
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
File: XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json)
Hash identifier: yGIAsMELdXM9aQKD5IW6EokTBTEpzsvMqRTLMaOYorw=
Subject key identifier: 81:AF:9D:2B:62:7F:41:F9:5A:F6:AB:25:B0:10:41:0C:0E:33:19:D1
Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F
Certificate issuer: /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
Certificate serial: 03CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
Manifest number: 03C3
Signing time: Sat 03 Oct 2026 00:52:55 +0000
Manifest this update: Sat 03 Oct 2026 00:52:55 +0000
Manifest next update: Sat 10 Oct 2026 00:52:55 +0000
Files and hashes: 1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: J9YWNmTBi2NgZDXluxQPzHtUfdprfj2k/lilFsSEiF0=)
2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: 8YdQLsUZCKBzraMiXXqY3e6CtfbysTpmjgszsI0exrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl
rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
Validity
Not Before: Oct 3 00:52:55 2026 GMT
Not After : Oct 10 00:52:55 2026 GMT
Subject: CN=6ac051e7-6d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:aa:b3:63:ab:05:79:77:f8:6c:7c:82:92:
4c:24:3d:a1:10:3e:ee:59:a1:b3:c9:b7:a4:67:16:
d2:e4:9a:77:7a:15:81:8f:e1:84:7e:66:03:5d:2c:
de:2f:88:ac:91:dd:a6:05:3d:c4:58:72:19:31:de:
e1:8c:5f:d7:b3:ec:41:a3:a6:ec:2a:62:af:7b:67:
4f:22:07:31:83:8b:0b:ef:2b:be:b4:71:6a:95:bf:
ae:07:d0:18:63:5a:80:2e:4f:ae:5a:ab:c9:b4:88:
e5:8c:a7:5c:aa:84:89:13:64:2a:b9:9c:6e:77:d7:
52:e4:2a:58:46:d9:00:dd:c8:3f:92:e6:50:c1:b7:
dc:6a:dd:ee:b7:cc:0e:dd:53:e1:d2:b0:cf:95:51:
c1:8c:39:d1:e9:08:0d:5f:26:57:29:66:c4:92:45:
62:b1:5c:b7:1b:4e:4e:57:d4:e9:5b:a1:c8:1e:c0:
8d:4d:b6:9d:d1:6f:70:3b:58:f0:74:14:73:95:8f:
83:0c:25:e5:55:63:28:3d:05:62:8a:5a:61:85:8b:
6d:fd:ae:e1:fc:d3:29:21:3a:22:88:c1:ed:ea:5b:
af:3c:b6:3a:6b:51:06:63:ad:96:52:e1:97:2e:1b:
02:dd:4d:1f:ea:79:38:a9:2f:6a:56:16:ea:4f:05:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AF:9D:2B:62:7F:41:F9:5A:F6:AB:25:B0:10:41:0C:0E:33:19:D1
X509v3 Authority Key Identifier:
keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:76:a3:d5:7b:dd:fb:8d:a0:6a:6a:01:35:21:fc:f8:43:4e:
d0:ac:96:fb:99:90:5f:e3:8d:f4:53:96:61:d0:db:9f:55:2e:
30:ea:7f:00:32:11:81:c7:21:f1:18:01:fd:fe:e4:35:6e:4a:
4d:e9:14:13:4c:98:55:10:06:63:fc:db:3a:d3:bc:47:58:8b:
ce:8a:aa:4c:43:66:be:47:f2:da:d2:84:58:15:56:dd:78:c8:
9f:14:95:93:6b:90:03:ac:13:7d:84:9a:82:5a:68:49:eb:e2:
ca:72:ae:83:36:35:c4:f9:d9:a2:42:22:db:50:fc:a0:dc:43:
df:09:1f:cd:06:84:47:18:0f:ce:a9:c3:f1:79:55:77:55:2f:
54:8b:2e:f5:be:b7:d5:6b:b0:aa:41:31:38:2e:0b:36:14:68:
44:c2:a7:8a:2a:78:d2:83:d2:cd:ba:e3:17:18:15:28:6c:e7:
3f:0c:84:63:22:da:76:41:85:95:ed:7f:b9:de:fb:12:f2:41:
21:2e:d5:60:36:cf:5e:b2:6d:ff:d6:7a:80:65:5d:86:10:ed:
9e:d9:cc:d6:84:b0:ea:1b:ff:af:a7:6a:ed:51:b3:84:da:1f:
55:dc:aa:44:cf:0f:b2:55:3b:15:26:47:f8:54:e3:1f:5d:4d:
f4:d6:17:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:42 2026 by rpki-client