
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
File: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json)
Hash identifier: lEdXNrbIa8QorYx6RCBsPodjPxSWRRZ3d8YjfH1aX8w=
Subject key identifier: 81:8A:C2:52:BD:F5:97:0A:5D:1D:BB:C0:B5:8D:EB:66:AA:D8:54:13
Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08
Certificate issuer: /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
Certificate serial: 0B76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
Manifest number: 0B6F
Signing time: Sat 28 Feb 2026 19:24:08 +0000
Manifest this update: Sat 28 Feb 2026 19:24:07 +0000
Manifest next update: Sat 07 Mar 2026 19:24:07 +0000
Files and hashes: 1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: V/tevW+3bF+BfR1G4NH4PJzfWYeI0dUO75XXmJnbAn4=)
2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: ArNuSAGS500F2Au8BkBemb4Fqw5PMgC4H5tbUjnLNK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl
rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2934 (0xb76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
Validity
Not Before: Feb 28 19:24:07 2026 GMT
Not After : Mar 7 19:24:07 2026 GMT
Subject: CN=69a340d7-e18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:bd:bf:3c:47:0b:74:cb:f7:0b:82:7b:9d:
c6:ce:da:f8:71:ee:0d:3b:a8:4f:fa:f2:fb:be:24:
b1:0f:24:1c:56:67:2b:a1:92:75:17:fe:82:28:f7:
2b:f5:c0:5a:15:fa:5b:4f:ae:f0:9e:c2:63:e5:ac:
9d:1b:00:a1:8f:04:56:22:39:18:73:62:86:50:ce:
e8:2e:7f:3e:cb:36:a2:a6:58:25:c7:14:64:42:5d:
5e:0f:4c:26:e3:b7:5f:23:2f:00:0a:f5:cf:4a:b0:
74:02:fb:00:27:f7:d7:55:15:41:6a:bd:ba:84:00:
b9:22:9e:65:1d:50:a0:72:e8:63:16:81:40:27:52:
6c:e9:8b:2c:48:f3:d9:5c:27:48:dd:9a:b2:40:a1:
b8:e0:36:4a:ca:ef:13:3a:15:e7:bf:9c:21:65:4b:
18:91:0e:64:83:8d:d4:5c:0d:51:51:56:0a:a8:17:
31:ed:d6:2e:6d:66:2d:00:e8:38:1e:66:7e:4d:33:
b9:93:5c:12:2c:4f:8e:98:22:b5:f0:85:2d:27:72:
f1:f7:78:80:ac:bb:01:41:75:5f:10:74:11:53:b9:
86:28:64:79:8b:2e:4a:d9:6e:9d:c0:4c:e3:32:8e:
b0:1a:b9:44:45:28:f5:e0:44:f4:c2:06:d2:7a:a1:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8A:C2:52:BD:F5:97:0A:5D:1D:BB:C0:B5:8D:EB:66:AA:D8:54:13
X509v3 Authority Key Identifier:
keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:cf:08:0e:5d:13:aa:d3:24:11:37:3e:6a:c8:75:0b:9c:e0:
56:fb:36:47:e1:da:68:7e:08:e4:d4:71:17:b9:f0:70:d1:68:
14:58:91:53:f4:e6:3b:61:59:5d:18:f7:c7:1c:05:5c:c1:6e:
64:18:fd:28:3a:91:6b:e0:a8:ff:c2:c5:78:66:0b:f3:f5:c5:
3b:9d:78:cd:b7:89:8f:f8:e4:b8:e5:45:d4:23:71:ad:bf:c7:
91:ca:46:4c:cd:84:80:18:51:a5:3c:f9:60:56:8e:54:9d:0b:
4e:b3:65:3d:a1:35:21:e0:bf:8c:c9:f9:b1:9d:7e:78:6f:84:
b9:d9:76:26:b0:aa:05:e7:e3:10:aa:93:03:39:9d:ba:8f:f3:
64:f7:d2:71:cf:b2:e9:73:41:af:5b:2a:cb:e6:05:3f:da:0a:
c5:45:39:66:b1:a6:7f:91:ad:f6:b6:a8:d1:20:2e:d1:44:45:
08:93:0d:ff:4b:06:db:c0:ab:ee:3f:12:9e:5b:48:17:b8:c6:
d7:c1:4b:b0:9c:d4:88:aa:04:5e:5e:b0:15:cf:77:79:ed:9a:
39:dc:e4:d0:a5:60:be:ad:45:0d:f8:d2:72:13:4f:0f:83:4c:
f8:5e:bd:8a:bd:3b:f6:17:65:10:8c:82:f7:79:fa:2c:53:be:
3d:e0:95:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:06 2026 by rpki-client