
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
File: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json)
Hash identifier: w9OCvoQ+YJVcUTKBTDscU2Dy6mEbWPabCc6E6kLuqp8=
Subject key identifier: 09:1A:0E:6F:E6:AF:8F:31:4C:56:8D:C7:02:19:2B:79:9B:4A:D4:B3
Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08
Certificate issuer: /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
Certificate serial: 0BEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
Manifest number: 0BDD
Signing time: Sun 20 Sep 2026 18:57:06 +0000
Manifest this update: Sun 20 Sep 2026 18:57:06 +0000
Manifest next update: Sun 27 Sep 2026 18:57:06 +0000
Files and hashes: 1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: dquY9RN2JNDTMpb3R3rT1DFn5qgg345grAN9wYbb2hc=)
2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: apuF+CHb5V3hRVn20QwCD8T6GZ5V5YYEYw6cYSsjqgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl
rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
Validity
Not Before: Sep 20 18:57:06 2026 GMT
Not After : Sep 27 18:57:06 2026 GMT
Subject: CN=6ab02c82-045d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:6c:11:27:c1:da:ef:58:d9:0f:6e:37:29:
33:1a:e5:bd:62:4e:5d:fd:0a:5a:a7:9d:56:f5:1c:
2c:a3:30:7e:82:63:00:ca:6f:ba:d8:e3:fc:c2:fb:
b3:fc:29:34:30:45:93:83:cb:8b:e4:b1:a2:06:56:
fd:96:d1:ee:8d:5e:2e:bd:27:98:ba:6c:d5:ec:e6:
0c:2c:2e:d1:6a:55:c8:a5:13:9f:99:0b:41:fe:bb:
38:6d:b9:4a:f1:5e:a3:8e:5e:7d:76:4a:39:45:fa:
c5:05:55:c7:f9:79:9c:73:b1:2c:22:92:20:f5:fc:
fe:28:5c:d0:bd:aa:c6:39:5d:30:2c:8b:60:22:78:
f4:dc:f0:3c:8f:85:87:7d:b8:a7:74:ea:49:15:5a:
a5:9a:a0:47:ce:ac:08:82:55:0a:a5:77:9c:50:24:
12:4e:fd:eb:7e:c2:68:b2:d4:33:8c:f4:cc:74:53:
14:91:67:7d:fd:b0:de:c4:de:3a:70:49:e5:18:1a:
6e:72:68:72:b6:57:84:f7:b0:4b:0a:b7:d6:07:6c:
e5:46:f0:92:18:56:54:3d:6c:67:2b:f2:6c:80:a0:
3f:66:18:28:78:77:4c:79:19:ad:59:09:c5:d3:ac:
7f:27:ae:b4:e0:c2:00:20:49:6f:a7:41:43:77:b7:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1A:0E:6F:E6:AF:8F:31:4C:56:8D:C7:02:19:2B:79:9B:4A:D4:B3
X509v3 Authority Key Identifier:
keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:8c:3f:7d:23:18:f4:9d:8c:84:77:70:75:8c:b9:e2:d2:2f:
08:a2:d7:69:d1:23:c8:c2:0d:73:00:90:c8:47:df:a8:a4:ad:
4b:89:6e:80:a9:89:b1:bc:8f:e6:4b:06:75:d6:1f:19:07:be:
17:7c:ed:02:d8:28:26:79:0d:ec:24:10:ce:e1:e1:12:fe:9f:
6c:51:33:eb:12:34:f5:1c:f6:cf:da:68:18:c0:f1:8b:d4:fc:
53:87:19:e2:1b:23:6c:43:3a:b7:69:98:f8:ea:58:5b:9f:0b:
36:10:43:fe:1b:97:3f:fa:d4:72:d7:e5:4e:e7:31:e3:a5:86:
55:c6:ec:29:c0:b2:5f:7b:3d:66:87:0e:91:92:7b:58:cf:51:
60:65:72:3b:6d:69:85:68:20:b1:7b:9b:25:c9:54:ca:a2:13:
52:51:3a:4b:31:97:12:24:d3:78:c9:cb:1d:c5:13:30:cf:05:
9a:2c:2f:af:59:52:46:7d:e3:e5:c1:6b:7e:87:5b:31:9d:49:
c3:98:76:46:0c:19:a0:0b:1d:bb:cb:bc:c2:ce:be:6c:7b:42:
c0:a8:c6:a7:18:3f:ab:2f:3a:96:41:65:32:bf:3b:e5:bd:b3:
10:41:6e:fd:d9:d3:9d:c0:cb:86:3b:2e:06:27:37:6b:2d:59:
f3:c8:a6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:57:26 2026 by rpki-client