
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier: 6bkRFbriqnopfi61l1Hv/GQ7kHVUE0nvm23/vUnHm20=
Subject key identifier: C6:FE:46:FD:C7:4F:DD:09:57:E6:9E:C7:73:99:8F:EB:E7:84:85:79
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number: 0DF0
Signing time: Sat 26 Sep 2026 19:02:25 +0000
Manifest this update: Sat 26 Sep 2026 19:02:24 +0000
Manifest next update: Sat 03 Oct 2026 19:02:24 +0000
Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: nwY7vjBU9z3AiU7iUN/sHX02ief13KagQbHjpCdGCeY=)
2: 1CD09CEA9E2C11F18953E4265611F970.roa (hash: GTgRufRrOY/9upf/2CDbblL7ACUEaUL581JiW4Jmg80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Sep 26 19:02:24 2026 GMT
Not After : Oct 3 19:02:24 2026 GMT
Subject: CN=6ab816c1-6d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:50:30:30:53:b2:79:6e:57:ea:80:92:08:
47:03:0f:e4:41:ce:ef:0a:4c:c4:f8:c1:b4:ff:29:
90:fe:3f:01:4b:99:5e:87:ab:63:6d:11:90:99:77:
22:39:01:76:2c:65:9c:0b:14:8a:aa:62:4f:cd:ec:
50:6c:54:5d:fa:73:ce:95:f7:8f:13:99:a2:a1:1b:
0b:0e:09:4a:40:87:06:4c:11:db:87:03:3b:26:6f:
e4:77:f9:c8:bb:51:3a:9e:3f:0b:6a:c2:bc:5d:f8:
2f:a7:bb:cc:e5:f0:57:e5:5b:0a:bc:6f:db:f7:d5:
7b:aa:32:d3:87:70:73:31:5f:7a:cb:4e:bd:4d:f9:
e4:68:d7:ac:24:f7:ca:16:72:b5:5a:b5:16:a1:dd:
1d:f9:4a:71:1c:c6:8c:ce:a0:21:0a:f3:8e:96:eb:
d8:7d:bb:9f:b3:8b:35:b1:77:a6:bf:48:d3:1d:be:
94:d1:a5:86:11:25:87:20:eb:c0:5e:60:b1:3b:94:
9b:31:57:37:dc:6a:fb:8b:8c:a1:a1:72:e5:5f:b5:
13:b6:07:f1:6f:48:ca:87:9c:88:c0:a5:42:4b:86:
a3:21:88:95:84:5d:75:67:9d:c9:1d:e5:02:fe:de:
fe:22:48:ef:7c:37:2e:6a:f5:df:b7:35:c7:6e:d6:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FE:46:FD:C7:4F:DD:09:57:E6:9E:C7:73:99:8F:EB:E7:84:85:79
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:98:44:14:54:97:de:bf:fb:b0:f6:15:12:8c:13:22:4e:a7:
83:8a:58:69:c1:8a:60:b5:10:48:3d:39:56:5b:4d:7e:9c:e0:
95:4a:88:25:a2:08:71:79:1d:42:9a:02:64:51:50:03:33:01:
e1:ff:c4:bd:f2:aa:da:6f:b0:5a:7e:02:d0:ad:3d:b5:29:49:
e5:da:5b:bf:04:72:a3:54:27:11:3c:a7:e0:78:65:84:e7:97:
bb:17:f6:c2:65:17:3e:c9:bb:ac:53:46:1f:fc:3e:7b:9d:af:
c2:47:b4:fa:72:ea:36:e1:38:49:23:d4:43:60:0b:7a:5c:91:
50:b8:3a:eb:bb:f5:e7:c5:13:fa:95:6e:45:9a:24:2f:08:30:
03:44:d8:0d:8f:aa:3f:c3:fe:7b:e5:90:10:76:d7:7e:30:d3:
57:3c:bf:8e:84:6a:ab:b1:ed:97:b6:71:81:08:9d:8b:f6:29:
ee:d8:ac:47:15:57:4d:d7:0a:55:b3:32:7b:b9:72:d2:8b:46:
45:8b:7d:9e:23:2a:44:5b:47:d4:bd:63:a6:be:cf:0b:9f:0f:
72:a9:65:62:2f:91:00:fd:2f:25:e7:65:c4:de:bd:a1:b4:ae:
22:63:f0:3d:eb:6d:24:10:2a:5a:27:31:7c:a2:0e:8c:b5:5a:
58:e5:5e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:02:10 2026 by rpki-client