
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier: N96knpVWGC/xRzSzhKhVhmAnKN2sdJ/61QimE8bO32I=
Subject key identifier: D3:0F:AB:56:7D:E3:20:72:56:BB:10:B6:E0:C3:90:45:D2:AF:76:11
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number: 013E
Signing time: Wed 23 Sep 2026 05:16:19 +0000
Manifest this update: Wed 23 Sep 2026 05:16:19 +0000
Manifest next update: Wed 30 Sep 2026 05:16:19 +0000
Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: HhZj9s95J8FSxYXhUPLF7/PKXxBH9ZQ+lIhhMpp6gG0=)
2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 88RG+IBp3+3IKje/6h9nyZS5YfSLYuAiRdPmohXdymE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Validity
Not Before: Sep 23 05:16:19 2026 GMT
Not After : Sep 30 05:16:19 2026 GMT
Subject: CN=6ab360a3-c613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:20:45:86:b4:aa:6d:b2:9f:a1:15:41:02:
4b:8b:a4:e3:ff:b6:fb:e9:07:f5:28:8b:25:17:f7:
00:91:db:bf:06:87:b8:36:06:1f:2a:0f:0f:db:26:
03:d2:d7:22:34:66:1f:e0:dd:0f:aa:07:ff:dc:e8:
6d:8a:3e:f7:d2:a2:36:fd:cd:20:15:9d:32:4d:5a:
8a:4d:2c:9f:12:7e:c3:1f:6b:e8:8e:99:6d:24:1c:
40:3c:d2:4b:d8:ad:29:07:85:47:79:ba:fa:60:2a:
c9:e7:6b:9b:4c:30:81:d7:fe:de:f0:97:16:ea:4f:
52:78:d1:c0:50:c8:75:6f:29:ff:93:ea:6f:4c:c1:
8f:04:e2:95:de:18:31:7b:8d:9d:fd:e9:c3:d2:d5:
cd:90:ec:8b:2c:8e:e7:50:93:9e:a8:72:f8:b1:ca:
ba:d2:a6:e5:90:13:92:26:5a:0d:65:e7:63:86:8f:
08:2b:50:92:ff:5d:28:36:a8:fa:cb:b4:74:7d:8d:
06:66:36:c7:22:13:13:c0:63:a9:ef:d0:60:cc:78:
c8:e1:84:c4:58:f6:82:f0:fa:63:11:80:95:26:88:
78:58:90:3a:1f:5a:93:96:e4:67:4f:ef:ec:1a:dc:
08:81:e9:41:0a:4e:5d:9f:bb:53:20:e0:b2:c3:bf:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0F:AB:56:7D:E3:20:72:56:BB:10:B6:E0:C3:90:45:D2:AF:76:11
X509v3 Authority Key Identifier:
keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:30:6c:66:d1:17:e8:d3:36:c0:c5:f0:59:cd:a2:c0:e7:2c:
75:a1:29:ae:cd:da:ff:a1:6c:64:f8:f4:23:62:d1:64:03:02:
e7:fc:35:72:65:c6:84:fe:3f:af:1f:f3:09:83:1a:20:7e:56:
d5:50:82:f3:28:e9:07:ca:06:41:ee:2f:21:62:81:4f:b9:cf:
c4:f9:60:ae:50:b9:ec:fb:f5:35:0f:5d:fe:22:c9:9f:05:f6:
5b:78:f4:12:3a:f7:32:3e:76:6c:ae:90:12:8f:81:36:89:57:
48:fa:20:ef:8f:b3:53:dd:e3:35:fd:63:82:cd:58:da:54:ad:
9f:d5:4a:ff:bb:86:b5:e0:44:16:a3:d1:b6:34:39:d9:e2:62:
4d:ad:a5:5e:bd:3a:55:af:d3:b2:ed:f5:7f:80:0d:0e:bf:ad:
12:f6:76:3f:1c:d8:8f:50:2a:3a:2b:69:f3:55:f2:c5:d1:9c:
e2:f9:cc:28:6d:93:38:42:ed:e8:8f:5f:5f:6d:d3:7b:50:f0:
70:e3:97:a3:07:1f:55:d6:c6:c7:4a:dc:f3:02:02:91:8a:91:
94:40:f0:b0:51:6e:24:64:e0:cc:02:a1:2e:85:aa:ca:d0:71:
2f:cb:b7:66:38:5a:aa:09:6b:18:b8:cb:24:22:42:e5:58:93:
57:c3:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:18:20 2026 by rpki-client