
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier: gM2aYIUZMZfNISyNJESSfPIB0A1ey5U4uTcuJfQuwgg=
Subject key identifier: 76:E1:FC:31:34:37:36:D9:09:8D:91:98:2F:27:25:42:93:38:1B:0A
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial: 26B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number: 2692
Signing time: Fri 02 Oct 2026 15:47:49 +0000
Manifest this update: Fri 02 Oct 2026 15:47:48 +0000
Manifest next update: Fri 09 Oct 2026 15:47:48 +0000
Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: rK+tGvOOWa16yPz6xAOVihz9JLqP3m90mhC0AOajuoc=)
2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: 8wXuS4+JORHsa5NlR+0rKW7paq6mS+3bQqZ2PWslzSo=)
3: _zFIF_w1IpGh0U1VEgKBMOKFSnY.asa (hash: qsfBtk2vYjShZQg62qEa1GR7o9AshRc7T3aD6G1Egno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 15:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9904 (0x26b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Validity
Not Before: Oct 2 15:47:48 2026 GMT
Not After : Oct 9 15:47:48 2026 GMT
Subject: CN=6abfd225-17f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:f7:3b:3a:a8:3e:ba:4f:95:9d:8f:f6:40:
62:ed:bb:f3:91:3f:52:de:1d:b0:dc:87:a7:07:30:
f2:33:7c:7a:c3:ce:f9:59:31:85:ff:77:c7:11:b6:
2c:83:3c:04:79:f3:00:87:52:2a:cf:fa:be:19:e7:
d8:a2:a2:34:45:04:64:70:1c:2f:34:8a:eb:86:ba:
5c:02:fe:a1:78:3d:f9:fe:cf:7d:b2:7f:81:a7:98:
57:a9:55:38:c5:ef:2e:18:ea:e7:fc:2d:fc:c8:df:
27:70:9f:2e:15:0a:cd:8e:1a:91:45:0a:58:8e:64:
5d:33:42:52:ed:3c:a4:fd:db:9d:75:53:52:84:ae:
ab:cf:8f:5d:40:73:11:5f:38:25:e7:d7:f8:1a:08:
6a:19:f5:d7:7f:94:c9:d8:2a:9d:c9:02:cb:2c:56:
bb:c2:a9:4f:73:ae:1b:ef:9a:a3:28:82:fb:fa:ff:
8d:22:e8:3d:89:33:de:1d:58:d4:eb:ad:bb:ff:48:
bb:72:02:70:d9:04:7e:6d:09:12:3f:90:ca:ee:1d:
5f:b8:d4:89:bc:fe:04:0f:61:d8:f4:57:ee:8a:a0:
4f:22:73:e3:10:a0:b2:29:11:46:f4:27:d7:15:b0:
0a:6b:d0:86:6a:51:e7:17:c9:48:1e:dc:fa:78:32:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E1:FC:31:34:37:36:D9:09:8D:91:98:2F:27:25:42:93:38:1B:0A
X509v3 Authority Key Identifier:
keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:fe:08:5f:59:0c:08:2c:69:53:86:2a:94:22:17:3f:1b:
b9:d2:fc:2e:66:79:9e:a5:6c:33:dd:a5:a4:48:e1:97:69:94:
14:45:af:11:dd:8d:d0:25:2d:16:6b:bf:05:3f:74:3f:00:8b:
d2:6a:78:d5:cf:7c:47:92:b9:b2:39:07:37:ea:ee:97:36:4b:
13:a2:a5:49:30:77:3c:42:78:a5:01:93:af:8d:d8:41:07:c3:
8c:0e:69:2b:54:54:34:d6:c0:26:dc:c4:f0:2c:c5:c2:20:a1:
f0:32:d6:8e:5c:a2:2d:c3:21:25:06:5a:81:81:ee:b0:ca:2c:
23:cb:36:50:05:22:9e:65:99:25:77:86:9c:fb:19:63:9c:fc:
5a:ec:fd:d3:0e:f7:25:22:81:e4:13:11:f6:f6:71:1e:64:f1:
1b:c1:c4:f8:8d:85:65:7c:09:ca:97:29:fc:48:9f:1a:eb:cb:
82:d2:ee:85:32:76:c2:3b:6e:0c:d8:fe:8a:80:02:17:fb:c1:
70:45:03:97:27:c2:4c:f9:52:4f:0b:9d:f4:96:c9:f2:06:43:
3a:79:26:b0:1e:a9:96:e6:84:6c:9b:56:4c:2c:23:f2:f4:e6:
bb:00:f0:4a:e6:f5:35:ff:10:8a:1f:88:f3:cf:9c:f9:f5:a6:
73:04:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:00:19 2026 by rpki-client