
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json)
Hash identifier: XAzu7tA51EiklpXZ0a2++uxFHT08RVFqq//KCzuYzn0=
Subject key identifier: 79:29:FE:C1:E7:BE:80:D7:8E:DD:9D:02:DB:DC:16:E1:77:53:11:26
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial: 10EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
Manifest number: 10DC
Signing time: Mon 02 Mar 2026 17:18:38 +0000
Manifest this update: Mon 02 Mar 2026 17:18:37 +0000
Manifest next update: Mon 09 Mar 2026 17:18:37 +0000
Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: 3YKE2JLa8CBcHxFO/YWLQV22zv4igbSXCNZ8zaWAzug=)
2: 691023063A8311E99AF5572DC4F9AE02.roa (hash: 2eE+CDRlSHY5Ior8e4vYqF46aXCqPlrmKLCnk7wj7fQ=)
3: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: HFvIVd/rWVPzXXKKiOWON2cvnwjOeJoH4rrOAqA8YGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4330 (0x10ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Validity
Not Before: Mar 2 17:18:37 2026 GMT
Not After : Mar 9 17:18:37 2026 GMT
Subject: CN=69a5c66d-d949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:91:f2:6e:49:c1:bd:6b:10:66:da:13:8c:
8d:8c:8a:f3:b7:8e:d6:9d:e3:c2:ba:49:f6:fe:2a:
5f:0b:e1:0a:5b:05:b0:58:ec:11:8e:4b:db:1a:0d:
07:fa:75:dc:41:e6:f8:bf:a3:2f:ee:6d:6c:1a:73:
ab:a0:91:85:5f:cc:d4:e8:84:f4:bf:26:0a:ce:91:
53:3b:06:1b:57:ca:33:36:09:41:12:72:4b:c1:06:
41:46:fa:bd:9a:12:d9:17:a5:dd:bd:71:46:b1:8b:
e2:fd:b5:53:36:d2:d3:a4:8f:b9:da:60:99:4a:1b:
fa:0d:2f:33:a8:cb:dd:d4:c1:70:e3:5e:4a:62:1f:
59:c3:f1:d4:69:fe:8f:6b:63:6b:95:ba:9f:1a:55:
56:b5:4e:4d:a9:cc:74:a4:be:a4:44:5f:70:d3:a4:
69:c5:f9:9a:47:28:7d:71:9b:fe:6d:b1:9c:7b:72:
65:72:72:e7:09:93:f3:c8:b8:85:94:68:57:09:1a:
79:4c:31:9b:d5:09:67:44:af:0a:ba:c0:b4:76:64:
fe:cb:10:4b:f3:60:2a:f3:ff:69:4d:78:94:54:3b:
a7:31:58:d7:f8:ad:a8:28:e1:af:e6:f6:11:34:1e:
d7:86:9a:7c:4f:5d:f8:f6:ef:8b:02:a5:79:74:e9:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:FE:C1:E7:BE:80:D7:8E:DD:9D:02:DB:DC:16:E1:77:53:11:26
X509v3 Authority Key Identifier:
keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:48:59:c3:7e:12:5f:c2:e7:ce:61:d1:31:f5:10:16:44:a9:
fe:d6:90:f2:b5:a9:3e:0a:2b:a5:49:b4:9b:74:01:4e:35:73:
f2:da:1a:a6:54:82:ab:11:71:fa:d4:c8:b3:c5:3d:62:82:17:
ab:0a:47:2d:8a:6f:cf:85:6b:e2:eb:65:2b:23:5c:39:c5:80:
a6:c6:49:a0:1b:64:59:65:61:fb:38:58:0b:98:ee:c8:8c:a6:
4a:1d:3b:4a:73:bf:9e:73:4a:19:d2:5a:b9:d8:52:a0:87:a3:
43:ab:69:8b:a5:5c:50:52:d9:1b:7a:49:b0:10:8a:8b:2b:a2:
71:39:07:24:eb:bf:c2:d6:4e:cb:12:69:c1:71:50:1b:a6:7a:
70:a0:f1:bd:32:41:69:3f:16:0a:c1:8c:1f:6b:33:3f:1d:4b:
17:8f:8b:ce:55:48:0c:c2:64:79:07:84:2f:14:69:8f:cc:d8:
5f:d3:37:83:50:64:3c:f1:ef:7b:11:c3:9e:82:c3:be:fb:96:
d4:4e:65:f7:b1:a9:ef:bd:98:52:df:d5:ac:46:28:7f:2b:94:
08:d6:bd:6f:26:2e:a9:11:98:38:ec:3e:a0:d3:b1:29:d1:73:
b9:7d:85:0e:cb:ef:e3:0b:8d:6a:51:1b:4c:46:c1:5d:2b:6b:
23:e4:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:45 2026 by rpki-client