
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
File: XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json)
Hash identifier: zXAX3HW9q35SQYafeLwTbKMRk10YvCIBohy1Xdd4Ebk=
Subject key identifier: E0:6F:E6:DB:4F:EA:61:8C:D7:33:13:86:B4:4F:75:56:24:7F:F5:BE
Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E
Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E
Certificate serial: 0667
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
Manifest number: 065C
Signing time: Tue 06 Oct 2026 22:45:52 +0000
Manifest this update: Tue 06 Oct 2026 22:45:51 +0000
Manifest next update: Tue 13 Oct 2026 22:45:51 +0000
Files and hashes: 1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: Oig8Vj9F8OzyP7mARmBPIpylTPBbIhlt8xvuM1aW+wU=)
2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: Atm+YjJWu/U6U/w3n/CtX93wrO07yuhb/OEeKyPt76Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl
rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E
Validity
Not Before: Oct 6 22:45:51 2026 GMT
Not After : Oct 13 22:45:51 2026 GMT
Subject: CN=6ac57a1f-0aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:5b:ea:39:00:34:4f:a8:59:de:68:c4:1c:
ac:89:53:75:01:fd:27:c0:21:9a:96:8a:f4:a4:35:
b8:19:88:01:ab:ea:a5:9f:ed:d9:56:a7:32:70:fe:
ce:9d:a8:4b:cd:a5:89:9c:89:d4:6c:f0:95:82:76:
72:6b:63:97:eb:7b:7a:0e:aa:c8:4e:8c:56:c8:23:
1f:49:38:17:53:06:df:5e:2e:2b:53:3f:8b:b5:e8:
c3:28:d5:71:b9:9a:ef:62:63:dc:64:dc:a6:61:00:
83:e8:ff:b8:b5:4a:10:00:d1:45:21:e4:3e:ae:cd:
96:30:58:8b:ff:f6:13:df:13:df:c7:61:ac:0f:02:
23:fd:77:0d:df:d2:d7:f1:21:84:45:9f:7f:ea:18:
84:df:66:7d:f7:25:1e:d6:39:3b:74:83:fa:9b:c5:
7c:2a:a4:e6:ae:b8:0d:41:6f:d2:54:ab:2a:8c:18:
31:38:ad:36:39:22:96:46:96:38:18:9d:4a:15:02:
a8:83:24:fc:04:b7:51:c2:92:dc:32:ca:3c:c5:d1:
52:f5:8f:20:36:63:94:29:78:48:7b:4e:63:ab:8d:
6f:9f:c9:42:a9:fd:2d:14:3c:69:59:11:00:03:41:
38:1a:c0:30:08:a3:74:21:cc:6e:94:b5:06:7f:b4:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6F:E6:DB:4F:EA:61:8C:D7:33:13:86:B4:4F:75:56:24:7F:F5:BE
X509v3 Authority Key Identifier:
keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e9:b6:bb:02:76:4e:bd:6f:0e:73:f8:6b:9d:e8:45:72:1d:
a9:3a:75:84:94:02:b0:1f:1b:7b:66:b9:ac:74:6d:5a:28:06:
a1:7d:66:98:9c:cd:90:ad:b1:97:5d:a8:70:52:9b:fa:d6:4e:
da:6b:20:5c:41:25:f2:e6:e6:17:76:e6:71:62:4e:0c:cb:e9:
f8:02:c5:37:8a:be:52:9e:64:6b:b6:bd:c0:b6:37:b9:b2:ea:
79:90:10:f9:12:00:76:66:e2:91:3c:aa:97:5c:78:49:ee:45:
6c:e4:cd:bc:b1:e9:ae:e7:02:a2:78:b7:8d:67:15:6b:46:4a:
e6:83:2b:e1:1b:c7:c7:a1:3b:0a:a6:46:a0:9a:75:9d:d1:bf:
71:70:07:0e:ef:32:ed:86:bf:9c:fe:f3:8c:cd:71:fc:b4:cd:
e2:c2:56:99:dc:c6:8a:be:fc:fb:e0:6a:a6:c4:80:04:31:25:
61:23:bd:8f:d1:1b:f0:f0:6e:98:f6:e5:c9:e2:2e:32:4e:70:
76:31:8b:5e:bd:6a:be:8b:d4:ef:80:a6:d6:9b:6f:06:74:af:
26:ab:8a:a4:ff:25:8b:01:5f:ea:a1:38:50:84:8f:b2:d5:bf:
a0:35:53:83:b4:ee:91:96:9a:8f:f6:df:53:92:f9:f2:9b:bf:
5a:eb:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:38:38 2026 by rpki-client