
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier: Jjy35ROebKB40l2Te/tPdZSRdCmoUU48bTH4FwgSY8Q=
Subject key identifier: DD:4D:48:6D:7B:44:3B:2F:37:3E:00:2D:FE:D6:2F:53:0E:FC:C0:EB
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number: 0198
Signing time: Fri 23 Oct 2026 01:16:32 +0000
Manifest this update: Fri 23 Oct 2026 01:16:31 +0000
Manifest next update: Fri 30 Oct 2026 01:16:31 +0000
Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: 5fU5XaJVMizTScdf8+Prxr47K82R5xzXURuhqLsNF+I=)
2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: 6lO6h2G77UVb/TYYp/IKbTb/elPRTlBLimPdGpXo2iE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Validity
Not Before: Oct 23 01:16:31 2026 GMT
Not After : Oct 30 01:16:31 2026 GMT
Subject: CN=6adab570-ee57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:e2:35:f5:3b:d5:36:24:94:8b:69:8a:24:
d4:a0:4a:d5:b1:b5:36:65:a0:e5:51:dc:6f:9c:cb:
c9:e9:65:94:ee:17:b3:a0:30:eb:5c:b2:41:94:d1:
32:ba:f5:2f:ee:42:f8:91:64:02:3c:26:ad:0b:f6:
78:92:78:8c:3c:21:af:3d:96:eb:0a:83:24:33:5d:
15:bf:b5:46:47:7a:01:05:50:8f:61:b1:dc:25:72:
08:d8:ca:df:a1:f3:0a:3d:ea:2c:48:ad:e8:a0:7d:
c0:07:91:85:27:bd:58:0e:4c:34:a9:5a:cc:3c:59:
d2:b0:d7:72:8d:ec:76:f7:af:2b:8c:d7:d3:a9:68:
d1:b5:62:55:67:d0:8e:f8:20:72:59:af:10:c5:e1:
ed:40:88:c4:44:f1:78:0a:7d:b7:55:f8:62:dc:dd:
75:24:ec:86:76:61:49:df:37:b2:7d:ca:9f:2c:cd:
b7:f0:bc:61:61:21:83:07:bf:3c:77:84:22:ed:96:
85:ee:5d:8a:68:c1:1b:09:28:cb:b2:17:6b:6d:14:
4f:6a:2e:f9:fe:24:7f:78:43:83:aa:00:c0:a3:95:
1e:35:e1:9f:c5:62:68:a7:ef:6d:22:0f:be:60:0e:
6a:c6:e5:f7:db:8f:e1:3e:3c:9f:62:ea:7e:31:d3:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:48:6D:7B:44:3B:2F:37:3E:00:2D:FE:D6:2F:53:0E:FC:C0:EB
X509v3 Authority Key Identifier:
keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d0:70:18:8d:41:e3:ae:25:4f:c6:77:20:ec:70:48:18:b4:
de:fc:85:17:bc:03:19:e6:9e:fb:93:43:98:b5:cf:69:b7:e1:
e5:34:b8:4b:c1:01:06:54:e6:a9:39:c7:da:fa:6f:48:d9:82:
b1:fb:ec:fa:d5:c6:e6:5b:bd:93:74:b3:9f:5a:a0:af:5f:41:
01:3c:61:d1:1c:9d:c4:80:ae:a6:2c:05:25:44:5a:ad:a2:db:
39:5c:ad:bb:93:19:44:2a:f4:56:89:42:d3:f8:51:a7:59:47:
7a:bd:f6:de:90:de:96:67:1f:4e:fa:99:86:89:fe:6d:c1:64:
82:e6:46:2b:ff:11:34:9f:9a:52:bc:95:1f:0c:53:5f:7c:34:
a9:c9:44:52:05:dc:f8:0e:20:27:5c:e0:26:69:7c:d5:cf:0f:
f7:24:a2:1f:89:b7:3f:5d:3e:7a:7b:ae:20:8f:15:1e:ff:cd:
00:11:3d:d1:45:aa:09:8d:9b:18:7b:24:9e:d6:f6:e4:94:7e:
5d:b1:4a:61:a3:e8:cd:50:ee:28:0e:62:d8:db:eb:b7:df:c9:
12:b8:53:5c:c1:f6:a9:98:d3:07:64:58:06:11:35:74:ea:49:
06:0e:49:a0:ab:6f:a0:5a:aa:f6:e5:6b:3f:68:91:e7:20:9c:
47:5b:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:02:41 2026 by rpki-client