
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json)
Hash identifier: s3uL/UDzvjjYOWWyfygtJIOziLJVv6Rznx1xNzIhSH4=
Subject key identifier: DB:50:20:9A:04:14:7F:8D:3C:5C:F1:1C:AD:40:6D:D6:FB:64:16:76
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
Manifest number: 01AD
Signing time: Sun 01 Mar 2026 04:58:52 +0000
Manifest this update: Sun 01 Mar 2026 04:58:51 +0000
Manifest next update: Sun 08 Mar 2026 04:58:51 +0000
Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: 0XJimkIuBGJ+A5hsRyDPpXv0Nz7wfjoLPwUhg5GE+Mk=)
2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: 3HWnDyWEtOpHu0uBguZ+JM7rc6iM3YGM5kp7ba2OwHc=)
3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: oml3CF4psDxkIWKsQkPuNHlhG20UbCTK/gnR4LIPvqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Validity
Not Before: Mar 1 04:58:51 2026 GMT
Not After : Mar 8 04:58:51 2026 GMT
Subject: CN=69a3c78c-8aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:de:09:de:ab:df:1e:0f:96:ad:bf:c6:02:
0d:4e:a5:02:7b:de:57:e4:65:4a:89:9f:ab:ee:46:
f8:fe:4e:83:4d:28:4e:a7:79:e4:0b:48:4e:da:09:
ea:93:91:3b:07:3a:e0:75:f7:23:06:c6:df:94:08:
37:73:cd:32:3d:cf:1d:ef:47:27:d9:d0:34:fa:7c:
cf:71:29:a9:ab:46:30:f0:c9:98:18:1a:59:1c:a0:
24:26:cd:5b:ae:f5:9a:13:fc:e1:5c:d5:f5:2d:d0:
7d:c1:16:36:44:98:4d:9c:e6:6e:34:c5:9d:ad:f2:
0f:9b:97:fe:75:82:a5:d6:22:58:6c:c9:da:7e:62:
00:a3:35:93:57:72:d7:71:9d:15:8f:27:53:1f:33:
79:23:65:da:a6:24:cf:70:8d:86:21:b0:fb:c3:56:
33:7c:a0:ce:e8:ce:79:a5:19:70:9e:d7:cd:d1:53:
6c:60:62:eb:29:ca:e8:ff:58:93:2a:f9:ee:d5:aa:
cd:fd:f0:1c:a1:52:f9:5a:90:68:dd:b4:5a:93:39:
23:80:80:e2:b8:79:7f:f8:ce:af:a0:af:9a:dc:d6:
ef:c4:e1:f5:ac:fe:e6:be:d2:b7:94:59:b5:79:9e:
8c:0c:46:2e:cd:f2:a7:e4:7d:96:46:d4:19:e8:6c:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:50:20:9A:04:14:7F:8D:3C:5C:F1:1C:AD:40:6D:D6:FB:64:16:76
X509v3 Authority Key Identifier:
keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:8f:58:59:7f:da:6f:29:d6:88:86:e2:6c:08:8f:2a:e0:b2:
12:34:cf:c2:54:03:1c:e2:6f:32:cc:2e:26:19:39:09:93:a9:
c4:bb:e3:12:3c:fa:1d:e6:8b:a6:01:d9:db:b6:e8:e2:85:04:
77:30:89:cd:ae:e6:d6:92:5e:44:11:d5:7c:a9:a6:ea:72:99:
a3:36:e1:b6:0b:0f:b6:b0:7b:e2:4a:e3:cf:9b:07:0e:47:1e:
0a:78:59:08:98:f1:54:b4:af:4e:c4:69:4d:73:d1:9d:ef:7a:
8c:01:92:25:53:f3:89:b5:a1:29:3f:79:a1:fb:cf:67:fb:53:
d1:25:e2:67:9d:e8:f1:1d:83:c5:47:46:91:e5:d1:36:34:0f:
e2:34:8a:6c:5f:d3:21:47:ce:6b:68:d6:66:27:1a:65:40:ac:
06:c8:89:b3:0f:e0:8f:00:61:d2:56:ce:48:7d:c7:79:40:33:
36:1e:71:bd:8a:7c:f3:da:a2:2c:ca:49:d5:b5:0e:91:ff:96:
69:fd:00:28:fd:7e:8d:f9:e2:13:e7:84:bd:b1:ca:e1:c3:ca:
6b:d2:80:71:34:d0:9e:76:18:1b:0d:46:1e:ab:31:b3:33:7c:
b9:82:bb:9c:1e:fe:1b:0f:1f:77:06:05:e4:9d:c6:05:8a:49:
45:f8:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:13:47 2026 by rpki-client