
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json)
Hash identifier: 4hN8pMKPQXRYR1wP13EApEN/fwPWF7Jn11eJ7p9tIIs=
Subject key identifier: 89:F5:7E:8F:D8:9F:E6:56:69:7C:0E:33:11:48:24:5C:89:71:92:C0
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
Manifest number: A4
Signing time: Sun 27 Sep 2026 07:48:51 +0000
Manifest this update: Sun 27 Sep 2026 07:48:51 +0000
Manifest next update: Sun 04 Oct 2026 07:48:51 +0000
Files and hashes: 1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: pSloupYhdqG3DNqEyXza/Dj2WogTM6oUNZJGB1kdW7c=)
2: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=)
3: E322A666B65C11F18F489CF26F11F970.roa (hash: RwkocUiEJJ/WlBdJ4xcIB1mybwRQyZ+jCn34n3mMFxg=)
4: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Validity
Not Before: Sep 27 07:48:51 2026 GMT
Not After : Oct 4 07:48:51 2026 GMT
Subject: CN=6ab8ca63-a442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:40:78:9e:31:37:2b:33:3c:ff:2c:29:7a:
0b:e5:b1:6e:14:50:8e:e2:7d:4c:8f:dc:6f:ce:75:
b2:12:8a:52:e7:cd:3c:96:2f:98:4f:80:15:af:8c:
68:8e:2d:e9:02:85:56:c5:e2:96:92:71:aa:e4:ad:
1c:f6:e0:79:89:2f:0e:0f:16:98:95:ae:b4:03:ad:
23:0e:d1:b6:cd:cb:80:7d:4e:43:c9:f5:e7:54:f7:
94:4a:b8:bf:bf:35:98:40:33:00:10:af:69:24:e4:
59:b2:1f:d9:3b:3f:08:59:ef:77:74:b9:93:3f:32:
aa:0a:b3:19:fd:16:2b:e6:5d:68:e8:d2:49:07:1e:
b0:31:22:b2:23:09:ab:b6:52:70:31:4c:0d:25:63:
49:df:60:eb:dc:9b:23:5c:f7:4c:2d:72:4c:12:a4:
d4:e7:c1:15:e8:b6:20:af:61:7e:72:87:8a:12:02:
16:42:d2:37:4d:45:37:07:7b:19:cd:d6:e9:32:19:
27:ea:ee:de:7e:51:67:52:3d:eb:97:83:78:d5:2f:
0c:bd:69:51:cb:79:88:16:c6:94:a2:c0:92:07:af:
98:e7:22:8f:e5:96:20:fe:61:70:a1:38:ed:85:c0:
0c:d1:b6:7b:5e:a0:b1:f9:f2:9a:7f:8e:f6:c0:3e:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F5:7E:8F:D8:9F:E6:56:69:7C:0E:33:11:48:24:5C:89:71:92:C0
X509v3 Authority Key Identifier:
keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:6d:d8:f9:d0:61:43:36:aa:f0:b5:13:6c:99:12:df:6c:90:
8a:dd:ea:64:e1:ea:50:29:f7:0c:8d:b1:c3:ae:cb:d6:74:65:
ea:56:03:f6:54:80:3b:28:22:08:31:72:a1:11:54:df:98:6a:
0e:d0:06:f2:f1:7f:49:a5:bf:0c:17:e2:49:16:35:c7:fa:3b:
ae:af:58:c3:1b:41:04:21:5f:0a:30:a4:18:5f:1e:21:ff:63:
b5:65:55:8f:30:83:42:72:f7:f8:fd:cc:82:7d:7b:17:a8:77:
42:76:1b:99:b1:32:fb:0a:40:15:3c:57:50:5c:64:33:13:f0:
19:29:b2:74:76:7a:25:6b:69:7a:62:ed:68:be:6a:f9:7e:00:
7c:a3:0a:ee:c6:0d:08:9c:ab:d0:ac:e3:3a:28:a6:6e:0d:20:
d1:fc:3e:c0:80:81:69:f2:d5:ad:f1:3b:8f:54:7a:df:26:bf:
a9:50:a7:43:10:ed:3f:bc:a9:aa:1c:2f:18:e1:6e:3e:09:0c:
f2:66:7b:27:9f:c4:56:d2:10:ad:a7:2e:77:7b:95:84:c9:de:
da:81:09:47:f8:4f:9c:cb:40:99:dd:d2:de:20:ff:e5:00:f9:
7f:f4:56:c1:33:5a:14:c5:f0:4d:4b:0d:4c:d3:0d:a4:94:51:
24:db:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:57:26 2026 by rpki-client