
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json)
Hash identifier: twtuj8BYPpeaqblKGNsMQVoKb8uytDd9aJ4wPaAqfHM=
Subject key identifier: D3:13:D4:FD:1A:68:E6:DD:B5:B1:07:6A:09:83:A5:F0:99:3C:74:9A
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 0B10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
Manifest number: 0AD0
Signing time: Thu 24 Sep 2026 19:26:25 +0000
Manifest this update: Thu 24 Sep 2026 19:26:24 +0000
Manifest next update: Thu 01 Oct 2026 19:26:24 +0000
Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: Z97kWb0GzXe/7koeW3kPJsy7JYIasXSqTk3KJmJgL8o=)
2: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8=)
3: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: x+75KtA6yIXg16cK6d8RSXKx6oc30iJuxpXNxIM3qBk=)
4: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: gA8IJGSCT4umqS8N4XtEGwWN2XXvpmZtzI2ciAxreo8=)
5: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=)
6: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Validity
Not Before: Sep 24 19:26:24 2026 GMT
Not After : Oct 1 19:26:24 2026 GMT
Subject: CN=6ab57960-f7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:9b:5d:1b:74:b4:25:e1:23:3c:12:cc:7f:
43:ba:c5:18:cb:d0:b3:b5:6c:d8:fb:77:21:51:43:
a4:24:31:4f:80:6f:35:c0:6d:22:c7:8f:40:4c:4a:
3b:15:e9:ad:bf:18:a2:3c:4e:95:b3:d2:c5:c4:87:
db:9b:c8:e5:b1:7f:4f:13:a1:87:5e:96:2a:25:40:
bc:e6:43:82:3f:00:09:a9:45:ff:ff:0b:86:15:0f:
5d:af:4a:97:30:8e:76:46:cb:85:e6:de:fc:e8:38:
1e:bf:c1:dd:0a:19:84:4c:72:68:72:0f:fa:8b:39:
f2:ef:41:61:70:9b:c1:44:66:a6:19:c6:13:c2:60:
bf:30:44:eb:fc:41:9a:0d:ad:4e:f3:6c:39:54:53:
63:58:9c:57:15:e7:49:0b:1c:e6:e9:9c:90:03:b3:
0c:9e:5f:45:87:a5:bc:ca:91:cd:40:49:99:78:9d:
05:d6:66:40:ff:d9:01:d6:03:d8:8c:88:23:05:32:
15:be:0f:f8:55:1c:ab:71:1d:08:ab:74:f4:23:7e:
b0:a3:a6:19:ea:d9:51:d9:7b:05:95:df:73:76:92:
1c:ab:c6:8c:98:ac:78:65:29:bf:a6:8e:82:0e:44:
3f:c2:97:c5:4c:3e:ff:12:2f:ac:53:21:07:a9:ca:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:13:D4:FD:1A:68:E6:DD:B5:B1:07:6A:09:83:A5:F0:99:3C:74:9A
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:df:a4:8e:11:bf:6e:12:66:17:ad:db:8e:8c:e7:e4:8e:1e:
da:a2:6d:46:5a:f2:6f:e6:27:00:09:b1:e7:41:e3:63:30:a4:
f7:26:d2:34:dc:12:70:81:72:57:6f:b7:ad:95:a5:f1:56:e0:
c3:8b:9e:b2:a1:45:a5:34:69:04:6b:5e:23:8f:9e:3a:ec:39:
62:56:be:ed:36:43:37:3f:46:05:41:f9:3f:3d:b1:49:c3:92:
2f:2f:98:cc:a1:7e:d6:aa:d9:1f:3a:2d:d0:2d:67:0f:9d:c6:
55:fe:c4:78:ab:39:19:f6:4a:27:15:10:ea:e8:0c:3c:52:a8:
71:7a:7a:6c:e9:ba:f6:31:68:b8:c1:13:06:05:e7:49:08:49:
e7:42:ce:68:35:48:65:c6:89:f5:58:33:ca:53:af:ab:94:97:
33:c8:cb:b6:ae:13:81:9e:b4:04:38:b7:46:c0:96:97:e8:10:
27:a3:1e:c8:09:bf:b5:57:2d:15:06:50:2a:9f:a8:cf:bd:e7:
26:b2:18:02:36:48:7c:a3:2d:5a:43:7e:d4:58:bc:8d:d3:b4:
bd:73:6c:8e:3a:40:44:81:90:0d:82:13:29:31:e6:66:99:d8:
ac:8b:f9:c6:5c:06:f3:f2:c9:c2:c6:e0:1e:e0:5c:0e:a7:7a:
8f:7c:63:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 21:33:43 2026 by rpki-client