
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json)
Hash identifier: MBBewmTblPUp/wtPLNBaTNWf33FQqeKmftRO8R0agPY=
Subject key identifier: 44:B1:83:B4:28:46:C6:62:1C:0E:A2:09:4A:26:10:FC:91:CE:BD:41
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial: 05C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
Manifest number: 05A7
Signing time: Sun 20 Sep 2026 23:06:06 +0000
Manifest this update: Sun 20 Sep 2026 23:06:05 +0000
Manifest next update: Sun 27 Sep 2026 23:06:05 +0000
Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: ooD298Da0CZXUQDIwUSStpUJwoO/u9DABwPMoJ7gTr8=)
2: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: XRPA2JKWpTIHSFaMOHgkHY8yCfbif5wXEREcy191bJ4=)
3: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: et9HDrh+GN5yOnO0QC3PHWe6pVv8xUnM/31aeD6iTS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1473 (0x5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Validity
Not Before: Sep 20 23:06:05 2026 GMT
Not After : Sep 27 23:06:05 2026 GMT
Subject: CN=6ab066dd-dfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:bf:c1:ba:64:48:14:c0:0a:a5:a2:19:b8:
6f:80:f9:d1:e7:8c:19:3c:ee:14:77:56:c5:3c:58:
23:04:82:61:b9:24:5d:65:6c:f3:a5:b3:1c:7d:f7:
69:3c:d1:12:d7:8c:fc:b8:7f:d6:a8:c6:0f:1b:cf:
da:57:a4:9f:da:3f:78:95:fc:f7:80:34:cf:43:72:
78:7e:13:65:97:92:52:5b:52:8b:a0:99:b3:66:6f:
cb:9a:06:ab:a3:86:4c:d2:90:d3:da:04:b8:be:1b:
66:f1:e4:75:a3:41:0c:ea:d9:80:d3:c2:90:31:16:
90:9a:bd:41:33:fd:83:9f:7e:20:05:be:6a:06:99:
55:43:e3:93:2c:ba:d6:f9:84:20:22:1e:30:20:f6:
fc:79:f8:e1:20:b9:14:11:9b:a0:6e:1c:e5:77:dc:
e5:fa:62:cb:3d:61:4f:ce:89:ac:4d:96:eb:d3:12:
43:24:e4:ff:d8:7e:1e:09:e6:62:af:c8:5b:25:f4:
89:8f:f3:4c:d0:db:17:78:2f:6b:b4:25:7a:f6:b8:
7c:63:11:56:0b:61:9b:93:73:21:be:93:a7:b3:3f:
61:e8:34:7c:e9:d8:8c:5f:7d:78:d7:7e:84:75:ed:
52:73:df:59:61:97:5c:a8:4f:6b:b5:47:f3:f3:6b:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B1:83:B4:28:46:C6:62:1C:0E:A2:09:4A:26:10:FC:91:CE:BD:41
X509v3 Authority Key Identifier:
keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:f9:e9:aa:3d:5b:a9:d8:61:e1:16:9c:09:a6:4a:1f:21:24:
b7:1d:16:69:6b:dd:51:a1:44:95:0f:1a:bb:5f:18:9a:cd:aa:
3a:8a:c0:32:86:bf:09:08:f2:6e:6e:f3:9b:e3:10:2f:ef:72:
2a:ff:0b:14:91:86:94:97:32:89:2b:8f:0b:a5:a8:17:7a:c1:
b6:d6:34:2b:0b:53:bd:4e:64:6d:60:d5:98:2f:26:94:16:23:
20:c7:49:11:8f:83:76:d0:2c:a2:12:1b:f6:03:7e:c0:1a:a7:
15:46:56:2f:e7:32:85:de:31:15:cf:ce:60:34:a5:c1:fe:95:
2c:34:2c:f8:ba:9a:ca:b2:06:ea:40:cc:9b:1c:b7:c8:18:53:
d3:b2:25:5e:1f:6b:b7:27:8c:28:43:7d:09:a6:e2:e4:d3:45:
db:24:1e:06:97:36:43:bc:77:81:8e:f6:05:65:82:fc:3f:f2:
d1:3a:b8:be:19:3a:19:9d:c4:c9:6a:f2:b4:69:c1:aa:d0:70:
7b:15:9d:46:94:16:6e:cc:d8:71:b7:08:46:89:e2:af:dc:f0:
60:e2:04:cb:17:d9:94:5b:0e:24:17:3a:2c:f4:40:95:bf:aa:
7d:6d:69:6a:9c:df:cc:ec:ca:76:16:bc:69:ec:3c:c6:68:c6:
6c:92:67:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:32:47 2026 by rpki-client