
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
File: X45P1KbdY15DeC5aBVYiyrJlSjc.mft (raw, json)
Hash identifier: 1e66F/bQktZcaGMw2IhKBs2YP/oG7LfRrAClkBU7wJw=
Subject key identifier: F5:11:58:AF:DB:34:1E:DC:01:49:23:73:5F:04:7F:53:32:9B:61:CC
Authority key identifier: 5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
Certificate issuer: /CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Certificate serial: 0A03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
Manifest number: 09F9
Signing time: Tue 06 Oct 2026 19:55:03 +0000
Manifest this update: Tue 06 Oct 2026 19:55:03 +0000
Manifest next update: Tue 13 Oct 2026 19:55:03 +0000
Files and hashes: 1: X45P1KbdY15DeC5aBVYiyrJlSjc.crl (hash: yJOxSiMD17/M4b07gzptXBZF6nrneKkJgMvBdLV6gtQ=)
2: B757FF4EAB8311EA9983D717C4F9AE02.roa (hash: +2jTblD+/4omeCEhDlwqOghx+nNjjgIJKr1/zmP67Lo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl
rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563 (0xa03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCF31, serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Validity
Not Before: Oct 6 19:55:03 2026 GMT
Not After : Oct 13 19:55:03 2026 GMT
Subject: CN=6ac55217-2315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:ae:79:4b:b2:35:13:17:a8:d9:ce:bf:c7:
e2:80:0c:d6:80:5e:86:11:8c:13:b3:c0:35:7c:37:
ce:03:c0:89:b2:13:34:04:d3:cc:13:57:fb:01:a3:
eb:77:38:da:b3:e3:ba:4e:76:75:e7:1a:12:32:90:
0f:2b:ba:de:2f:52:25:47:03:6e:99:33:39:7f:7b:
2d:0b:12:ca:a9:22:20:d9:6d:81:00:e0:40:35:95:
8b:ce:d9:71:86:43:c3:1c:1c:22:45:50:7e:de:a8:
72:bc:32:93:90:3a:a3:fc:8f:63:21:3a:75:f2:30:
02:2a:10:a5:5b:5a:53:6b:1a:a6:65:d0:2b:17:56:
cb:76:e4:1c:e6:dd:79:d2:d6:78:bb:c2:24:1b:c4:
6b:99:ba:da:10:6f:d4:24:92:a2:4c:7b:dc:12:18:
a8:c0:ec:f3:55:be:90:be:4c:49:b5:a1:36:c2:c4:
98:66:fd:31:d3:0c:bb:17:ff:7f:5e:d9:d2:8c:4d:
a9:99:80:5e:ce:3a:46:4a:76:14:b4:d6:ae:5e:2b:
b5:b9:1d:5c:b0:83:aa:65:e2:e8:c7:21:3b:32:1e:
d4:bd:1d:06:b0:10:c4:af:6c:1d:e3:1c:86:bf:1a:
a2:02:b3:b6:a3:e3:90:00:07:4f:5c:1a:2e:2d:d6:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:11:58:AF:DB:34:1E:DC:01:49:23:73:5F:04:7F:53:32:9B:61:CC
X509v3 Authority Key Identifier:
keyid:5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2e:f0:f5:59:19:df:80:a3:ca:e4:1c:8c:18:10:38:04:50:
1e:3f:25:8d:e1:10:d6:06:66:3b:a8:e4:0b:9a:33:78:7b:17:
ca:a2:dd:c7:15:ce:0e:8f:57:7d:3c:ad:be:ff:c7:a1:c6:95:
54:83:8a:cf:8f:7e:3b:4a:49:b2:73:ad:1a:cf:e6:ee:67:41:
44:76:b2:d2:28:40:a5:2d:fd:ca:56:8f:7a:6b:ab:f0:fe:92:
6b:de:2b:18:55:3f:c2:e9:80:89:f9:17:c2:a1:52:b6:28:c8:
69:f5:2e:5f:75:1b:71:bb:17:5f:e5:2d:60:6c:8a:a1:9f:d6:
32:73:b4:86:2f:86:cc:73:0e:76:c6:63:1c:07:0c:18:cf:3f:
b4:3e:a7:6c:8a:7f:ee:4c:bf:53:2c:cf:f7:d7:34:98:c3:79:
8c:df:0e:6e:47:0d:5c:0c:a3:c9:04:70:25:7a:b1:4a:e8:18:
64:37:0f:7e:9f:98:cf:61:cf:68:cd:f3:90:b3:a7:a0:52:2d:
20:51:fe:bf:42:6f:09:e4:22:50:13:69:04:52:f7:cb:08:f0:
2f:94:33:d2:c5:9f:57:13:70:2f:9b:39:c0:cb:8f:15:4f:e3:
ba:f5:eb:d7:b3:05:67:8f:50:64:15:70:b5:bb:5e:5a:d2:72:
76:bf:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:50:45 2026 by rpki-client