
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json)
Hash identifier: 8Se0IBMVIAxdHbMle7V8De5Bbg//4xthV3ZH7bbBDiI=
Subject key identifier: B2:51:86:91:2C:1A:14:EC:0A:14:3E:23:B8:8A:C5:9A:F9:AE:6F:4C
Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Certificate serial: 0589
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
Manifest number: 0582
Signing time: Tue 06 Oct 2026 23:23:29 +0000
Manifest this update: Tue 06 Oct 2026 23:23:28 +0000
Manifest next update: Tue 13 Oct 2026 23:23:28 +0000
Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: tPlrwWfPlqyN4qJ8L1FD1RcZV7k27yR31LQ7yM8YY+s=)
2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: 7nE2sjWaqJwApCwjBQjwmTVTdgonybAUx01R5hVKq1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1417 (0x589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7E61, serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Validity
Not Before: Oct 6 23:23:28 2026 GMT
Not After : Oct 13 23:23:28 2026 GMT
Subject: CN=6ac582f1-0ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:63:a7:08:17:fe:58:94:2a:1b:36:49:6a:
0b:48:fb:ad:64:37:9d:fb:17:f8:97:6f:9a:c2:27:
fc:aa:96:49:4b:98:45:25:e1:0f:08:59:be:6b:c0:
42:26:2d:b0:33:84:71:39:90:78:b0:7f:1c:b2:13:
81:5b:f7:a8:45:ca:c3:b1:bd:f3:6d:8e:94:1a:af:
bf:ae:de:75:10:dc:66:99:94:a6:4a:36:34:29:3e:
f2:f2:bb:2e:8a:4d:74:ff:df:e2:6a:a6:5b:62:5f:
2e:52:26:bd:39:2f:20:f1:21:e0:86:8e:c1:e3:6a:
7e:c8:40:47:bf:81:6b:b5:70:4a:ca:50:a9:97:8b:
fb:72:25:f5:f5:dc:b3:69:5d:01:8a:7c:a1:bb:9f:
f0:47:ad:f6:83:73:b7:6e:30:5a:df:c3:63:46:af:
ef:b7:bd:78:74:ca:c9:5d:bc:ad:60:42:f5:0b:96:
fe:32:15:d3:99:d6:32:cf:b3:f7:05:76:61:ca:ed:
47:e1:8f:15:c7:8b:81:03:68:ab:6e:4b:cb:08:ac:
ae:51:e7:00:00:2f:25:72:f8:fe:6e:c5:4e:cd:0e:
87:98:42:58:7e:9d:06:ea:3c:db:5c:65:a2:7a:39:
4f:c2:64:e4:00:08:74:3b:9a:ee:f8:cc:a7:c4:f1:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:86:91:2C:1A:14:EC:0A:14:3E:23:B8:8A:C5:9A:F9:AE:6F:4C
X509v3 Authority Key Identifier:
keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bd:50:eb:2e:b4:fc:2b:a7:97:a8:60:e7:d7:b5:18:ed:e3:
05:f5:0b:e0:b7:4d:d7:bf:7c:3c:23:79:e8:07:d2:fc:47:1d:
75:e4:6e:42:52:4a:5b:6f:c6:a5:99:02:3d:30:60:05:96:4c:
6f:87:36:81:8b:56:dd:26:8f:41:d4:d1:e0:5a:ff:84:da:f7:
f6:ad:c7:d1:82:5f:57:0f:8e:93:09:2a:7b:e0:f9:c8:6e:b3:
5b:82:f9:fe:5c:0b:0b:b9:95:d9:ea:8d:28:12:29:bd:50:b7:
92:a5:a2:0b:0d:50:39:46:cf:b2:26:63:db:d1:05:d0:bb:f5:
cc:fa:e8:62:8a:08:9e:37:04:3a:b4:cd:e9:2f:8e:3d:12:d5:
40:5b:31:b5:69:b7:9d:9c:11:bb:91:05:3b:c4:5f:e1:4d:58:
66:27:8d:6e:71:b9:4a:5b:b5:5d:89:7e:9f:f6:29:8b:56:79:
c7:03:99:1e:d8:42:76:dc:e6:17:35:2e:8e:5e:13:59:85:64:
51:10:a1:2c:f9:48:e2:49:c9:ef:5c:fc:e7:26:b1:93:c4:87:
0b:81:2e:5c:a0:43:5e:cd:a9:af:ac:f4:97:63:aa:99:53:dc:
02:bb:77:52:c5:ff:75:98:9e:7e:98:9b:cb:9a:40:c9:af:f7:
a6:ae:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:19:07 2026 by rpki-client