
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json)
Hash identifier: EIi4qmwlSrR16GCMrdD1RWoxt4BMTbZKotrdrqB+Jkk=
Subject key identifier: 99:40:4C:3C:D0:CA:4F:C1:8E:FD:44:54:9E:20:11:69:61:07:42:A4
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
Manifest number: 0213
Signing time: Fri 11 Sep 2026 03:10:59 +0000
Manifest this update: Fri 11 Sep 2026 03:10:58 +0000
Manifest next update: Fri 18 Sep 2026 03:10:58 +0000
Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: /H0TkDHk82TU/rzUFL8qK7ojsyRQcGP21y+sxu5RWgo=)
2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=)
3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Validity
Not Before: Sep 11 03:10:58 2026 GMT
Not After : Sep 18 03:10:58 2026 GMT
Subject: CN=6aa37143-818b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:92:23:31:13:04:81:41:0d:ca:1b:6c:16:
09:04:e6:28:f4:2f:e7:22:ff:23:43:46:6d:81:b8:
62:de:82:c1:65:9f:c8:9d:39:65:1d:53:f9:32:bb:
23:67:49:aa:34:d3:f1:3f:31:9c:fb:83:11:55:20:
ee:e9:92:d3:c6:cb:8b:29:e2:fb:e4:c8:6b:02:2e:
65:1b:4e:aa:fe:03:c3:98:68:96:ee:37:1d:2b:aa:
96:eb:f8:2b:72:f1:6d:4d:5c:7d:27:03:32:26:bc:
b7:1a:65:03:29:f1:d1:ef:8d:78:a9:f6:11:19:e9:
ac:48:e9:8e:60:13:09:38:82:eb:ae:40:10:68:50:
6f:bf:f1:47:79:1d:ca:d2:f2:d2:e7:33:04:9d:c7:
6a:57:68:bc:f8:7c:e3:a3:dc:7e:18:fd:85:f2:f9:
02:d1:10:c3:45:30:07:dc:95:cb:11:8a:20:05:2f:
ed:b4:51:7e:10:bf:f4:dd:fb:2a:7e:61:81:78:7e:
11:5c:83:52:24:ef:db:e3:c1:c2:96:f2:6f:57:a1:
39:28:04:23:e6:06:00:fc:d7:2c:c8:b3:b7:08:07:
69:9f:9d:c9:d2:b0:9b:b8:eb:df:f9:fe:7b:db:73:
49:33:ae:c0:42:12:37:6f:62:03:b3:e3:2b:be:2a:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:40:4C:3C:D0:CA:4F:C1:8E:FD:44:54:9E:20:11:69:61:07:42:A4
X509v3 Authority Key Identifier:
keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:3f:27:6c:b4:86:b9:c4:f6:1b:9f:3d:b1:57:51:ed:c0:0e:
a3:19:16:6f:db:38:85:23:4a:3c:21:a7:96:af:7b:66:7e:6c:
b0:06:18:0c:80:05:0a:34:33:5f:a6:4f:e9:15:be:b5:47:08:
db:ff:b0:5b:ae:27:ba:81:25:eb:e8:4d:c3:94:19:ad:d2:45:
e7:6d:ab:d6:31:a1:9a:92:58:39:f9:43:fa:c6:a5:77:d4:2d:
61:09:e4:fa:70:0d:89:89:e4:ce:0f:7f:29:d8:6b:af:4b:59:
20:2b:c2:7d:9f:eb:ff:d9:85:1e:d2:20:80:e4:95:d3:04:03:
ff:80:a8:ff:7f:11:8e:f1:7f:15:e8:44:e6:21:35:9b:b4:6c:
d2:5b:dc:65:ed:39:35:39:2c:90:06:a5:b0:93:af:61:a4:9a:
79:89:86:fe:b6:8b:68:f2:ae:3c:cd:a7:4f:90:9d:f7:35:56:
da:12:c7:ca:6b:29:a9:37:33:46:bf:5d:fe:15:9a:e1:46:46:
f3:3d:e3:65:bb:3f:22:1f:7a:b4:66:14:30:e8:37:ea:12:2d:
c3:c5:b2:1d:33:e5:7f:82:22:9c:d4:d9:c0:55:99:fc:1f:b9:
9f:22:a4:5c:92:b9:a7:9f:30:57:39:dd:4c:38:36:c3:dd:46:
9f:53:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:57:10 2026 by rpki-client