
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json)
Hash identifier: VEcU3mvtkmIb54Tz7p1SEDqHxOgPTqJsfDIhdCw5jmI=
Subject key identifier: CE:F9:8A:F3:D4:D3:25:C8:04:FF:84:E2:25:03:4E:57:26:4B:29:EA
Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Certificate serial: 0743
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
Manifest number: 073B
Signing time: Fri 02 Oct 2026 22:14:13 +0000
Manifest this update: Fri 02 Oct 2026 22:14:12 +0000
Manifest next update: Fri 09 Oct 2026 22:14:12 +0000
Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: 6cKcoVDojB2/rxAN7igUQ1rgsSDOAO0ilwiQcEAczCo=)
2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: ya+5X2X8zd4MO/3KegCTLB9V6NcmJXOYCWI69T9MPig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl
rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859 (0x743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Validity
Not Before: Oct 2 22:14:12 2026 GMT
Not After : Oct 9 22:14:12 2026 GMT
Subject: CN=6ac02cb5-1aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:c5:f1:76:29:ab:63:05:6a:de:ee:cc:64:
5b:dd:2b:3d:74:65:ff:65:44:4e:b1:02:a6:cf:bf:
88:04:3f:3d:f5:78:65:be:fc:75:ce:ab:57:bd:59:
65:3b:1f:44:ed:6a:a9:4e:bd:2b:7d:83:a0:be:87:
0a:31:aa:3e:bb:be:59:23:51:93:cc:1a:ce:e2:e2:
80:34:2f:10:ce:71:bc:0f:cb:90:d7:36:c7:dd:4f:
4d:af:dc:06:ac:54:ef:72:51:96:5b:f0:c8:e5:95:
9b:3d:94:94:36:cb:af:a9:e3:22:a2:cb:7e:d2:bd:
a4:26:00:c5:89:ac:b3:9f:99:a4:d7:84:1f:b7:9b:
dc:b3:63:25:0f:6e:37:c6:81:ab:dc:85:29:e6:b8:
6f:0d:65:b6:9f:0e:6f:81:80:a8:e7:95:46:11:1c:
85:a7:29:90:e9:00:1e:84:39:a0:08:c3:64:c1:f8:
16:00:54:7f:b5:0e:3a:12:f9:ac:3a:32:2a:c6:65:
bb:55:7b:9f:3e:88:62:12:74:a5:99:86:ec:5c:cc:
0c:4d:82:dd:d8:da:60:f1:9e:d0:8b:65:11:50:2b:
fa:e3:6d:c4:ac:c9:9b:03:b4:8a:53:e3:4b:f7:9a:
8c:7b:5a:32:c5:8e:45:7a:ce:c0:9d:4e:bd:81:20:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F9:8A:F3:D4:D3:25:C8:04:FF:84:E2:25:03:4E:57:26:4B:29:EA
X509v3 Authority Key Identifier:
keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:49:c9:f6:e9:d4:c4:5f:c1:91:dd:c9:40:19:59:45:6c:55:
5d:dd:c9:2d:f5:0f:a7:87:e6:21:ff:ce:43:d5:b1:37:82:6e:
09:28:b7:51:2c:db:88:73:6f:d4:66:99:57:44:af:90:0f:80:
3e:2f:45:d3:57:2d:a3:3d:df:1a:71:66:14:3b:2c:35:c1:fa:
21:b2:28:53:0b:70:88:85:f0:8c:81:61:51:ef:c9:a3:7a:20:
f7:4a:ab:91:65:34:98:64:d7:f1:69:c3:7e:b1:7e:cd:5c:b5:
cd:4f:99:66:d1:f9:ea:23:d2:ed:c5:a8:bb:5e:c6:9f:d9:e0:
07:7a:1f:6b:be:6b:fc:14:6f:a2:a7:9b:9d:ed:79:06:dc:7a:
33:45:5c:6a:65:e0:83:0c:54:f9:27:b6:52:a0:d3:1b:1f:27:
ef:b8:fc:55:77:e4:6b:5a:92:23:3e:05:c0:fe:8f:75:c9:79:
18:b1:ab:99:33:bd:18:79:cf:1e:6c:cb:81:30:08:a2:ac:16:
fa:31:96:2b:f9:56:ef:18:34:be:43:3d:66:af:58:40:e7:67:
d8:ee:20:b6:67:c2:7b:b3:a9:4e:2b:77:01:bf:7f:0a:1c:23:
91:c3:27:84:8d:b7:b9:84:94:ed:8a:ea:64:fd:e6:30:ce:05:
c5:0f:65:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:43 2026 by rpki-client