
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
File: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft (raw, json)
Hash identifier: /vXjz/At0E1u/ooJxvsA+lgEE4RmhDIJ6/fF88YwNLU=
Subject key identifier: 90:B1:FC:E7:5B:48:3C:59:A9:26:E8:D1:7D:B1:F9:83:77:2B:E3:B7
Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
Certificate issuer: /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Certificate serial: 09FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
Manifest number: 09F5
Signing time: Sun 04 Oct 2026 19:51:13 +0000
Manifest this update: Sun 04 Oct 2026 19:51:12 +0000
Manifest next update: Sun 11 Oct 2026 19:51:12 +0000
Files and hashes: 1: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl (hash: QoMmOHQOFnHDOgfxxkpZFYlDhO0QRXndabDAG3CgESM=)
2: A862F866AA3111EA9E08C324C4F9AE02.roa (hash: /iSHCrcBHYNHKFSx10qXjyornrh9oW58iGZxMDR9DOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2558 (0x9fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4BD2, serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Validity
Not Before: Oct 4 19:51:12 2026 GMT
Not After : Oct 11 19:51:12 2026 GMT
Subject: CN=6ac2ae31-5fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:f7:e7:6a:77:bf:7a:0e:2c:14:fa:2b:a5:
2d:4f:c4:d9:f4:b5:66:2a:a1:c2:f3:80:01:69:ec:
50:22:ba:c1:8f:ce:96:29:b2:f9:0b:05:c6:b2:17:
9b:95:30:f5:bc:8c:67:9d:19:37:33:31:1d:0b:88:
46:1a:0b:a9:b4:f8:9a:c8:ed:2d:40:46:a7:be:eb:
76:9c:3f:96:57:7a:dd:80:c4:67:95:8a:15:b8:2a:
d8:1f:34:56:03:d3:1c:1f:d0:60:5f:90:35:4d:ef:
c3:4d:49:a1:e4:8f:ba:fb:2e:9c:35:54:b0:74:2a:
91:c3:b1:f7:90:4e:c1:2d:57:05:86:c4:8e:66:d0:
f2:1d:fa:11:16:d9:32:0b:9e:ba:be:18:6e:9a:dd:
5b:55:da:f7:ef:e6:59:cc:5b:60:f6:4a:cc:93:1e:
96:89:4c:d5:8f:ff:8d:77:92:7b:2a:e6:78:cd:d9:
f7:d1:3e:44:c5:1d:2c:39:6a:94:c3:d8:a2:69:22:
02:fb:2c:94:d2:25:97:5d:fc:2f:f1:79:1d:49:6d:
68:42:23:12:f4:8b:56:79:1a:15:9c:80:67:1b:c7:
15:3a:7a:c1:0d:04:cb:84:ea:c3:bd:d9:39:67:68:
7c:cc:6d:26:18:82:41:ed:ed:2f:5f:0c:b7:a8:d5:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B1:FC:E7:5B:48:3C:59:A9:26:E8:D1:7D:B1:F9:83:77:2B:E3:B7
X509v3 Authority Key Identifier:
keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f4:22:89:ff:2c:e8:b1:1a:d7:8f:f0:18:ac:5e:cf:b6:bc:
ed:45:f0:06:05:92:47:ff:68:d0:87:d0:dc:d3:93:c6:2c:ed:
d5:ea:29:93:7a:20:bc:10:aa:ec:79:33:94:bf:b0:29:39:0e:
79:23:45:9e:6a:a9:24:22:d8:2e:8b:b5:56:6d:8b:1e:2d:53:
dc:06:ad:9b:f5:7c:e0:44:00:18:a7:8b:1e:7f:df:0b:c8:49:
15:39:1c:ef:df:ed:c6:de:cc:a5:87:c2:c5:43:d1:54:6d:41:
aa:95:c8:d6:01:f9:f6:78:ab:89:d1:10:4e:00:68:0b:0f:5a:
0c:41:c3:8e:ab:2f:84:b2:d0:5e:90:a4:ae:62:f2:f4:3f:e7:
8f:5c:9d:60:47:c9:99:52:10:c5:8e:03:a2:83:e6:c8:82:eb:
ab:12:6f:eb:40:65:58:9c:dc:88:00:72:68:d1:25:6b:f3:06:
c6:8c:0f:d5:da:ee:84:f4:be:34:5f:ff:0f:d5:a7:4a:1f:a4:
d7:b2:51:3b:1b:f8:5c:21:ba:aa:05:c5:58:d6:21:5b:9f:08:
82:6c:9a:8e:b9:ab:1b:b7:18:69:d9:44:56:1d:1c:6d:47:9e:
ad:63:8a:fe:f9:59:e0:6f:b9:73:16:8e:bb:9d:52:48:81:a5:
af:8f:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:56:37 2026 by rpki-client