
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json)
Hash identifier: 3TOMctNMPer3rm+YHlPWNZPWIcF5ytMa3Mxdvi+VEKI=
Subject key identifier: 23:1D:68:82:7A:D5:F3:64:27:F1:87:18:0B:80:CE:F4:0A:82:9C:4D
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 0A98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
Manifest number: 0A62
Signing time: Sat 28 Feb 2026 19:57:07 +0000
Manifest this update: Sat 28 Feb 2026 19:57:07 +0000
Manifest next update: Sat 07 Mar 2026 19:57:07 +0000
Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: jV1WnJqe7SuwOaCE9BeJqT97NGFW7FM8ttPVL0Ywrzk=)
2: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 2Dd7cd8I4OSARGKZ0mccoyZW6iVZIc9ObRTGe4O/Dcc=)
3: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: eb8Dxmgs1pJ56B+p/g4fWelI2bfJeXR9VvaW0O1EVCY=)
4: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: fT5I6I+PgWW4dacN3a4Ms0RKDB8N3MNCREMj8FDesrg=)
5: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: NOfiYVkjVgVKJdndF7rjEsZWLBXmxcXaA+rDg1JFfcI=)
6: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Fh5T2BpUHXj8z7zvCSIDzf9GCkAnUEieH5BE04K3ZeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2712 (0xa98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Validity
Not Before: Feb 28 19:57:07 2026 GMT
Not After : Mar 7 19:57:07 2026 GMT
Subject: CN=69a34893-ab36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:a5:e4:d6:cf:bc:a5:ea:17:66:47:1a:cd:
97:98:8d:a2:9d:4b:a8:a6:c8:6f:0e:7f:b0:ec:17:
f1:5b:d0:1d:8a:3d:88:c1:91:58:7f:83:0a:52:81:
3d:f7:00:74:3f:c0:b6:90:54:5d:cb:9d:82:35:06:
50:b7:da:cb:64:c8:94:d2:bb:7b:ac:be:cc:5f:a1:
39:b9:6f:c4:04:ce:27:e7:75:96:3b:40:ee:b4:0a:
bb:ce:f3:e4:15:72:8b:cc:36:a7:ff:c6:f2:d9:9a:
19:fa:80:1c:d8:54:67:01:9c:54:ed:96:bc:97:ba:
85:b3:d9:07:89:10:23:cb:70:1a:5b:7e:18:a5:f5:
c4:9e:e7:75:35:d8:21:6f:5f:00:cf:83:db:74:98:
98:a9:0c:a8:2b:6b:be:1a:05:4a:73:3c:d4:27:98:
2b:ed:ba:71:f4:2f:29:14:4a:2f:c6:ac:40:5a:e3:
a4:7d:4f:73:4e:4e:8d:92:4e:4e:45:45:4d:1e:89:
4a:f5:66:8a:c4:61:9e:26:ad:67:53:94:f2:8b:3c:
9a:44:0a:0f:0b:16:17:78:3f:7a:9b:58:0d:a8:96:
91:13:3c:41:59:52:c6:d6:6e:3f:59:15:ba:c4:66:
f3:ba:b9:8f:89:c4:f9:5b:2d:ee:82:0f:1c:d3:af:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:68:82:7A:D5:F3:64:27:F1:87:18:0B:80:CE:F4:0A:82:9C:4D
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ea:f4:b3:75:33:10:51:8d:41:93:91:4b:55:dc:1d:f6:84:
53:93:7d:17:96:af:02:fc:f0:7a:3d:df:cf:e3:cb:1e:e1:94:
5e:45:12:13:2f:fc:24:7e:9d:14:9d:95:96:2b:c6:ca:da:88:
ac:dd:d6:ba:4b:c9:62:55:f6:49:60:22:7c:5d:e8:77:6d:48:
db:67:dc:6a:4f:60:a9:82:1e:65:b8:15:8b:26:60:18:47:9c:
23:52:3c:25:d3:3a:9d:04:19:28:b1:d9:0c:e3:2a:fd:67:12:
39:88:1d:a1:cf:eb:31:98:1b:47:d3:a8:6e:88:91:b3:54:87:
bd:8e:52:f7:0b:51:e4:7a:16:e3:bb:7b:40:f6:3e:de:dc:a6:
21:bd:56:88:26:d5:12:30:d3:fb:41:03:1e:4f:1d:c0:ac:0b:
32:3f:6f:da:47:ac:bc:e0:82:19:61:75:d9:31:c5:55:b1:fb:
cc:ae:f5:9d:8d:2c:7b:f0:05:79:b3:77:1a:e7:bc:2a:12:4a:
62:6c:8c:b7:09:52:19:b3:11:a6:ed:41:76:66:61:b5:68:8b:
fc:e7:6a:e2:38:3a:fe:21:63:38:06:8f:fc:06:bb:ca:5a:04:
c7:81:eb:5c:3a:65:ee:fa:55:dd:c7:e5:c9:42:bc:03:3e:a7:
9e:77:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:41:03 2026 by rpki-client