
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
File: xjZVadKEkQKf5Efl8-v2jxMB1bs.mft (raw, json)
Hash identifier: Mw8kdEZg5XggL8i8sVBQ53vZCAZcFzlAeBPMcg3bGU8=
Subject key identifier: 49:0E:5E:66:A1:84:B9:E1:64:48:05:83:21:FE:A4:FC:4F:B8:4E:EE
Authority key identifier: C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
Certificate issuer: /CN=A915BD82/serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
Manifest number: 81
Signing time: Sun 11 Oct 2026 08:23:07 +0000
Manifest this update: Sun 11 Oct 2026 08:23:06 +0000
Manifest next update: Sun 18 Oct 2026 08:23:06 +0000
Files and hashes: 1: xjZVadKEkQKf5Efl8-v2jxMB1bs.crl (hash: RygJ6FxDkIMi5dSH5WVpoulDUQ2BNuGfs2BPAHNcURg=)
2: 4167035C0B3B11F1969C9C36063D8C67.roa (hash: XxHQrpq2A4gp2n4mp6ShFZAo+USW06IQITe4p2NcCiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BD82, serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Validity
Not Before: Oct 11 08:23:06 2026 GMT
Not After : Oct 18 08:23:06 2026 GMT
Subject: CN=6acb476a-fe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:a1:2e:3c:1d:06:3e:00:29:88:3a:1a:33:
3b:ae:15:cf:84:a0:ec:2d:14:73:be:63:13:82:65:
83:20:30:0c:3a:63:1a:f0:b4:af:f3:fe:be:93:83:
e2:96:a9:df:cf:d8:7d:9f:56:e5:50:6a:d3:29:7b:
d3:38:47:9d:1f:15:82:eb:93:b0:e3:d2:e4:ca:e0:
9a:ee:9a:82:c2:c7:29:25:27:57:85:32:75:e8:fa:
d7:0c:1b:c5:e6:e7:e2:36:f3:97:4b:67:e9:b4:48:
41:99:b7:01:3c:87:68:6d:9b:bf:67:d5:d1:db:0a:
9c:80:c8:83:4e:07:00:80:32:f2:ad:d6:2c:14:ac:
e5:74:5b:af:9f:97:59:d3:28:10:18:5b:db:27:da:
e8:32:f3:19:32:61:9c:18:c6:e6:2d:5a:49:24:fe:
94:77:bc:77:aa:f6:c6:e3:48:f5:21:29:7d:52:f6:
af:9d:69:53:be:fc:be:ef:49:41:90:ed:8e:ef:76:
ab:90:db:48:b4:cf:7e:87:e6:0a:fe:ac:d5:d2:51:
12:43:10:ff:da:34:85:c5:81:3d:86:65:05:cb:13:
c7:6c:66:02:80:c0:eb:3a:99:5d:1c:80:a4:a6:24:
23:b4:3f:40:e4:fe:4b:9d:96:e0:32:dc:a5:2d:45:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0E:5E:66:A1:84:B9:E1:64:48:05:83:21:FE:A4:FC:4F:B8:4E:EE
X509v3 Authority Key Identifier:
keyid:C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:01:1c:7f:19:bd:c4:da:f1:ff:67:ad:67:33:5e:24:79:2b:
09:10:bf:4c:fd:0e:d7:ec:f7:23:37:72:e7:0e:96:9d:fc:2d:
df:ad:cd:dc:63:7e:2f:41:68:4a:7b:8e:6a:25:8b:66:d3:bc:
4c:e7:17:c3:73:65:cf:9d:9c:15:87:a1:c8:1b:36:75:c8:e4:
9b:c1:03:c8:a1:5c:74:35:2b:e9:0b:bf:a2:4c:db:ee:a4:ad:
bb:31:9f:a4:f2:75:a8:b9:04:f2:16:7b:20:d5:7d:ec:40:4f:
69:45:21:2f:b9:fd:98:ef:63:31:8a:dc:00:e8:9e:d5:6f:7e:
6f:f4:27:3c:6e:bf:4e:79:4f:c8:13:9e:cf:ed:48:99:d5:0e:
91:90:90:94:55:80:75:7f:56:93:64:5c:11:c3:03:14:17:0d:
dd:9f:e6:89:cc:42:65:23:69:71:e0:e8:f0:70:da:17:95:b1:
0b:81:b9:7a:d4:bc:6f:be:2e:ea:6b:1d:d6:6d:6c:3d:b8:ed:
37:bb:e4:ea:d7:1a:98:1b:3b:ef:5e:20:24:40:a5:06:fa:71:
30:e4:c6:c2:e0:a2:88:ea:52:b9:d1:9b:00:e1:4d:65:f6:ff:
e6:ac:3e:0e:a8:78:47:ef:b2:a6:d9:92:d7:e5:64:d9:e8:54:
f3:01:57:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:29:03 2026 by rpki-client