
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
File: xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json)
Hash identifier: 70eibaEqx6MX7fGtWzZvcircPgFtmiEefOf7K+D9MNU=
Subject key identifier: 74:B9:9E:E2:38:B9:0B:6B:86:A4:84:65:7E:3E:9A:66:E3:0A:7E:F3
Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91
Certificate issuer: /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
Manifest number: 9F
Signing time: Mon 21 Sep 2026 07:19:10 +0000
Manifest this update: Mon 21 Sep 2026 07:19:09 +0000
Manifest next update: Mon 28 Sep 2026 07:19:09 +0000
Files and hashes: 1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: euXB7h++6MGv8sJXvR9MvSty5ubgxQjKP8LGZUN3QdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl
rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891
Validity
Not Before: Sep 21 07:19:09 2026 GMT
Not After : Sep 28 07:19:09 2026 GMT
Subject: CN=6ab0da6e-85bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:5d:e2:fb:24:a6:11:53:1a:ff:a2:53:14:
cb:a8:23:65:07:9c:3c:52:ad:30:a9:4a:6e:52:77:
a5:17:ef:a8:f8:db:56:c8:95:7b:dd:c6:bc:ee:36:
57:19:80:a3:42:1d:ed:ac:96:ac:3a:9c:96:ec:44:
4c:5c:b4:67:97:6e:a6:cb:e7:39:ea:60:6f:05:97:
1d:db:58:55:24:dc:75:4d:13:67:fb:62:e0:1d:fd:
ed:2a:a9:f4:4a:93:77:05:0b:cf:65:ce:84:a3:de:
ac:d4:db:28:a7:20:e5:e1:22:cc:ae:88:9c:4f:5e:
18:86:5e:f4:5e:e4:a1:c0:5d:13:ad:f7:d0:43:2c:
3a:31:54:0b:db:f3:94:e1:e1:03:78:13:fd:6c:59:
1f:0a:58:ca:f1:98:59:72:53:fa:15:38:58:26:73:
dc:05:3d:5f:2d:ce:88:50:a8:61:e5:50:c2:14:5b:
55:c2:62:54:b1:64:a6:6c:6b:1f:92:17:e4:05:d6:
39:38:bb:50:84:0a:58:e8:90:87:cd:e4:fd:75:11:
58:77:68:e3:1a:36:f4:56:90:0a:3d:a0:cb:ca:92:
9d:16:0f:ba:ba:22:93:42:0d:5c:5a:79:db:69:67:
a2:3f:b4:56:fb:ef:af:3b:1c:73:87:44:4b:93:ad:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B9:9E:E2:38:B9:0B:6B:86:A4:84:65:7E:3E:9A:66:E3:0A:7E:F3
X509v3 Authority Key Identifier:
keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:e4:b3:7c:64:9f:a5:87:69:a9:ed:58:91:48:df:9a:30:42:
7b:1a:83:6e:99:4b:dc:8e:9b:53:b7:f9:3f:74:74:aa:0d:b9:
c9:63:03:aa:af:51:62:a4:a9:07:a2:23:d0:d4:51:7b:1f:ed:
bd:2c:e2:44:52:bf:7c:92:f5:b4:ec:0c:23:eb:0a:3a:20:46:
77:51:62:7f:26:17:cf:94:0a:4c:50:8c:72:77:37:ed:9c:6c:
0c:27:bb:44:3b:8c:70:c6:31:90:09:00:ff:de:35:1c:a1:ee:
06:66:80:5b:43:a4:39:59:af:67:62:fc:22:45:25:62:a1:50:
54:38:37:fc:93:c6:bb:a2:5c:59:30:8c:88:5a:1c:2f:5d:84:
16:a8:be:5d:e1:17:51:eb:0c:7d:e0:a3:82:6e:06:94:15:6e:
83:8d:f4:e1:ef:e2:89:b5:ec:e1:56:9a:2f:11:4a:b1:60:eb:
3e:95:f0:35:0b:14:db:08:4f:fd:fc:1e:c3:49:ca:f8:7b:f7:
2e:18:8a:1f:22:41:ae:5c:dd:81:99:a1:79:24:67:bd:57:f0:
64:70:72:c6:dc:f0:16:5c:00:88:eb:7a:d7:26:67:4d:47:29:
e0:92:81:02:66:8f:13:08:51:3d:f9:a8:22:34:cb:f4:18:3e:
64:2d:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:17:23 2026 by rpki-client