
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json)
Hash identifier: Bd+0pJa6bNnJoiCgd2MX/FTwSkl2YjVFQMGlkrToN68=
Subject key identifier: 58:13:31:BE:74:F5:A5:FD:27:F9:E3:73:EE:9B:B2:25:DF:18:74:BD
Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
Manifest number: 37
Signing time: Sun 01 Mar 2026 09:58:21 +0000
Manifest this update: Sun 01 Mar 2026 09:58:20 +0000
Manifest next update: Sun 08 Mar 2026 09:58:20 +0000
Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: q/A9/KporDrGffZ2+5aBRtywg052y3bQOX/9xzgdSdY=)
2: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: wK4ZUFHP7svDczy0YCkmOX/r2Vqw7guLhrYQg+0Ja2I=)
3: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: vM2NU/PkWzUmY2ujZBzsjC1mzDOV/eoIUaPwXnbjazI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Validity
Not Before: Mar 1 09:58:20 2026 GMT
Not After : Mar 8 09:58:20 2026 GMT
Subject: CN=69a40dbc-83ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:aa:42:40:d1:f0:07:52:f2:b9:f8:b4:7f:
ee:93:11:ea:23:71:15:53:62:50:bc:ad:ab:2e:de:
20:e2:f1:d0:d9:59:e9:29:e1:d7:4e:02:2f:97:97:
64:57:8a:82:15:1e:bd:d5:1a:94:0c:bf:bd:5c:11:
ec:5d:c3:c6:69:9e:8e:db:a2:d3:ed:39:26:7c:e8:
7e:0c:cd:3a:1b:45:f1:ea:93:63:17:37:bc:11:0b:
7d:41:38:c7:6b:ba:1c:15:8e:28:73:e3:66:6e:6d:
88:2e:b9:46:86:7f:fa:26:e4:27:a0:81:a2:b3:9c:
2d:21:b9:fe:46:58:28:6f:32:17:92:0c:60:c6:57:
62:65:87:74:6a:b8:3f:b1:f1:7a:ce:7b:ae:75:10:
da:d1:be:5a:8b:1a:bf:8d:a5:8b:21:5e:92:21:57:
f6:1b:b9:62:63:a7:42:08:e8:0a:e6:2d:83:5d:48:
8e:89:a5:53:62:50:59:3b:b9:ba:34:33:ee:c1:48:
ee:6f:f6:c8:30:d4:e0:42:e2:94:e6:53:54:7f:94:
8c:3b:d3:4d:6c:ed:94:a1:e8:6f:cd:b8:3a:4c:79:
e3:6e:ed:b4:0e:64:1d:10:10:4c:14:1b:1e:d4:de:
22:3a:f1:69:ef:ec:6d:4c:3f:ff:75:8a:27:d2:15:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:31:BE:74:F5:A5:FD:27:F9:E3:73:EE:9B:B2:25:DF:18:74:BD
X509v3 Authority Key Identifier:
keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:05:22:ec:1f:d5:d8:b8:4e:b4:ae:4d:54:ee:63:77:2d:92:
0c:f7:eb:b2:be:c1:96:0c:6b:4b:1a:64:39:50:e7:3d:37:e1:
4a:8b:e8:54:35:f8:4f:82:0a:ed:1b:8e:46:77:c7:14:26:0b:
07:ab:2c:6e:9e:2b:a0:26:4b:cc:1b:1c:b2:d3:f5:be:ea:ac:
d2:dc:60:e7:40:86:0b:ed:f1:90:c6:f5:82:72:c0:25:84:27:
7c:07:72:75:18:a0:8f:7d:f2:ce:e1:b3:c3:a8:f8:99:fa:cb:
dc:c3:0f:7a:73:2a:57:3e:30:86:bd:f5:60:25:68:f7:3c:19:
b1:87:2c:32:2c:d9:70:7f:67:4e:38:1d:5e:b1:82:90:2c:f0:
40:08:29:47:48:2d:27:2b:7e:e4:ab:2d:91:2c:2f:38:bb:c6:
96:c9:d4:94:01:1d:51:b5:b5:b6:e2:c8:12:ff:91:ba:db:cc:
bd:68:cc:55:b4:3c:c1:31:53:78:0f:5e:e4:e3:de:e2:a3:7e:
a3:9e:fd:a2:39:2b:f7:ff:4e:6b:bb:ee:7e:01:fa:73:28:7e:
53:0b:05:7d:08:0c:2c:58:bd:8f:6a:1d:5e:68:0f:28:35:be:
7b:e6:07:5b:b5:45:46:be:91:af:ff:73:be:94:36:88:5f:40:
90:95:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:00 2026 by rpki-client