
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File: xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier: 5WrJgJGb+vbpJ4PxYUniGAjXToU85yInm7zlVPUcSUs=
Subject key identifier: FD:65:8C:EE:D5:08:A0:C5:73:D0:E3:28:BA:11:70:37:0B:F8:49:C8
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer: /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number: A0
Signing time: Mon 05 Oct 2026 07:43:43 +0000
Manifest this update: Mon 05 Oct 2026 07:43:43 +0000
Manifest next update: Mon 12 Oct 2026 07:43:43 +0000
Files and hashes: 1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: /vGIyVqZVJjM8orDYUxgm1tsPSem50rE6HF+wisZI+0=)
2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: EpL7U0XS/RThjCfzf6MnDPKqtdekXvQOYsOhN2Yrndg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Validity
Not Before: Oct 5 07:43:43 2026 GMT
Not After : Oct 12 07:43:43 2026 GMT
Subject: CN=6ac3552f-2a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:14:76:94:5d:30:be:8f:69:b7:82:6e:27:
bf:9e:bc:33:e5:88:9c:ea:8c:e6:8c:6d:55:fb:13:
c9:70:4f:ce:0e:3a:fa:f8:18:1b:3c:ee:32:7c:b7:
7d:26:33:bd:ed:4c:0b:0e:7d:37:23:a3:16:8f:e5:
7f:69:02:6d:06:f9:1d:42:2e:00:bc:a3:d4:aa:3e:
cc:62:d5:d6:56:0c:6b:f2:79:0b:fc:10:d2:f9:b6:
9a:fb:dd:70:b0:b9:04:9b:7c:6b:2d:24:80:c4:34:
12:fc:67:d8:e7:7f:1b:52:28:b6:03:b6:5b:aa:67:
bb:33:5f:20:02:4e:53:f8:b7:5e:57:5b:20:3a:cb:
0d:a7:9e:4b:a9:c4:7b:20:ac:28:79:27:95:f0:96:
ce:c3:a4:49:d1:51:f4:06:7a:d9:36:9a:ce:7c:19:
76:c7:ab:3d:5a:85:33:cb:8d:97:7e:b8:b8:91:62:
2f:ef:12:83:05:f2:f4:58:34:31:63:78:45:5b:1a:
26:3f:3f:2e:ab:bb:17:bb:b6:d7:1a:70:c0:9c:8b:
7b:b4:5d:6b:85:e3:ea:1b:2f:89:fb:06:f3:40:ff:
7a:8d:61:da:45:1f:02:a9:c6:c9:d5:5d:65:d4:26:
30:6c:06:28:52:c0:9c:b8:8c:cf:68:cb:b8:b7:62:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:8C:EE:D5:08:A0:C5:73:D0:E3:28:BA:11:70:37:0B:F8:49:C8
X509v3 Authority Key Identifier:
keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ac:19:d0:bb:2c:07:f9:a5:31:c1:17:ac:b7:73:7a:54:ca:
99:61:e5:fc:0d:55:63:73:96:4c:1f:3f:f6:b3:36:9b:b0:9a:
38:70:ba:bf:86:3f:67:43:a8:8f:d7:3b:2d:d9:ef:24:54:c4:
a0:66:2e:60:cf:37:d0:8a:2d:b3:8f:bc:40:f5:ca:8c:b0:d5:
de:cb:fb:fa:e0:72:c8:d1:76:72:c5:95:95:b9:3c:34:41:47:
9f:b7:64:9d:60:8c:6a:0f:9f:86:3f:3a:0d:5f:b8:c3:e6:5b:
7a:79:9c:65:77:5a:aa:f2:5a:11:f7:d3:f9:b8:b5:07:dc:c7:
ee:39:a7:df:5f:b8:57:41:4a:6c:93:0e:c0:d3:9a:64:16:21:
68:d8:08:a4:5c:2a:7a:4d:8f:ef:ea:ba:0e:bc:45:d3:da:57:
fc:6e:6c:38:10:45:5c:ca:a7:41:c6:26:69:36:ec:fb:e6:a5:
fc:5f:c5:3c:13:6e:34:0b:39:69:ea:15:3a:fa:74:07:dc:3a:
c3:76:e5:af:91:50:d1:22:c0:af:0b:73:94:b4:a7:89:e3:19:
42:f2:c1:e1:20:28:75:85:69:ed:96:cc:24:5c:c1:79:89:f4:
1b:55:1d:ed:27:ab:89:e2:7f:ab:6f:2b:37:a0:3e:40:2b:81:
d9:a4:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:47:59 2026 by rpki-client