
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
File: f_xaKedfnr4HnQUkfw3_DPmH8cI.mft (raw, json)
Hash identifier: 69myFG5JrqoJ2soq1ePQqAsyDOAn2vzWmwCSkBuDyBU=
Subject key identifier: 64:AF:53:AD:89:DF:F8:A1:74:82:85:C7:45:4C:D8:9C:F4:09:E5:41
Authority key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
Certificate issuer: /CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Certificate serial: 3586
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
Manifest number: 3586
Signing time: Tue 06 Oct 2026 15:04:58 +0000
Manifest this update: Tue 06 Oct 2026 15:04:58 +0000
Manifest next update: Tue 13 Oct 2026 15:04:58 +0000
Files and hashes: 1: f_xaKedfnr4HnQUkfw3_DPmH8cI.crl (hash: khllaqX1J9+yEPOkgxh9e4XnewJrPfjPAeUPbdN12WU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl
rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 15:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13702 (0x3586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4C67, serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Validity
Not Before: Oct 6 15:04:58 2026 GMT
Not After : Oct 13 15:04:58 2026 GMT
Subject: CN=6ac50e1a-81fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:d7:56:f4:aa:12:ff:a7:d6:ef:30:96:2e:
b2:6a:12:b4:e0:16:e9:21:5a:7f:79:92:7a:f9:84:
12:f3:12:6c:a6:8b:be:24:97:95:38:b8:bd:5c:9b:
77:54:3c:02:87:1e:a7:ea:5a:30:07:2f:a1:f3:f5:
73:e0:b3:e6:40:93:f2:1d:b3:a5:7b:76:e3:1e:35:
f6:13:37:da:01:40:76:a8:b6:17:1a:02:d7:a8:98:
36:3b:3f:90:7d:b9:e8:e4:4b:62:64:4d:86:77:db:
b3:f4:7a:4e:86:78:99:0d:c9:bd:74:af:32:d4:83:
e3:90:d8:f4:ef:68:c4:5e:90:55:bf:3c:44:13:f9:
cc:e7:f1:ea:e4:c2:16:27:53:fc:68:bf:1f:82:41:
83:81:16:2f:50:5a:47:e0:ea:fe:75:17:dd:31:4f:
98:7b:58:9c:c0:f9:02:d6:af:29:24:19:17:fd:5e:
b9:37:4e:81:39:8d:a0:aa:62:f3:4e:3f:c8:52:7d:
63:d4:b4:dd:a0:0f:75:07:9d:e8:04:f3:37:f1:c1:
f6:74:6c:f5:73:31:7b:4e:7d:3d:3a:f0:3d:33:d2:
9d:a3:3a:d6:cf:e1:86:11:61:d8:5a:d9:5b:57:99:
66:8f:df:3a:18:8b:3c:33:01:39:07:69:81:46:91:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:53:AD:89:DF:F8:A1:74:82:85:C7:45:4C:D8:9C:F4:09:E5:41
X509v3 Authority Key Identifier:
keyid:7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:d9:32:93:b1:c3:e3:8a:19:91:c0:f3:86:dc:ef:ce:93:ef:
4f:e2:3b:10:0e:61:0d:a7:a9:0d:d0:3d:53:5d:0b:61:59:d6:
b5:0a:e0:c1:4f:65:52:37:67:d2:ad:3a:7b:a9:75:fd:f1:cf:
22:a6:1e:70:3a:27:88:c3:e5:6a:9b:d9:88:8b:e9:f7:1d:1e:
84:78:ce:21:f6:9b:10:db:21:ed:19:33:ba:a7:bb:e7:35:d0:
df:1e:3f:86:53:1b:e5:49:95:17:81:05:1d:ec:79:76:c8:ad:
e8:a7:58:00:34:38:c4:7b:0e:03:15:b4:9e:29:38:3b:9a:f4:
1f:fe:56:56:0a:b3:6c:3b:5c:6c:49:81:bc:16:19:03:4d:88:
e5:91:30:5c:f1:e1:c7:c8:22:c5:2c:69:2f:00:91:0f:01:41:
b8:d1:4c:b0:b6:98:1c:f8:fb:09:3a:b1:51:57:fb:ae:59:0f:
a5:ef:0c:1d:38:c5:1a:95:de:11:01:85:c8:c7:82:83:3d:57:
d8:42:0b:53:ca:93:58:aa:90:8e:42:af:3b:f8:75:b3:cc:34:
76:14:d5:e0:ae:1d:10:e4:4d:2d:79:ff:8c:29:e0:31:45:32:
f1:62:1a:04:b7:ff:c5:3c:09:54:f0:97:b0:a3:c7:0e:26:00:
d9:a5:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:54:24 2026 by rpki-client