
$ rpki-client -vvf rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft (raw, json)
Hash identifier: TjBaTtO2aDcQG7RhH7klYgrFQEE9ITzDkHj24n0HlGU=
Subject key identifier: 32:04:0F:B3:F6:37:FC:4C:08:7E:B6:9F:BA:72:7B:C8:12:A2:58:56
Authority key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
Certificate issuer: /CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7
Certificate serial: 0458
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
Manifest number: 0452
Signing time: Fri 17 Apr 2026 00:06:07 +0000
Manifest this update: Fri 17 Apr 2026 00:06:07 +0000
Manifest next update: Fri 24 Apr 2026 00:06:07 +0000
Files and hashes: 1: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl (hash: ZFqJ2Cuq0UKeR/Ryrp2Bv2LxhRHUOeWQiZ4wo0fZzTw=)
2: 5ADF4C92956811EC9028F155C4F9AE02.roa (hash: oP7ajvSBOi8rYgtfwAx6v0p5MUB3I81Nl5lQOdGX7pI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl
rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7
Validity
Not Before: Apr 17 00:06:07 2026 GMT
Not After : Apr 24 00:06:07 2026 GMT
Subject: CN=69e1796f-7156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:df:97:4e:94:c1:90:e5:a1:b2:fa:60:a9:c5:
2f:f3:93:32:94:a2:05:b3:f3:73:0f:0b:7d:61:79:
f5:02:65:17:a1:2e:fc:00:23:d4:2d:4b:e2:1d:e0:
b0:bc:63:90:9c:78:15:54:e6:e3:44:b1:bd:31:be:
5c:25:25:37:2a:04:72:b4:89:61:ab:ea:18:06:57:
cf:99:33:5b:12:f2:00:e9:d3:9b:12:52:c8:8e:06:
d9:b1:58:96:f8:6b:d5:9e:fd:a1:da:a3:bc:7c:b9:
b0:42:88:00:8e:72:5a:57:1c:6d:bd:ae:93:3c:e2:
6e:ec:f2:f8:0f:28:6f:a3:85:c9:6a:ce:19:82:53:
e1:18:42:20:99:4b:ef:bc:a3:a4:6a:19:fa:39:e9:
ac:58:77:a1:7d:69:7c:ec:36:46:e1:7f:a6:4d:65:
a1:c6:be:e0:02:78:39:bd:43:e6:f3:10:33:b0:86:
d7:a2:6f:b9:d9:05:83:67:75:64:5e:c7:57:66:31:
aa:ad:20:fc:9a:9f:42:9a:fa:09:ab:38:dc:97:cf:
1a:11:43:2e:16:8f:5b:a9:6b:63:2e:ee:d4:ca:2b:
ce:32:0d:30:4b:27:e0:4c:0b:6e:80:73:73:24:6a:
13:9c:97:b3:12:ea:c9:54:5c:66:6a:32:84:e9:29:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:0F:B3:F6:37:FC:4C:08:7E:B6:9F:BA:72:7B:C8:12:A2:58:56
X509v3 Authority Key Identifier:
keyid:C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:b2:a7:3f:c3:29:ec:12:4c:f0:99:0d:d5:82:07:b7:52:66:
c2:81:9b:1a:0a:1b:a2:10:ef:64:8b:04:c5:d1:78:91:a5:bd:
11:d3:63:b3:19:57:2b:68:f3:ce:2b:08:8d:a1:c5:d2:45:fa:
01:d7:b1:8a:ca:52:c8:06:70:48:4f:16:ba:0a:ab:47:02:a7:
ca:31:f1:c3:d7:d9:7f:da:b9:53:ee:f9:a2:e7:fc:48:ff:53:
16:01:36:6a:77:2b:45:a7:7d:ed:51:60:9c:97:ed:6a:24:40:
9b:25:fb:46:89:19:6c:d6:6a:b7:af:f9:ba:dd:d5:2f:04:4b:
fd:ef:e1:d7:05:ac:d4:26:27:4b:43:2c:00:95:4e:d8:08:14:
a4:26:76:00:c2:ac:c9:7c:ab:46:bb:ba:16:e6:96:00:92:58:
db:c7:3a:6a:88:f0:1d:e8:57:e1:6c:86:5b:0b:0c:dd:62:4a:
f2:62:a2:d7:50:2e:b0:5f:72:e3:40:48:10:da:7f:c5:dd:90:
f1:56:73:4f:7e:75:a0:3a:ab:65:0d:c6:f2:48:35:d1:42:1a:
0f:d3:15:ca:9a:e0:f7:d0:92:4e:35:e5:f8:03:ac:db:3e:42:
5f:8f:e9:27:28:81:bb:e7:29:b6:37:33:93:04:a7:f5:f4:1f:
1b:0c:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:55 2026 by rpki-client