
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json)
Hash identifier: maRtAXg1K585zoEOgZfYrJVaVRelF6pSO0dyZ46HRYM=
Subject key identifier: 51:52:1F:41:C5:6E:5D:B9:F4:A7:AA:51:85:CE:7A:31:EF:17:3B:71
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
Manifest number: 0171
Signing time: Sun 01 Mar 2026 05:43:23 +0000
Manifest this update: Sun 01 Mar 2026 05:43:22 +0000
Manifest next update: Sun 08 Mar 2026 05:43:22 +0000
Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: i7cQZ+K3dM3JM5euR/JbbvBKgRLVqY4e0cwUyKxmEPo=)
2: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: XWoA4DrP4GUueSvLlOg9pdhLQBKyagC/DEtx2MeiJsI=)
3: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: osmG47ejUnqAfJKuMkDqKj8NyV5CxVCxx93M/mU6AGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Validity
Not Before: Mar 1 05:43:22 2026 GMT
Not After : Mar 8 05:43:22 2026 GMT
Subject: CN=69a3d1fb-3007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:d9:75:d0:8b:50:30:83:f4:83:4c:f3:29:
28:a8:30:2c:6f:8f:3f:2e:fa:5a:2e:fa:5c:12:d6:
08:de:9c:e8:a0:a9:dc:40:89:0c:79:b5:d0:d5:c6:
6a:a5:9f:8e:98:10:fe:9a:fa:58:dd:13:65:45:b7:
bc:25:aa:13:18:bc:ed:ee:a1:e4:61:34:0d:7f:21:
c1:30:3c:32:5e:2b:b4:83:48:9e:b2:2e:f2:7e:90:
db:86:c6:10:cd:9e:2c:0e:7a:16:e9:26:af:c2:6d:
ae:94:38:33:fe:3d:f7:2d:b8:29:52:2f:bf:d8:c6:
d9:fe:b7:18:bc:85:48:89:99:48:d8:33:d7:94:61:
f2:3f:44:7c:45:0d:a4:36:70:c9:e6:c8:57:21:33:
bc:fd:f5:6a:30:70:91:40:18:7f:20:19:b5:44:ce:
e4:92:c3:e0:9b:6a:e8:94:69:a0:86:1b:45:37:2e:
81:8b:ee:c9:aa:8b:08:47:6b:7e:89:72:11:c9:f8:
0d:9a:5f:2c:84:52:15:f4:e9:ce:8a:bd:18:ff:ef:
dd:d1:06:50:cc:ba:55:cd:d2:1b:ee:f0:15:49:52:
b5:f1:42:cc:ab:43:d6:d0:1d:27:0a:ae:5e:0d:c2:
d2:c2:e3:c8:f8:fc:55:e0:40:2d:76:a0:04:c0:ed:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:52:1F:41:C5:6E:5D:B9:F4:A7:AA:51:85:CE:7A:31:EF:17:3B:71
X509v3 Authority Key Identifier:
keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:69:70:00:2f:20:c8:5f:8e:94:d7:8e:3f:68:93:17:8a:a0:
4b:b5:02:3a:39:5c:aa:59:7c:b9:7b:0e:71:a1:0c:7a:1d:2f:
9b:35:1c:c7:55:91:9a:71:1d:2f:4a:ad:2d:10:e4:cc:98:28:
06:f4:e8:f8:1f:b0:85:ce:b8:6f:a3:18:fd:72:0e:59:7d:1f:
96:4b:81:74:c4:9d:2f:72:ce:14:f0:08:43:2c:a2:e1:a0:86:
17:30:d9:e2:c5:92:f8:ad:5f:6f:73:4d:df:de:0f:82:2e:43:
a2:e7:62:7c:d2:d2:f4:dd:02:30:38:62:96:81:1f:bb:b7:8b:
51:50:7f:7e:0b:d7:57:fe:27:b3:2f:da:15:3d:92:6d:49:37:
e9:9a:e3:8a:8e:a2:d0:af:bc:01:6b:18:3c:f6:c8:f8:a6:7e:
a9:74:95:0d:45:2f:c5:a6:7f:a9:5b:99:93:d9:0f:6c:7e:d9:
0a:c8:e9:e3:f3:b6:b2:8f:25:36:13:c9:15:a7:39:74:65:80:
c6:34:80:65:a1:e4:be:91:16:8e:32:e4:d8:d1:1d:ce:f3:27:
1e:43:a6:0e:8a:15:e9:87:7f:a0:68:7a:6c:9e:58:cb:14:fa:
06:d5:cc:48:11:a3:10:4b:85:f6:41:c6:3d:a9:89:fc:16:6d:
e5:ea:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:25 2026 by rpki-client