
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
File: XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json)
Hash identifier: PLzXyediqwQ82O/HiCK+wULNn/Yalnc8ixLgz4Yzzkk=
Subject key identifier: AD:D2:23:E5:57:B0:0E:AD:16:00:F0:04:93:2D:1F:96:98:85:C1:CA
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial: 08A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
Manifest number: 0849
Signing time: Wed 28 Oct 2026 21:25:14 +0000
Manifest this update: Wed 28 Oct 2026 21:25:14 +0000
Manifest next update: Wed 04 Nov 2026 21:25:14 +0000
Files and hashes: 1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: WmN0NDk6UCDX6a4dsyTaYpAgw8necyI3iO/K88poyl0=)
2: EF27F91CBC1411F1A29BFD493C11F970.roa (hash: 0uf4/gnH7lr5PI0ZOk9uQIj3lhkBCXeX21CJPS8jsco=)
3: 9507206A63A111F092E32646C4F9AE02.roa (hash: sNJ/z3tciI3P1O0ryKXCTLwVb8opOV1YzGSE7197VSA=)
4: 37E9E6CABC1411F1BC96943C3C11F970.roa (hash: jiFtWr7defZ5oiNXTbtLNsdgrCFZwUGk+Vfb60WSDFs=)
5: BEDA89FABC1411F180DDD3483C11F970.roa (hash: eVuRTO7STTEgwRq3+fBY8S6wle3YPlh/UKWKAwUhgYk=)
6: 60932800BD1511F18D3189834911F970.roa (hash: 2xizNwLacLpLXkKi7DcjXrf8/LtXgbokhT/ESBr2+Ys=)
7: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: wu4B3+COj6mwPOma5aipHU++amHET1ZTyASPgZVelnU=)
8: 66FC64186D0711F0AC1BE951C4F9AE02.roa (hash: VekWNOhsOkbPhXXSNfSf3h3JUsmawKz26TlG/xieIfo=)
9: 94A5320663A111F092E32646C4F9AE02.roa (hash: fUCheIlZiOEqL+zo0CZL2wr4PBAsx1uBgM0P+XWWqrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 21:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Validity
Not Before: Oct 28 21:25:14 2026 GMT
Not After : Nov 4 21:25:14 2026 GMT
Subject: CN=6ae2683a-a637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:d9:df:d7:60:00:73:68:f1:d5:6c:c6:ee:
1f:f7:fd:4b:6e:71:9a:cd:bb:7b:57:e3:1a:79:15:
cc:d3:31:b6:d8:88:2e:36:13:73:df:95:89:86:63:
64:ce:fd:44:89:93:8a:2b:d8:64:f0:7f:dc:13:7c:
f1:fa:c1:18:61:40:f0:0c:cd:48:2e:a2:55:b1:4e:
b6:62:c2:2a:a1:fc:1c:04:8a:12:01:d1:c4:c0:d3:
f1:b3:cc:4d:19:55:54:52:4c:f4:53:53:ff:e4:21:
2a:8e:8c:21:df:ee:8b:54:11:eb:03:36:bb:44:a2:
8a:b6:b4:c6:ee:7c:1d:c6:c7:e3:99:e6:2d:db:ee:
d8:8c:b0:8b:9d:3d:52:c7:2a:7f:6a:fd:ff:b6:56:
c6:95:4e:ed:88:d0:ad:b4:8a:fb:3c:5b:04:97:ff:
4e:c2:e8:13:e0:45:a1:40:b3:73:20:3c:fd:e7:1e:
8e:d3:37:b6:6d:2e:2e:de:5e:ae:bb:c6:44:1f:19:
81:e5:f2:22:8b:69:95:e6:39:9b:a2:42:ae:5d:fa:
14:e8:3e:86:26:c2:32:20:91:1f:31:10:29:f4:c1:
62:ad:37:98:48:e9:e7:f1:61:cb:9a:ed:ef:50:f6:
05:02:63:d7:3b:2b:b3:0e:bc:e0:bf:cf:9a:6e:82:
27:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:23:E5:57:B0:0E:AD:16:00:F0:04:93:2D:1F:96:98:85:C1:CA
X509v3 Authority Key Identifier:
keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:04:32:35:23:7e:7d:06:fb:24:05:37:1d:58:3c:92:1c:16:
ed:ca:5e:d5:1a:0f:e9:74:f4:2b:e2:ae:ff:4f:af:e9:7d:d6:
48:1d:94:dd:71:53:f7:c3:4f:9d:06:45:1b:4c:70:f0:d1:c0:
cb:69:f7:b9:eb:6a:4a:84:49:a4:95:89:02:6d:b6:79:0a:44:
32:b6:22:a7:a2:5b:8c:21:52:e4:18:71:4e:2d:b8:3c:8d:d6:
bd:80:25:fe:8b:30:72:20:53:bf:9a:c6:7e:b0:c5:ac:5c:17:
08:62:b5:67:e8:4e:d6:50:ba:ae:f8:48:2a:8f:b6:5e:3b:55:
ab:0e:c0:d6:aa:fe:76:42:13:0c:fd:a7:e5:b7:58:e5:29:1f:
01:e9:53:06:7b:0f:03:0f:27:16:0b:6b:05:dd:2d:a1:fb:6a:
cf:50:85:5e:ae:3c:a2:11:b3:eb:f6:7e:25:b7:51:0a:26:ce:
fe:3c:89:05:12:71:57:9b:41:54:97:e2:b5:db:91:55:7e:c2:
84:bf:7e:e7:2e:1b:df:e9:92:fb:22:cb:b4:59:c6:b4:9b:9e:
28:6e:ac:50:a7:02:69:3b:54:29:fa:2a:af:9e:ef:5f:51:77:
86:31:62:60:74:cb:33:72:63:a2:8a:dd:93:97:51:aa:ed:ec:
dd:12:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:51:38 2026 by rpki-client