:3c:f9:e6:a4:d3:83:
2f:b7:ee:69:a3:44:14:32:fb:8b:2a:f1:f0:52:3b:
23:b7:0c:8c:45:29:66:ba:ce:68:77:a3:27:a8:4f:
ac:3e:76:17:16:37:0a:b4:4e:d3:2e:e7:f1:ca:33:
a5:74:ae:1c:b4:92:c8:02:be:85:37:6c:b8:e1:a4:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:72:1D:E1:B0:57:34:E3:C5:33:21:FE:02:A5:19:7F:36:32:F1:7A
X509v3 Authority Key Identifier:
keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a8:f0:d2:41:29:41:90:49:84:56:f0:db:8c:a3:2d:2b:8b:
ec:b9:17:8c:ac:29:9e:6c:d9:25:86:6d:e7:bf:bd:19:30:2f:
02:fa:13:10:05:49:35:ba:9c:ae:fd:cc:95:39:a4:1c:f6:b6:
41:85:7e:3b:2d:94:87:2d:b2:05:70:52:f9:28:87:da:72:78:
45:fb:a7:e8:2f:96:ab:61:c0:68:b4:67:36:05:69:7a:e8:3f:
73:28:f9:36:99:4e:83:28:22:c6:cf:31:f1:5f:9a:d8:d4:5d:
84:cc:c5:04:d1:72:46:86:e0:fb:07:27:69:93:3e:3a:21:40:
d6:18:1c:7d:e8:38:3c:dd:c2:a8:83:e8:57:86:e1:0f:02:df:
df:b0:6d:ef:28:50:3a:94:a1:57:33:b3:42:f1:78:c5:d1:50:
d8:fa:a9:73:97:ff:51:cc:33:0d:e3:27:ae:03:8d:8e:9c:c4:
78:93:b7:0c:6b:fa:2a:95:28:5d:02:da:62:06:a5:88:cd:ed:
06:79:a8:16:63:16:25:69:3c:8e:a8:fa:34:fd:67:90:3c:dc:
c1:c0:bc:51:da:54:aa:95:65:41:97:52:6a:78:3c:3a:c6:b1:
c3:23:89:58:10:15:a1:c2:8f:cd:e4:e9:2a:a6:4f:09:03:6a:
6a:d3:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:26 2026 by rpki-client