
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
File: f_xaKedfnr4HnQUkfw3_DPmH8cI.mft (raw, json)
Hash identifier: WmZBPjolLFoAK1gS84CG2xeqaYXbyQ/IULErN0X9S8Q=
Subject key identifier: 4D:E4:25:9F:94:6D:63:1B:B4:0D:FA:00:40:E5:D1:0B:C9:C4:08:6B
Authority key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
Certificate issuer: /CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Certificate serial: 357E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
Manifest number: 357E
Signing time: Sun 20 Sep 2026 15:03:10 +0000
Manifest this update: Sun 20 Sep 2026 15:03:09 +0000
Manifest next update: Sun 27 Sep 2026 15:03:09 +0000
Files and hashes: 1: f_xaKedfnr4HnQUkfw3_DPmH8cI.crl (hash: jJgnSRrDGHUth1XHyhqBaF7c513IUP/NXDDKG0X2fcw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl
rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13694 (0x357e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4C67, serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Validity
Not Before: Sep 20 15:03:09 2026 GMT
Not After : Sep 27 15:03:09 2026 GMT
Subject: CN=6aaff5ad-d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:c6:74:4c:73:85:45:7c:a3:a4:a5:3b:1f:
38:f2:d1:94:f4:7a:89:f6:bd:0e:27:1c:3e:29:3e:
a6:a7:ae:a8:a1:14:77:9a:23:bf:d0:42:5d:5a:ca:
de:75:43:8b:95:45:ec:28:af:ad:d2:c7:7b:ec:c8:
0a:51:77:4b:7d:cb:ec:46:be:70:0d:09:41:82:22:
8d:32:01:14:2c:fe:0f:37:ca:01:2e:81:3c:2a:47:
72:cf:e5:bb:3d:10:a6:28:7e:06:59:39:fd:5c:79:
72:f9:09:0e:ee:04:a4:7e:31:0d:0a:c7:ea:67:cd:
5c:e7:f9:63:b4:34:e5:4c:6e:0f:39:fb:a2:be:bd:
92:c4:47:65:0e:d1:3a:33:a1:44:43:21:d5:55:46:
58:b9:f3:37:8e:d5:07:83:12:73:3c:bf:58:fa:45:
da:0e:ee:04:17:a3:2e:a5:a0:d0:c6:f6:8b:90:b1:
63:9c:c4:9a:00:d9:8b:36:f0:05:50:5e:35:5f:e3:
1d:2f:1f:62:f5:17:a5:02:8b:11:ae:58:3c:05:6c:
1e:5e:9b:8f:7c:5d:f6:5b:b2:38:18:b5:cb:fa:b6:
ef:1e:d7:36:63:04:a4:d3:27:62:d4:55:9f:6e:0c:
c9:ab:9b:5c:e1:99:8b:82:0c:69:f9:04:e1:33:88:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E4:25:9F:94:6D:63:1B:B4:0D:FA:00:40:E5:D1:0B:C9:C4:08:6B
X509v3 Authority Key Identifier:
keyid:7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:82:5b:bd:47:f9:9a:fa:46:0f:c3:67:8a:b3:bb:b9:d9:79:
db:8e:f5:0c:15:5a:03:98:4f:a6:f2:47:3c:a4:04:39:56:50:
44:e7:58:39:4b:64:f1:77:f5:58:64:07:a5:e7:2a:08:93:89:
84:37:87:48:ee:5f:23:62:44:dd:11:a6:0b:a7:5d:71:a9:08:
60:e0:e4:0f:b8:8d:5c:08:97:b1:73:1d:32:6c:49:63:a6:5b:
d7:65:31:f9:1d:ce:86:c7:51:0c:b3:38:49:6a:2d:40:cb:8a:
f7:32:21:62:7f:e3:3e:39:dd:59:8c:d7:68:6c:96:32:e0:97:
ce:b5:29:cf:19:52:f6:74:8a:62:10:a6:16:27:24:6b:b3:d3:
77:a9:23:52:a5:6e:3c:e5:0f:2e:77:a2:55:15:81:66:e0:f9:
ff:a9:fe:b3:70:29:cc:64:20:08:a0:48:00:b7:cc:ff:69:d4:
b0:87:9c:1a:a8:b1:79:52:af:4d:f8:4d:e4:a7:37:8c:87:e1:
f9:ac:42:8f:5c:b1:a0:52:49:77:b3:01:a3:2b:83:91:94:8b:
af:51:a2:f1:f9:bf:05:53:4a:d7:57:05:02:43:75:ad:80:91:
ad:22:ad:35:87:4f:9c:6f:1b:c0:54:4f:4f:4d:fd:df:1b:48:
0b:5a:f8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:37:36 2026 by rpki-client