
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
File: XAo1I_02RadjWvJRmtzQAuEy-84.mft (raw, json)
Hash identifier: DXF7H7R5JC2z3hzqLcxCnUPqUwRAQ0LZDo/m0Asvb/Y=
Subject key identifier: 9A:C5:AA:AC:B8:B6:3A:DA:B0:D4:5B:FE:70:CD:ED:62:F8:70:75:AC
Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
Certificate issuer: /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
Manifest number: CE
Signing time: Sun 01 Mar 2026 08:08:29 +0000
Manifest this update: Sun 01 Mar 2026 08:08:29 +0000
Manifest next update: Sun 08 Mar 2026 08:08:29 +0000
Files and hashes: 1: XAo1I_02RadjWvJRmtzQAuEy-84.crl (hash: hbB2nC+wz/zcYa8rFasmmnFFZqxIXDdbP5tlcEV0krE=)
2: 304DD002EFAB11EF97C9610FC4F9AE02.roa (hash: t1JjvZDB24X6k3Mu8SErmmJoER7kOsUM0Jx228MJLJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl
rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
Validity
Not Before: Mar 1 08:08:29 2026 GMT
Not After : Mar 8 08:08:29 2026 GMT
Subject: CN=69a3f3fd-7c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:4a:48:a1:e9:06:69:53:19:34:fc:1a:3b:
f9:dc:5d:10:64:61:c8:8b:cb:5f:36:1f:37:e5:18:
e9:49:5c:cd:76:6f:6e:75:24:95:1a:8e:1f:85:fe:
2d:d4:01:6f:bf:5f:4f:61:c1:09:60:a7:83:09:64:
df:1c:d8:17:51:8b:3a:94:23:9a:ca:35:7f:e5:83:
e2:fa:c8:13:14:0f:c0:8c:ea:7e:bf:3a:2b:03:96:
1d:06:85:f5:be:74:e5:52:71:91:7a:a3:95:49:df:
88:26:fc:f1:42:79:2d:dc:67:b5:43:ad:40:e8:f0:
f7:2b:b3:e9:2b:ab:0c:f8:87:e5:62:80:dc:74:26:
74:c1:34:d3:04:f8:22:f8:88:0e:bd:a0:de:02:ab:
b7:c3:23:a9:5a:45:e4:64:1b:c9:39:b3:ba:5d:2d:
e5:6d:99:2d:c2:e8:a8:18:a9:3b:3d:09:82:3c:19:
75:da:10:5d:5f:55:c8:e4:d1:cc:5d:fb:62:e6:ae:
63:8f:b6:d5:38:96:e6:ce:f6:a3:b1:9f:f6:57:6f:
19:14:48:f0:b6:d3:a0:79:95:20:5f:96:14:8a:99:
b3:12:94:e0:15:3a:7b:ae:14:6b:93:68:aa:68:da:
cb:52:df:09:12:31:b1:d3:a5:51:1c:be:c2:51:60:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:AA:AC:B8:B6:3A:DA:B0:D4:5B:FE:70:CD:ED:62:F8:70:75:AC
X509v3 Authority Key Identifier:
keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:12:3b:ae:68:0c:b1:95:df:34:27:27:5c:bb:22:30:3d:7c:
7b:f6:d2:34:b6:7b:f9:dc:ed:c8:0e:de:8e:54:92:a1:b5:6e:
44:53:8d:5e:c7:08:9f:c1:ba:7d:c3:42:c6:76:f7:f6:88:61:
12:3e:05:c1:2c:f5:37:ae:25:f5:48:e4:81:c3:a7:b1:ab:e9:
b3:b2:99:54:dc:7f:44:65:db:6e:dd:17:82:26:67:44:c3:1f:
69:1a:6a:42:dc:d3:90:54:48:00:52:01:21:4f:ce:f5:ae:b2:
37:d7:b2:3a:e4:19:bf:ff:56:c9:f9:25:74:89:00:9a:6a:81:
c0:8a:d4:ff:b0:25:43:01:28:89:d3:28:75:7c:99:93:32:86:
84:44:da:cc:80:d3:0f:28:8d:1c:5d:6c:12:40:65:9d:15:87:
c7:8a:fc:00:47:50:6b:a0:a8:e3:c4:d7:33:fd:d3:0b:d1:66:
6d:51:ac:0b:2f:95:4d:96:ab:da:4d:f9:d6:e4:22:ea:76:9e:
61:ff:06:8b:7f:a2:38:3a:ca:3e:e1:6a:5b:16:5b:b0:d7:8d:
d2:73:95:12:d5:90:5f:eb:23:5d:54:50:af:c0:e6:54:da:c3:
7b:f3:31:f8:8f:2b:0b:54:92:a2:b2:0c:a1:fa:1f:f5:a1:a4:
68:b3:3a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:52 2026 by rpki-client