
$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
File: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json)
Hash identifier: +VphOL/DytG4htv6yXS6n+fKukHjwkzIeC/uk4jJajE=
Subject key identifier: 23:35:10:B0:29:9C:22:5A:8B:6C:59:1D:B9:58:64:AB:14:26:92:5D
Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C
Certificate issuer: /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C
Certificate serial: 0716
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
Manifest number: 070F
Signing time: Sat 28 Feb 2026 22:22:45 +0000
Manifest this update: Sat 28 Feb 2026 22:22:45 +0000
Manifest next update: Sat 07 Mar 2026 22:22:45 +0000
Files and hashes: 1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: H4cY2nGEZdol8ngu4Yd6F/n6Ac2Mudxvd0uXGVzJq60=)
2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: 53zKcN6L7abJ9zpJ1rsGk1CMb4hTUDymJuK8BDIQ0eM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl
rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814 (0x716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91569FB, serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C
Validity
Not Before: Feb 28 22:22:45 2026 GMT
Not After : Mar 7 22:22:45 2026 GMT
Subject: CN=69a36ab5-d6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:df:a5:b1:a7:1f:ef:8a:a9:83:15:4a:c6:
4c:10:89:70:26:ed:3f:41:c6:8a:ff:fe:a2:1d:c7:
c9:ef:17:73:ef:d3:5c:ce:94:b3:f9:98:47:7d:a9:
d4:ca:26:f4:b2:da:be:db:9a:5f:42:be:a0:29:6d:
95:19:98:1e:b5:b0:6e:66:fd:e9:13:3e:c9:8c:67:
8c:ad:da:fa:7d:50:03:58:09:64:d2:be:57:44:be:
c0:13:dc:32:a8:d0:6b:4d:c3:ca:6a:da:db:e6:64:
5e:d4:66:62:86:5e:0b:19:56:66:2e:89:1e:17:ff:
49:cb:56:d9:58:21:bf:2c:33:bb:6b:8a:29:42:25:
8a:20:3e:f9:55:60:df:5f:ca:39:d7:ff:b2:c4:c0:
cc:38:d7:bc:7b:a2:f4:83:0c:ae:3f:0b:50:dc:3c:
09:2e:b4:37:d4:69:ba:9b:26:78:1d:e7:10:c7:08:
15:e0:bb:8d:a9:90:0f:97:d7:63:2c:5d:13:7f:f1:
d1:f3:69:de:ff:4d:f0:5e:f7:ca:7b:4e:0e:e5:b6:
7c:e3:e9:4e:1d:13:0c:9a:8d:3d:14:f2:54:96:6c:
9e:4c:60:8e:76:b0:6e:19:b3:a0:dc:2e:f5:c4:f0:
72:6b:80:36:eb:50:c2:04:c1:95:3d:c5:15:c8:3a:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:35:10:B0:29:9C:22:5A:8B:6C:59:1D:B9:58:64:AB:14:26:92:5D
X509v3 Authority Key Identifier:
keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:90:bd:c6:44:a8:2b:8f:62:42:de:24:ee:71:a5:76:7e:2d:
f7:3c:a9:31:fc:db:11:db:6b:68:57:e0:f0:ea:12:0c:dd:15:
4d:ca:7f:c0:57:9a:01:68:e7:3b:98:a8:4e:9c:9a:08:5f:eb:
34:9e:65:87:08:9d:11:14:fe:52:5d:cb:d0:1c:50:35:eb:82:
1d:66:71:c5:87:58:b3:d0:dd:b3:0c:4d:39:28:89:54:f9:3c:
da:81:a6:d4:2e:e8:93:8a:9b:66:f0:1a:ad:b2:5a:70:7a:06:
14:cd:ef:14:0e:ce:7e:cb:f0:d4:1e:7a:43:f3:c3:e2:a8:5f:
19:41:f8:18:c1:a7:f2:9c:65:74:12:15:a3:3f:0e:f7:0d:c4:
66:c3:e9:43:33:78:fa:1c:ac:af:b2:99:f1:d5:1e:01:2b:9e:
ba:bb:f3:6e:2d:8c:61:22:bb:d5:e4:4e:0c:b9:48:ac:81:e8:
0b:c1:52:53:fd:04:39:14:2d:f7:2c:14:b0:ef:6a:13:b9:1e:
4b:b5:67:54:ba:8a:5f:9c:66:38:34:96:62:68:1c:79:55:64:
4b:f8:8f:27:cc:60:20:e5:73:e4:dd:43:8f:7d:61:2a:0f:ba:
fe:c1:6b:44:4e:15:6e:76:21:88:9c:0a:56:56:59:7c:26:3c:
58:b8:77:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:06 2026 by rpki-client