
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json)
Hash identifier: JX1+/7oL5LCqC17IeV5F0093fWs5CSWErIgaKWYgouU=
Subject key identifier: 62:57:8E:BD:3C:9C:E3:61:CD:FD:2C:6D:A1:C2:61:8B:1F:75:51:66
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
Manifest number: 01A5
Signing time: Wed 09 Sep 2026 04:36:13 +0000
Manifest this update: Wed 09 Sep 2026 04:36:13 +0000
Manifest next update: Wed 16 Sep 2026 04:36:13 +0000
Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: 3UDF5oTiCMNvq7JSeTL200+TRJ4gvPkREH8N7ISYZcA=)
2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: bmVhAOvV7UXJ9islZHC9bY2mkqwPn0tjhiLeKB5QXHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 04:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Validity
Not Before: Sep 9 04:36:13 2026 GMT
Not After : Sep 16 04:36:13 2026 GMT
Subject: CN=6aa0e23d-53e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:80:c9:d4:ab:c9:35:f7:e6:f6:1b:bc:ca:
db:68:d2:8b:54:12:3a:27:02:6e:c3:39:e3:25:c6:
2f:7e:63:44:79:f6:50:00:ac:83:07:f3:4e:dc:e0:
9f:83:47:34:69:86:04:7b:a2:4f:1c:ba:a4:24:c9:
5c:96:f5:67:ed:d7:0f:47:f3:59:3f:4c:e5:9f:fd:
6b:e6:e2:d7:92:f1:6c:31:41:a7:9a:b4:94:be:f2:
37:54:3b:11:c3:d8:18:c8:f7:48:e4:7d:6c:f3:83:
99:da:66:0b:2a:18:b0:5c:53:02:1b:a6:80:d3:f6:
d3:2d:70:81:87:ae:0d:f1:d3:3e:9f:ad:b5:bc:d3:
94:e3:28:11:20:59:09:ac:bc:df:5f:25:6f:3e:93:
a7:7b:06:0a:68:04:58:32:75:03:22:73:c1:06:09:
61:5a:42:30:63:b8:e8:20:79:28:a3:ca:5a:aa:f8:
a6:d5:a5:07:2f:8d:aa:7d:25:d3:67:80:18:21:78:
d7:9a:99:fd:0e:b7:70:c2:74:13:50:35:e7:88:1e:
16:05:53:8c:ad:b9:3c:8c:5a:05:46:97:4f:3a:19:
90:68:54:16:83:7a:03:8c:e1:14:03:58:fe:d9:2e:
74:cd:a9:1a:ad:97:e8:bf:31:71:88:41:ba:60:27:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:57:8E:BD:3C:9C:E3:61:CD:FD:2C:6D:A1:C2:61:8B:1F:75:51:66
X509v3 Authority Key Identifier:
keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:1a:0c:c1:4c:7c:92:de:7b:52:3a:3c:fe:4a:b8:fa:b9:3a:
d9:54:7b:ce:4a:db:77:79:a6:35:25:2f:21:f8:5f:9c:7b:c7:
7a:4f:0f:55:d2:e4:f4:e5:01:17:96:58:40:62:74:f2:bd:fe:
ee:cb:b4:81:ba:42:ef:d9:a2:d7:33:1a:08:f2:96:6a:b3:b4:
a1:62:c2:17:72:b7:04:b9:05:ee:40:50:43:a2:d4:6f:68:75:
81:19:86:38:89:6e:c9:41:39:b7:dd:3d:a4:da:a5:d5:cc:30:
02:80:e2:b8:bf:0f:8c:20:7b:40:12:b6:4c:c4:fe:c5:60:69:
bc:98:6f:68:b6:6b:1f:1a:e1:81:fe:fb:f2:5d:a6:f8:9a:c4:
0b:37:72:6b:79:b4:64:35:07:9c:3b:c9:e1:57:3d:59:ba:b8:
66:6f:f6:ad:f1:e1:62:0a:af:9a:30:69:21:47:e2:f1:14:33:
c4:27:86:d5:e3:21:c5:f6:38:a6:2b:33:d3:71:c2:7e:38:01:
64:10:bc:90:6e:77:32:59:e9:60:7e:2a:75:19:cc:f0:4c:93:
6a:e3:19:a3:39:36:48:01:fc:93:71:68:08:db:03:36:62:6f:
30:ff:ce:4f:ac:64:07:9f:d7:9e:39:b4:da:a8:b0:ec:19:ac:
8d:aa:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:35:37 2026 by rpki-client