
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json)
Hash identifier: 4UytWS0BZhsniqGa3e26coOJ+XqSkgbVhP4wdDsuLl8=
Subject key identifier: FC:BC:49:19:46:D6:69:FC:C4:40:EC:2A:1C:37:73:A8:8A:95:E0:A3
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial: 23BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
Manifest number: 237F
Signing time: Mon 02 Mar 2026 03:05:56 +0000
Manifest this update: Mon 02 Mar 2026 03:05:54 +0000
Manifest next update: Mon 09 Mar 2026 03:05:54 +0000
Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: 5yNofKEk4Fkhs8DWW/VA446X6SAhZHZzHwJpEMgaARU=)
2: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=)
3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=)
4: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9146 (0x23ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Validity
Not Before: Mar 2 03:05:54 2026 GMT
Not After : Mar 9 03:05:54 2026 GMT
Subject: CN=69a4fe93-7b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d7:a9:cb:b7:12:34:c9:bc:4a:cc:02:3d:87:
d2:d4:86:bd:7e:f6:97:33:e6:54:a5:16:7c:f8:40:
fa:f9:54:98:8e:1c:f7:61:84:2d:54:82:0f:40:cf:
60:ea:e1:d5:ea:fc:f3:a1:15:10:07:85:d6:16:1a:
56:4b:77:f8:a4:15:8e:89:c7:7f:39:44:f7:a8:75:
11:9f:60:12:66:dd:a7:62:37:6f:bf:4d:fc:de:d6:
b0:ac:58:05:ad:44:c2:33:5b:d4:73:70:90:1b:67:
e6:52:04:03:53:2d:dd:83:fe:75:46:89:ab:0d:53:
ab:6c:4d:4a:38:3c:2c:1a:7c:9c:b9:67:b4:2e:55:
d9:ba:e4:b8:8a:b5:9c:ab:bf:ad:de:86:76:96:d7:
70:c3:49:f2:28:11:d2:9d:4a:b7:b6:51:49:42:0c:
7b:b9:c2:04:03:d5:05:21:7f:4c:18:a9:ad:7f:e8:
77:d6:6a:69:f5:46:00:22:b3:4f:de:d0:3f:34:f3:
a6:de:6d:70:f9:63:cc:9d:e9:62:63:8a:22:1b:71:
4b:da:53:b8:52:81:ec:bb:7b:f1:02:20:25:5e:9a:
f2:2d:21:ef:02:6d:a1:a9:49:3a:c8:79:a8:f8:0c:
75:66:23:07:9c:42:e1:7e:11:d0:3e:cd:4f:04:18:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BC:49:19:46:D6:69:FC:C4:40:EC:2A:1C:37:73:A8:8A:95:E0:A3
X509v3 Authority Key Identifier:
keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f4:01:77:32:1a:6f:1b:fc:1d:a5:d1:3b:d7:28:7f:d3:a6:
2c:0b:1d:cb:bd:e8:4e:f2:14:03:16:df:03:54:28:37:e1:d8:
e8:af:17:9b:ab:67:10:25:4d:ff:1d:c8:93:03:ae:1e:af:2f:
d0:8c:13:3a:08:b4:5f:b8:f6:88:60:ad:bf:c3:ed:ed:28:bc:
40:58:bf:71:ba:ef:38:42:3c:e5:5a:5f:dd:0d:91:3f:8a:04:
3a:df:88:63:79:49:4b:06:0c:eb:13:e5:24:c3:e8:2a:cc:bb:
f8:95:a6:5e:f3:24:1e:30:48:40:2a:01:c6:b5:15:17:e5:fc:
50:e2:a8:82:82:19:50:ee:d1:08:6b:69:94:81:ad:31:da:c9:
7f:c3:e3:0e:a5:f2:33:3f:b1:30:c9:2f:13:3e:24:34:a9:41:
98:86:48:f0:ff:9f:47:ce:ab:74:cf:d3:d3:d3:28:8e:27:4f:
01:3d:cb:59:de:39:48:4d:15:d6:d6:71:d4:2b:c8:ac:5d:c9:
bf:c6:b2:49:67:ec:bc:93:e1:0f:f3:b8:f7:60:f3:3a:56:3c:
8e:b9:c3:54:18:e9:cb:8a:74:46:49:b1:f7:e2:41:71:4c:2a:
82:a0:99:de:90:68:a2:aa:79:c8:95:57:52:cc:3a:25:a7:c1:
4a:a0:33:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:00 2026 by rpki-client