
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier: Ar/Qw3fj/xes4AhZaXaT/8aEFcuurYBwj4q8FIrME10=
Subject key identifier: 61:E7:81:BD:F4:FB:1F:BD:86:19:9B:32:8B:6D:C3:7A:6F:70:30:D9
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial: 08B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number: 08A1
Signing time: Wed 14 Oct 2026 20:54:02 +0000
Manifest this update: Wed 14 Oct 2026 20:54:01 +0000
Manifest next update: Wed 21 Oct 2026 20:54:01 +0000
Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: 2X1JpwJuK131pYtRj7TPz1R6sW8m0BWi1v7B6MkHQT4=)
2: 03DBE96C27D311F1B9B43B2EA5833773.roa (hash: S3e+5praX3fveUx0PS8OILIaCoCyEFWJPJkSDQ7Hz+w=)
3: 12B8820E32E811F183E6E984A4833773.roa (hash: 6EFTeBZ1wXqiO/PUIgVs+ZVAsoL+Rx0rt9GNyp8g/+E=)
4: 21EE9510083211EB81509633C4F9AE02.roa (hash: iKMQHOBFrgyHmy/Ps4jIsLKGqzItSxXRkBRTt6rveQ4=)
5: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: 4D8RNBVxZ4n/YFoAFxcO6RiKNijl1P5296cdlR8pmnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 20:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Validity
Not Before: Oct 14 20:54:01 2026 GMT
Not After : Oct 21 20:54:01 2026 GMT
Subject: CN=6acfebea-f1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:a8:6a:fc:a4:de:58:ec:7d:f6:bc:5c:11:
07:92:38:f3:9f:5f:32:b9:e6:54:a1:99:6b:6f:6a:
f9:f3:09:b7:c3:62:b4:b1:4a:18:2c:72:a3:ce:00:
7f:84:43:38:94:d1:ff:c2:8f:22:23:de:1a:31:8d:
e8:ba:f1:dd:54:10:c8:d5:a0:07:b1:c1:ad:b9:30:
1f:34:99:83:31:37:75:d8:d8:f0:3a:75:44:c2:88:
03:92:fd:91:1a:4c:f5:8d:45:d8:8c:f8:76:47:34:
e5:21:f1:15:d5:22:02:99:c4:cf:a9:3a:cd:30:0b:
4a:e1:cd:ce:91:47:43:6c:ad:f6:53:1d:bf:b6:37:
d3:78:c4:0f:c7:de:30:d1:6d:ce:f3:8f:0a:a8:e3:
c9:96:81:77:4a:43:23:d4:71:07:f9:71:81:47:78:
33:c3:0f:71:23:d9:9e:ba:e1:00:93:57:47:fd:16:
1d:51:9e:9d:02:27:fa:d8:50:e6:6d:8f:c3:e9:f9:
20:53:38:1e:5d:8e:d8:ef:8c:d5:32:69:ff:4e:5a:
8c:07:b4:03:0c:c2:a0:d0:85:f1:c2:6e:a1:91:d8:
f8:cc:8d:16:4e:d6:81:19:e6:28:76:12:cb:a9:80:
7c:8a:11:86:6b:75:60:83:8e:b3:c0:47:e2:a0:78:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E7:81:BD:F4:FB:1F:BD:86:19:9B:32:8B:6D:C3:7A:6F:70:30:D9
X509v3 Authority Key Identifier:
keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:99:0a:00:08:33:de:c7:c9:ce:45:2b:4a:6d:f2:23:96:07:
fe:e1:d0:47:66:ce:98:6f:69:47:14:e0:d2:94:dc:05:b7:93:
c0:e9:eb:b1:24:66:f8:34:7b:bd:fd:b3:2a:d0:54:b9:a8:9d:
ec:0c:73:54:68:aa:30:9e:12:86:05:63:fc:55:1f:4b:a5:67:
51:e4:72:fd:9a:73:35:ab:d3:05:91:44:1d:60:d0:78:c2:6a:
86:1f:e1:e5:cc:3f:32:45:11:62:e7:52:be:f0:f9:62:dc:38:
cf:ac:65:c0:0d:0e:83:65:aa:6d:7c:85:86:29:55:92:14:d3:
c4:92:b3:78:44:89:8c:d4:11:0f:dd:0a:3a:94:fc:89:4d:c5:
7b:ab:b0:e3:51:08:e9:b9:df:79:ab:24:6b:34:52:6a:ac:9c:
20:4f:40:f7:db:55:f9:ad:c5:35:79:d5:f0:85:1e:86:7e:de:
d7:da:62:f4:22:c4:61:dc:22:65:d9:00:c5:22:d1:6b:9c:49:
43:f5:fa:22:a7:18:89:46:5f:0b:96:98:47:df:b0:0e:8f:2d:
11:f5:5a:f2:51:92:6f:a8:13:4e:8c:c2:30:5a:50:95:96:d6:
63:89:76:a1:b7:45:48:d8:60:69:5e:11:d8:ee:ff:81:39:44:
8a:b3:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:40:09 2026 by rpki-client