
$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier: UbS+KrtLeak64WLscNGSIv1CU9MiqLmLEY9CzjBATNg=
Subject key identifier: 68:1F:79:D6:BB:2E:DF:94:EB:9E:E1:3A:86:3F:EB:4E:D5:DD:A2:7C
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number: D4
Signing time: Sun 01 Mar 2026 07:51:38 +0000
Manifest this update: Sun 01 Mar 2026 07:51:38 +0000
Manifest next update: Sun 08 Mar 2026 07:51:38 +0000
Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: uhsKW9lk/foxaD6XuOyS1KWMyyCgzQF5E45Owo1fsJE=)
2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: yxYbVT0G3FIFNHaQq21RRd4odOx6/tGbrON4MVMOYMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Validity
Not Before: Mar 1 07:51:38 2026 GMT
Not After : Mar 8 07:51:38 2026 GMT
Subject: CN=69a3f00a-68ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:dd:72:23:ba:85:dc:c5:48:f4:9d:35:43:
45:f0:1c:27:6a:0d:9d:17:cc:c6:13:ce:30:68:e8:
63:52:20:b3:00:66:d9:c1:fb:1b:31:75:76:d0:e5:
36:df:71:b2:b9:37:a6:46:b4:bd:f3:46:5f:22:19:
b6:ae:67:64:2c:25:bb:91:f2:77:f6:35:30:19:fd:
85:ba:89:45:9e:f1:18:97:40:08:e9:69:be:53:8c:
c3:f4:ff:cc:5e:72:d8:0d:b5:86:3d:3c:2e:86:2e:
84:45:63:a2:07:34:ef:4b:7c:3e:06:c8:38:39:98:
69:5b:7e:b0:b3:60:66:7f:72:6e:0b:46:44:f4:90:
fe:97:ae:51:fb:7a:c7:28:80:2c:9c:44:e1:d1:bc:
88:84:bb:1b:c8:36:7b:6b:f1:c0:8a:f4:b1:42:37:
11:e2:3b:7c:da:aa:e1:79:60:7b:c1:96:d3:fe:27:
55:9b:d1:98:2a:98:f1:47:18:42:14:19:0a:fd:7d:
14:67:95:95:13:8a:2d:ea:b3:31:f0:72:08:89:6b:
63:38:ae:bf:34:8f:60:f3:c5:e4:da:66:a9:8e:f1:
f7:bc:09:ba:6b:e0:06:c8:4a:0e:57:49:e2:4d:c7:
d1:92:95:3f:ae:58:bb:84:4c:9f:9a:e0:64:81:a2:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1F:79:D6:BB:2E:DF:94:EB:9E:E1:3A:86:3F:EB:4E:D5:DD:A2:7C
X509v3 Authority Key Identifier:
keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:00:b8:6f:14:0b:7e:6a:97:75:76:47:4a:6f:7e:93:7b:36:
ec:08:90:30:56:7a:0f:4e:50:1c:78:01:6d:c1:d3:66:16:b6:
0b:78:1c:ec:5d:4d:bc:e1:8c:a0:ff:45:25:95:4a:30:9a:f1:
2e:bd:e7:e7:84:9c:9b:1e:47:fe:18:9a:14:e7:9e:ca:6d:98:
9d:34:19:16:31:3a:b6:4a:e8:1c:56:4b:dd:3d:74:57:0c:84:
a6:72:3a:0e:5b:ed:e6:b0:5e:14:94:0f:44:81:cc:83:30:a7:
e6:06:00:3f:e2:fb:0f:b8:66:b0:22:bf:18:2b:ab:21:b5:55:
b4:34:8d:9d:64:aa:6c:5e:d6:da:3d:c1:20:d6:dd:df:45:74:
85:9d:01:b8:1d:f1:c9:38:d8:52:a0:eb:de:18:2d:76:a7:ab:
e5:4b:ca:33:34:0c:88:27:cb:f6:9b:fe:94:15:b4:23:d2:15:
fe:ae:35:12:88:b6:8a:89:b6:fb:4d:2e:1c:9f:6a:ac:74:96:
b7:db:8d:d8:7c:c3:e8:bd:ba:a1:8d:fb:77:3b:f8:b3:b6:70:
81:a4:88:2d:1c:3e:1f:b1:55:5b:d1:65:a2:7b:87:ed:d9:f8:
ad:3c:83:b9:58:32:58:e1:ad:33:ad:94:19:2a:d7:61:1e:a4:
d6:92:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:45 2026 by rpki-client