
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft
File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json)
Hash identifier: YDxRFq43FxiJrP4D4JRv9EWUcxjXRtBUg3k2sXIJWd0=
Subject key identifier: 6D:2C:9B:E5:32:12:7D:08:81:FF:32:26:C3:BE:A9:CD:79:CC:80:41
Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD
Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD
Certificate serial: 0585
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft
Manifest number: 057E
Signing time: Sat 28 Feb 2026 23:52:05 +0000
Manifest this update: Sat 28 Feb 2026 23:52:05 +0000
Manifest next update: Sat 07 Mar 2026 23:52:05 +0000
Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: rGJeLuVsadKW0xNSXKwiBLxxDykduzVc3KkGEAxQTKI=)
2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: UZdEVBj/lgoItLYURJapVrEERSSdanijwOdvoutuuW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl
rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413 (0x585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6F60, serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD
Validity
Not Before: Feb 28 23:52:05 2026 GMT
Not After : Mar 7 23:52:05 2026 GMT
Subject: CN=69a37fa5-f4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:b2:40:eb:3f:aa:2a:30:6a:f7:25:e7:d0:
fa:29:40:ef:60:67:df:a6:65:c0:c9:7a:a7:30:57:
98:de:f8:ba:d3:e0:70:28:07:fc:0e:60:bd:ab:ad:
29:97:b9:d7:98:79:d4:9e:d8:41:ac:1b:2e:93:6f:
dc:cc:45:bb:bb:ce:e1:c9:45:72:b3:6b:8a:c3:bd:
0e:82:3d:bd:03:f5:b2:6f:b3:2d:fa:8b:ef:10:b4:
17:fe:db:92:57:8f:40:33:f9:99:32:ba:7f:84:51:
e8:cb:4d:75:2d:9c:c0:f0:98:e4:82:bd:b6:76:a3:
d7:ec:a6:a4:c6:4a:59:f6:1d:73:b0:c8:02:d7:2c:
1b:f2:d3:11:9f:a9:15:10:10:ff:7c:76:d7:b4:c8:
56:7c:95:1a:9b:e7:b2:4f:dc:6d:fa:21:33:30:1a:
da:df:e9:a2:49:df:a8:39:ce:92:e5:1c:01:7a:29:
4d:d9:4e:2a:88:41:12:32:d3:0d:8a:94:ef:7e:5b:
b1:df:57:48:d2:af:39:0c:11:d7:11:83:40:84:0a:
bf:54:c6:44:dc:85:88:cc:97:b8:93:90:2b:be:fa:
ba:3d:9d:a6:06:de:5b:56:2c:4c:a3:0b:e9:2d:c4:
21:eb:88:fb:2a:45:da:7e:93:67:59:28:e5:da:17:
bc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2C:9B:E5:32:12:7D:08:81:FF:32:26:C3:BE:A9:CD:79:CC:80:41
X509v3 Authority Key Identifier:
keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:f2:85:11:54:e3:6a:f2:af:d7:20:d5:da:f7:c3:59:0c:b3:
1c:e1:86:14:38:43:ce:e5:27:e3:59:f8:92:6c:fe:d2:2c:0c:
36:c7:14:ce:91:5e:7a:7f:51:17:50:40:86:ac:93:5d:f8:a4:
9c:4d:0f:c8:bb:1e:d3:21:d5:0b:a0:ee:79:d6:cb:90:5b:0b:
5c:fb:1d:8d:99:29:f8:3a:a0:b6:32:d1:5d:e8:0b:68:04:b5:
30:59:f6:76:66:a8:ca:df:75:d8:93:6e:a2:f7:40:4e:01:08:
e4:8c:b5:3e:0b:82:4b:cb:d6:84:4b:28:21:22:e3:94:03:24:
6d:45:0f:d3:d5:13:10:c6:86:fe:56:64:19:d6:f2:9a:9c:e8:
3f:95:02:9f:d1:e8:64:84:31:05:96:b8:df:ab:45:c3:a9:fd:
e5:7d:80:92:33:e6:0e:82:af:0f:1c:a4:18:51:41:a6:4b:df:
a7:08:80:cb:06:5c:af:59:07:d0:f1:d2:52:8a:45:49:aa:9e:
4c:6b:a1:ce:aa:a1:96:3f:5a:d7:7d:8d:e1:38:e2:d8:36:f5:
a5:2c:ae:6c:d0:30:da:81:8f:00:f4:27:c4:bd:17:5e:2b:f3:
e9:97:bb:9b:8e:7d:aa:e8:08:27:06:b9:02:39:e2:d5:f5:a1:
42:4e:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:51 2026 by rpki-client