
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File: x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier: vnuniO6SdQ3A9rH9/jUug7gbtXG6t2jjitbJNIgACQY=
Subject key identifier: DF:86:8A:AC:5D:3F:D6:91:16:5E:B3:47:C2:0D:DA:1D:81:28:09:F5
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer: /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial: 0849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number: 0841
Signing time: Sun 20 Sep 2026 20:56:39 +0000
Manifest this update: Sun 20 Sep 2026 20:56:39 +0000
Manifest next update: Sun 27 Sep 2026 20:56:39 +0000
Files and hashes: 1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: nt5NdxDDFUCWQHVLp8R6kSYAO8vZzDTvtG4Y5F/A+pQ=)
2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: 55CxpWCtuoXOi6t/gybs+bucccea1BToqnuBzxE+HNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Validity
Not Before: Sep 20 20:56:39 2026 GMT
Not After : Sep 27 20:56:39 2026 GMT
Subject: CN=6ab04887-9156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:af:41:68:45:ce:4f:24:27:cf:f5:e5:a7:2d:
de:e2:c0:fb:54:31:ed:a0:41:d4:86:3f:78:77:b6:
e0:fa:b9:24:d4:db:5f:6a:a6:9c:11:13:59:5e:06:
27:e3:0d:e5:e2:20:aa:4b:9e:6d:5e:ca:bc:71:bc:
86:e1:36:bd:10:43:a4:db:fe:74:c7:18:c2:9f:6f:
9e:4f:56:e9:07:ad:db:4f:00:23:29:08:86:3e:3c:
ac:56:cf:ea:e3:e8:a2:92:fc:5b:c9:0e:9b:27:e1:
bd:6e:13:db:28:ed:f9:50:c7:d5:9e:58:00:77:de:
cc:e7:b7:89:a6:4b:21:e7:eb:69:57:cb:ad:07:34:
c9:73:2e:90:11:43:44:ce:05:3f:92:90:5e:2e:78:
9e:88:fc:e6:6d:63:ab:64:71:e6:52:5d:3d:e8:0d:
19:5d:10:30:24:ce:47:0b:65:8e:f0:3d:a3:96:50:
14:a7:d2:12:6c:7d:e1:39:d0:44:d3:ba:01:fb:18:
ea:2b:e8:02:f1:1f:f3:7b:a0:3a:60:24:6d:e7:d2:
07:69:b3:03:c2:c8:3c:63:41:1c:f9:1f:8c:9d:10:
42:7a:05:13:e9:42:5c:ca:95:c9:eb:ed:96:05:47:
1f:0b:3a:5b:17:b5:6f:83:0b:6c:7e:7f:b4:89:63:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:86:8A:AC:5D:3F:D6:91:16:5E:B3:47:C2:0D:DA:1D:81:28:09:F5
X509v3 Authority Key Identifier:
keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:bd:78:44:c9:0d:de:ea:50:3e:8e:63:24:90:cd:6c:51:d7:
e8:46:e3:ec:74:26:fc:9b:07:68:87:86:26:bf:e9:61:a2:af:
83:de:c3:a8:82:f8:9c:20:e3:f4:31:5e:70:95:65:24:8b:fe:
4a:d2:08:26:cb:fe:a2:89:96:8a:e0:9f:88:15:a4:13:64:db:
1d:a1:33:32:6d:d3:3b:be:22:fc:36:4f:7a:59:c6:12:7c:ab:
8d:87:c4:67:15:b5:ea:ac:37:11:b2:da:f9:ec:4f:f2:9e:14:
84:7b:dc:44:25:b4:0a:a1:f8:fc:9b:8f:b5:cc:97:46:45:d6:
e4:e9:0f:35:a8:63:c8:34:03:20:c4:6d:c1:b6:66:a6:94:57:
41:8d:ea:02:db:d9:24:45:12:cc:f8:d5:ae:6e:ec:f2:0c:0d:
69:00:c9:19:e1:f8:c1:72:a1:99:03:7b:4d:37:01:97:08:2e:
60:0c:9d:fb:c8:7e:5c:98:97:13:0d:19:d2:a8:46:93:c7:38:
d9:ba:23:13:37:b4:6e:f9:1c:63:67:53:10:62:06:ed:60:d4:
e1:8b:1e:a8:b8:7c:f1:ba:05:db:e2:85:98:0b:15:e0:e7:ac:
2a:8a:10:4d:cd:5b:db:53:19:cc:2b:91:5f:43:ae:26:1f:76:
31:eb:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:01:06 2026 by rpki-client