
$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json)
Hash identifier: ZOk9pEnypnm6KgDarHRhwZ/vPobzb03MzSrJw+/PdLo=
Subject key identifier: E4:AC:F1:3A:3D:EF:02:97:2C:D0:1A:0E:B5:06:2B:6D:E3:28:A4:E4
Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66
Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866
Certificate serial: 1728
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
Manifest number: 171B
Signing time: Sat 28 Feb 2026 16:41:23 +0000
Manifest this update: Sat 28 Feb 2026 16:41:22 +0000
Manifest next update: Sat 07 Mar 2026 16:41:22 +0000
Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: DIDo1WkvnZrhpIJprf7nnfkY95Y928j4pCKuT9TD5vU=)
2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: gDuc8ZWgCrliQXLxnNcUvIObZ9Jrt4XfymfNcicc4pc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl
rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5928 (0x1728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866
Validity
Not Before: Feb 28 16:41:22 2026 GMT
Not After : Mar 7 16:41:22 2026 GMT
Subject: CN=69a31ab3-d5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:59:b6:88:51:c4:42:05:3e:54:1e:2f:dd:87:
56:1d:10:ae:8f:f0:09:4e:e9:fd:2c:12:64:7b:17:
71:d3:29:34:a5:ef:cb:69:c2:81:7d:f1:22:a4:66:
b7:54:7e:c5:20:41:34:03:f2:d5:81:0f:6f:ff:71:
17:50:21:83:4d:6a:f7:06:48:41:46:52:39:1c:ff:
9d:48:77:cd:a5:34:c5:e3:fe:22:4c:d5:54:8f:b7:
8e:88:7f:bc:00:69:e0:c5:35:6c:80:e6:6e:b9:ba:
6a:cb:57:29:fc:66:1e:c0:62:b9:1f:a4:b6:15:3e:
3b:16:0e:72:65:f4:22:22:50:2b:40:af:8d:ef:98:
bb:cf:ef:3a:d3:8a:05:7f:0c:20:2a:67:0d:9a:2f:
5d:87:df:ce:9a:17:a0:d8:e4:59:aa:3c:bb:b1:b4:
d7:eb:0c:7c:92:b9:73:eb:58:4e:ae:4a:d3:d8:8b:
2b:e0:7f:16:2e:4a:bb:18:f5:e9:ae:04:5b:d4:0b:
7a:9c:36:35:5f:e7:73:d9:82:af:77:69:bb:26:ee:
5f:c8:c1:c0:e6:17:b8:0b:e8:d5:2b:52:c8:1f:8d:
86:33:6b:dd:18:0c:ab:27:24:ad:ba:84:c6:3f:05:
ce:d9:af:e3:c7:51:73:a5:d6:b8:f3:fd:7b:d7:f8:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AC:F1:3A:3D:EF:02:97:2C:D0:1A:0E:B5:06:2B:6D:E3:28:A4:E4
X509v3 Authority Key Identifier:
keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:d2:e9:99:57:e3:24:40:3a:13:76:3c:10:36:94:b8:ed:39:
54:d6:0d:b0:8f:7c:f5:5a:4a:37:f3:5e:b2:b3:c3:27:c1:48:
61:e6:bc:56:9a:5c:d7:4b:48:ca:f6:2b:52:a4:0c:50:05:b8:
37:5a:2e:10:b1:48:47:fb:04:92:41:62:b9:37:45:9b:99:ba:
47:14:9a:fc:a1:30:3b:8c:d6:ab:7d:44:f9:b5:b2:45:96:ed:
36:fb:8f:82:29:ac:bf:ac:3f:9d:0a:21:8c:34:ae:53:ba:5a:
04:d7:bb:9f:6c:ff:0c:d0:c1:96:a0:6e:92:56:3f:26:03:2f:
21:52:de:81:e3:8c:f6:3c:8e:80:a3:58:3d:c4:98:aa:9f:2f:
b6:db:c2:91:07:55:ba:f2:52:d2:ba:2f:e6:18:64:0a:62:52:
16:99:58:5c:0a:47:0c:9d:a9:28:2e:3e:01:e4:66:4d:4f:78:
a5:5b:1c:8f:a5:6f:82:8c:84:e3:a2:0e:0e:ce:50:f9:27:31:
dc:30:41:f0:b5:b3:6a:94:df:24:b6:f2:37:4f:04:0e:1c:85:
6d:38:6b:36:59:05:e2:fe:23:54:8e:62:23:f0:96:cf:0d:ff:
86:35:c9:83:b0:c9:92:72:00:73:38:7d:eb:25:46:b2:5d:7b:
e0:78:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:39:28 2026 by rpki-client