
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier: mN+5pAW+PxLV1IGmNu6UqO8/BF3WuVyTFwJTLaJZ4eE=
Subject key identifier: 03:0C:0B:AF:0A:26:1A:54:71:21:81:54:B6:79:36:84:95:63:00:68
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial: 264F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number: 2633
Signing time: Sat 04 Apr 2026 15:39:09 +0000
Manifest this update: Sat 04 Apr 2026 15:39:09 +0000
Manifest next update: Sat 11 Apr 2026 15:39:09 +0000
Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: nFfxygHJo55cR/35SDXwE022hAlqDC9wZKibaf2xY8w=)
2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: OkYL9yCBMETHaZgdXd4jZyNgPnKLNw6+6FHJVPhZs8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9807 (0x264f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Validity
Not Before: Apr 4 15:39:09 2026 GMT
Not After : Apr 11 15:39:09 2026 GMT
Subject: CN=69d1309d-4830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:3e:e6:14:70:26:77:96:41:ed:73:cf:cb:
93:be:4c:dc:0c:27:3a:10:77:ed:16:86:75:2a:64:
64:fb:94:6c:ce:57:c3:ba:c6:c5:a1:70:e5:4c:33:
f5:ff:f7:a4:46:42:b1:0c:6e:6a:8f:86:dd:4b:3b:
d7:b9:9b:65:db:e0:51:7e:75:f6:d7:d4:c5:08:c3:
49:25:2f:da:52:47:71:0d:6d:6f:99:ca:d8:9b:da:
13:9c:61:c6:32:35:c1:1c:e1:fc:18:56:65:fc:be:
b2:cc:d5:be:b6:fe:0c:02:26:e5:e1:df:b0:43:f9:
2e:f3:58:bf:7a:e7:e7:6c:df:ea:29:59:be:8c:e0:
c7:cd:f3:bb:06:0e:fa:1f:2d:5e:ea:85:51:7e:6b:
1f:4e:b8:d2:45:59:87:7d:13:a8:7d:ce:18:cb:ef:
ff:27:04:ef:b1:17:11:aa:a4:8e:9c:18:91:1e:6a:
a0:b6:cb:e6:5f:05:23:e0:7a:1b:f5:6a:d7:15:fc:
62:2e:59:2e:ec:45:a2:e6:bf:c1:6a:9c:c2:c5:07:
db:4c:ca:f0:52:1b:6c:d1:be:d4:0e:ea:c7:64:70:
38:d8:1d:39:7d:f9:5e:09:24:41:57:70:83:63:62:
98:3d:ef:6f:8a:b2:95:33:d7:ad:e0:ab:98:e2:a3:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0C:0B:AF:0A:26:1A:54:71:21:81:54:B6:79:36:84:95:63:00:68
X509v3 Authority Key Identifier:
keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:d6:75:62:cd:bd:e9:46:d7:ec:f5:66:2b:f1:a8:f4:6a:
17:7d:68:bd:ae:82:9e:1e:74:f3:a0:55:41:a3:d2:ad:1c:7f:
23:f0:88:99:45:e8:47:02:b0:42:d4:65:8e:f9:36:c3:91:70:
8d:4e:02:f8:a7:e2:19:f2:2f:03:59:fa:25:76:47:16:cc:8f:
a8:ac:7b:07:d4:16:21:5f:8d:a5:be:a1:8d:12:1b:2f:01:b9:
f4:f1:1e:17:a1:28:bf:9c:f0:ad:64:77:2f:81:61:a6:b9:a1:
67:7f:d6:6c:e4:a6:0e:d6:9c:b7:9b:29:f9:a8:fd:01:72:1f:
53:b4:56:ab:20:7b:e1:8c:18:8b:db:09:e8:64:e4:80:9e:02:
cc:7e:af:d0:a8:3a:e7:5c:a7:9b:2a:f5:63:4b:85:e4:f8:25:
a3:dd:ac:9a:50:8f:3a:20:7b:55:21:40:dc:83:e4:68:5e:cc:
8f:0d:e9:63:00:2e:63:34:a3:e4:b5:31:cd:0a:33:f8:69:61:
ff:f1:2b:61:b4:d2:34:61:1c:a7:cb:38:e9:81:c9:e4:fc:79:
d7:2e:41:01:d0:3a:86:b8:04:56:ef:98:bc:34:a2:ed:a7:24:
f7:da:0b:85:77:4c:b4:8d:95:79:23:01:b1:7c:ec:9b:32:73:
d5:50:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:34 2026 by rpki-client