
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft (raw, json)
Hash identifier: /vnhmOJ7RA6c57fF9w1PWGWoZ06ftiF5eA5G0wEIZDQ=
Subject key identifier: B0:C0:8B:00:39:FB:4A:8C:49:02:FD:D7:6F:65:98:C1:91:3C:48:4F
Authority key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
Certificate issuer: /CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7
Certificate serial: 04AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
Manifest number: 04A5
Signing time: Sat 26 Sep 2026 23:58:22 +0000
Manifest this update: Sat 26 Sep 2026 23:58:21 +0000
Manifest next update: Sat 03 Oct 2026 23:58:21 +0000
Files and hashes: 1: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl (hash: IkM0A3LIm21DNCuNUBTwpFljTsrQBcycJFqOMm2/v1Y=)
2: 5ADF4C92956811EC9028F155C4F9AE02.roa (hash: oP7ajvSBOi8rYgtfwAx6v0p5MUB3I81Nl5lQOdGX7pI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl
rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1195 (0x4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7
Validity
Not Before: Sep 26 23:58:21 2026 GMT
Not After : Oct 3 23:58:21 2026 GMT
Subject: CN=6ab85c1d-3bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:ff:c1:70:01:0a:cd:b7:c9:99:6c:a0:6f:
2c:a5:4d:8e:6b:dc:56:09:9c:45:b1:7d:57:c9:18:
5d:da:e0:62:c6:3c:1c:73:9b:89:f7:ca:f3:02:bc:
e7:44:28:36:16:2f:6c:81:32:60:b9:ad:c4:1c:8a:
ec:38:0c:f3:25:a3:42:5a:79:09:4a:ac:72:a3:93:
58:b5:2c:ef:0e:f6:d4:ce:b3:b8:93:80:0c:b5:41:
48:1e:79:c4:ac:10:99:2a:40:6a:e1:ef:09:13:d4:
dc:18:76:e3:73:a8:19:0f:c2:ce:35:78:ba:df:24:
1e:18:f5:eb:35:48:55:80:d4:5b:4f:31:f6:17:32:
8f:a4:f1:a6:d6:e6:90:16:c6:4c:b3:ac:14:2a:01:
d2:e9:c7:c9:70:aa:c5:bc:7e:3d:6a:3b:88:3e:e4:
e2:66:14:05:63:90:d2:53:99:42:3d:18:95:1b:c5:
51:7c:45:da:5a:67:fe:9f:cf:67:5a:a7:76:fb:6f:
91:08:6d:cf:cf:b7:05:8e:29:d0:67:ae:14:66:ca:
86:e1:e7:31:3a:87:09:73:1b:95:4e:7c:f6:b5:9d:
bc:ae:f9:1e:33:24:8a:85:f9:3f:99:8c:99:5a:95:
61:fc:87:90:f0:95:d3:2b:d0:69:c4:bd:95:9a:9e:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C0:8B:00:39:FB:4A:8C:49:02:FD:D7:6F:65:98:C1:91:3C:48:4F
X509v3 Authority Key Identifier:
keyid:C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:a9:33:c1:c8:3b:69:68:a8:b0:2c:17:32:3a:4d:6c:13:40:
e2:ee:bd:f3:e2:74:cd:92:24:f3:eb:71:d8:33:19:f5:1c:be:
e1:d2:20:d3:22:e3:92:62:6d:42:87:0a:13:79:9f:a9:17:a0:
4a:4f:c0:bb:49:0a:26:32:35:a3:ee:19:65:8d:71:0e:c7:e5:
05:c9:f7:bd:7e:97:d7:3f:ba:0c:ad:b3:11:18:3a:dc:3f:c1:
fe:2f:d3:ae:bf:a0:fb:1e:aa:8c:e8:a3:ea:7f:55:f4:ac:fe:
22:6e:ef:0c:c9:c9:84:e4:36:e4:ab:0f:0e:e1:3d:88:3b:58:
62:ad:29:33:60:d1:23:7f:3e:f9:5c:62:82:4f:39:e3:14:50:
07:5f:fd:bd:ef:da:11:f9:d3:bd:0a:1f:79:e0:14:7b:1c:a8:
41:9b:9f:51:2d:cb:16:78:32:61:9e:27:e9:2c:76:17:41:9f:
84:77:d3:bb:dd:69:30:cf:57:24:2e:3b:f5:60:d4:6a:ab:f6:
56:d1:db:fc:12:cf:8c:ad:4b:e5:e3:90:9a:43:0f:2a:7a:34:
5d:a2:bb:b6:98:16:ee:b2:bb:d9:07:bc:1b:01:fd:a4:e9:89:
85:1a:bb:24:da:1c:37:1e:27:9c:ad:d3:5d:17:d6:a2:58:22:
c0:8e:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:05:54 2026 by rpki-client