
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json)
Hash identifier: JTjChdd/P1TaU4EDsOVGNf1V4fWXo8UzhODFGAjcqI0=
Subject key identifier: FF:A9:E8:92:F9:99:88:46:50:5B:2C:63:BF:82:F0:12:9A:7C:4A:DA
Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
Manifest number: 0141
Signing time: Mon 02 Mar 2026 00:48:22 +0000
Manifest this update: Mon 02 Mar 2026 00:48:20 +0000
Manifest next update: Mon 09 Mar 2026 00:48:20 +0000
Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: 50H+f2n2OFsLt2xIru8ptritIT+cot6a7KsFXpp8rNM=)
2: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: zFIoI885tqgmIc+TzAmT9MM/Zj8hlNvuKZSxFX8e55k=)
3: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Validity
Not Before: Mar 2 00:48:20 2026 GMT
Not After : Mar 9 00:48:20 2026 GMT
Subject: CN=69a4de55-d961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0e:cb:43:69:25:1a:85:b7:49:b4:7a:13:c9:
43:8f:9f:08:13:a0:1a:58:f2:25:84:88:39:76:4b:
c6:35:9f:72:5e:b2:bd:ca:a1:ca:89:06:21:6b:d8:
5f:4c:c7:93:86:4a:04:d3:7f:82:16:c7:91:74:bc:
e8:be:16:5b:4e:de:d3:84:d9:19:94:a9:d4:fc:9f:
87:3d:7e:0c:96:14:83:b6:b9:39:27:14:f2:7b:42:
36:32:2f:48:53:12:70:67:aa:4e:d1:ee:8b:a5:f4:
15:84:68:76:79:77:7c:ea:2e:01:b3:d3:e3:4a:1a:
44:07:30:70:7d:0e:9d:4e:d0:72:1e:88:29:26:4d:
29:6e:62:2e:40:39:28:37:9f:91:e4:a9:c9:e1:57:
97:cf:dd:bb:32:38:ad:a4:ca:29:d7:99:57:4e:2e:
cd:26:84:8c:ec:7c:46:cd:27:10:8f:4c:88:e9:c1:
b1:e2:07:5e:6b:4d:63:68:78:d9:db:fa:0a:b1:a4:
9d:83:b3:0a:af:23:93:f5:47:e5:7a:de:6e:63:9e:
46:5d:5c:40:a2:19:30:bb:da:2f:08:d8:fc:1c:a6:
80:bc:ed:2c:1b:68:67:b7:fe:3b:a4:b3:9f:f8:83:
73:2d:d7:db:00:10:21:38:16:ae:c5:5f:ce:73:35:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A9:E8:92:F9:99:88:46:50:5B:2C:63:BF:82:F0:12:9A:7C:4A:DA
X509v3 Authority Key Identifier:
keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:99:53:c9:8c:61:07:31:cc:d2:32:04:e8:65:b5:44:b2:17:
f4:cd:65:73:11:e1:66:94:87:c2:88:2b:6f:8b:d5:66:10:dd:
92:04:92:6f:a3:50:70:c3:4c:46:8d:de:4e:5e:2a:01:57:df:
a8:b4:13:db:fd:58:f7:1a:07:47:cf:a8:98:19:01:74:67:e2:
b2:eb:47:bc:e5:4a:7a:aa:b3:f5:85:ba:56:2c:31:74:b1:b2:
9a:7c:0c:06:10:28:69:43:44:5f:15:13:ae:60:db:73:e6:15:
7d:f9:22:ac:c1:46:98:e9:28:22:6e:ca:9d:fb:9a:fd:45:c5:
24:85:b7:bc:76:04:8c:0f:ce:25:da:16:66:74:b2:fd:cf:9d:
a3:6a:7b:71:b2:6d:84:6d:0e:35:8d:8b:92:74:92:cf:f1:86:
34:bc:82:95:43:0d:2c:5f:c8:73:cb:9e:21:8d:3b:68:86:c0:
48:b2:2e:b4:7a:48:90:2b:fd:fc:81:73:4c:f2:f7:bd:c3:0b:
02:36:54:d7:30:c2:8b:f2:11:aa:38:15:e4:6d:1c:22:76:02:
f4:81:e2:9e:e1:46:43:6a:b0:39:c6:e4:d1:a9:47:89:a5:44:
73:8a:7b:16:91:cf:b6:db:c5:cf:94:04:70:3f:d2:c6:85:af:
db:fb:06:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:39 2026 by rpki-client