
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json)
Hash identifier: RkMIpwPZFw36O8+KNgTc+b5bk+dd0CHncDW7u72o5os=
Subject key identifier: 07:73:F0:26:06:9B:C8:35:5A:CA:39:CB:6E:1B:23:0C:A6:03:4F:95
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
Manifest number: 022B
Signing time: Thu 29 Oct 2026 03:29:55 +0000
Manifest this update: Thu 29 Oct 2026 03:29:54 +0000
Manifest next update: Thu 05 Nov 2026 03:29:54 +0000
Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: WIQl8uk56K0MmN9rFh0pj2gPUrP05cQP+HReacoTz5A=)
2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=)
3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 03:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Validity
Not Before: Oct 29 03:29:54 2026 GMT
Not After : Nov 5 03:29:54 2026 GMT
Subject: CN=6ae2bdb3-3541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:27:f3:d2:1b:8f:3e:32:55:9e:2d:7b:20:29:
ef:be:8f:de:2e:c9:e5:b1:16:7f:ba:74:07:e8:1d:
88:f6:46:54:89:eb:31:a5:0b:ab:fd:9b:50:9d:cd:
64:bc:39:fe:8d:fe:7b:fb:80:2e:ec:13:87:3d:57:
07:a3:76:b9:39:2f:af:21:70:17:b5:1f:0e:fd:0c:
76:82:49:f3:13:c4:19:43:4d:67:34:42:86:a0:56:
ba:91:26:94:26:e6:46:06:c3:dd:54:61:15:34:14:
61:02:72:55:f8:f1:40:2b:e4:42:29:5a:2b:a5:79:
a9:87:1d:af:d1:55:44:45:48:bf:97:15:c4:60:0f:
b3:96:52:27:2a:24:98:32:8c:82:73:1d:51:e8:50:
e0:7d:23:36:1b:47:cd:54:2e:d3:c4:e4:75:a8:46:
fc:20:f3:98:37:37:37:ea:8b:17:56:cd:c4:1f:4c:
c1:d3:39:b1:3f:ca:2b:c0:f0:3b:4c:35:e9:da:92:
09:33:bc:51:35:9f:e0:fb:e0:55:2b:0e:03:8c:1b:
f5:ca:ab:da:68:3c:6b:ed:79:cb:c5:44:4a:06:6d:
2c:e9:e4:1c:42:01:75:88:96:ad:b4:ef:1e:d6:10:
db:89:3e:67:64:37:0d:21:c9:c3:65:2b:8a:b9:3e:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:73:F0:26:06:9B:C8:35:5A:CA:39:CB:6E:1B:23:0C:A6:03:4F:95
X509v3 Authority Key Identifier:
keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:5b:eb:56:98:21:7b:ac:9f:7c:bd:d5:0e:fc:c5:23:b8:4a:
d7:b9:f7:56:e1:d5:96:3f:73:04:1e:c1:cb:84:f7:6b:e5:d5:
2b:36:2a:8f:d4:71:46:75:ec:a3:17:3d:31:26:e7:7e:63:12:
48:4a:d8:de:b2:d6:de:bd:7f:64:a7:2e:5f:d2:50:e5:58:2f:
05:0f:03:7c:9d:6d:6e:fa:8c:e8:7e:0c:f1:7a:21:6d:53:d8:
fc:04:7d:80:53:f0:35:76:8b:3a:01:8e:bd:5b:51:74:71:44:
ae:bf:5e:78:85:4d:eb:25:0b:79:ad:aa:98:d9:fd:19:3b:a9:
68:23:b1:0a:03:13:1f:f1:0b:72:eb:a0:c5:ff:a6:e5:17:ab:
2f:6c:31:af:43:02:39:ba:3b:36:b3:32:fb:ec:9d:d6:96:6c:
3e:a0:38:8b:91:26:4a:37:70:67:ba:5c:5f:ab:3a:af:01:95:
46:51:f0:08:7f:46:80:f0:e7:89:60:86:57:94:1a:2c:59:cc:
39:46:cc:25:98:31:d0:2b:38:17:98:6a:b8:a1:17:e3:9d:e9:
91:e7:b7:55:25:5b:94:07:bc:4c:f9:32:ea:2a:4e:60:87:f1:
f8:55:26:86:7a:8a:07:3d:f2:1d:d4:1a:6d:5a:26:60:ba:64:
a7:11:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:29:22 2026 by rpki-client