
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
File: X1zijATRbpUODrzVlVVCSD05VtA.mft (raw, json)
Hash identifier: 5FY2TnSX//lU5yPD7GDDIXamRgNHc4lUrvqzs0oB2I8=
Subject key identifier: CB:1B:79:2C:96:53:13:55:6B:1D:EA:45:00:CA:B0:3F:7F:FD:C5:6E
Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
Manifest number: 01C3
Signing time: Mon 02 Mar 2026 02:05:59 +0000
Manifest this update: Mon 02 Mar 2026 02:05:57 +0000
Manifest next update: Mon 09 Mar 2026 02:05:57 +0000
Files and hashes: 1: X1zijATRbpUODrzVlVVCSD05VtA.crl (hash: Gq4nayhA4G8PfxRdOc+hWHd06G8OSXrYStSrAgUWuwk=)
2: 85BF2BE4710111F093C54468C4F9AE02.roa (hash: j9SKLInNcpVR2MVZ8Thc62Fi6/lQmCSnVrmSmxlo0RM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0D86, serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Validity
Not Before: Mar 2 02:05:57 2026 GMT
Not After : Mar 9 02:05:57 2026 GMT
Subject: CN=69a4f086-10ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:d3:ca:8a:69:54:db:85:c4:5a:c0:eb:64:
6e:0b:e0:34:90:6c:c2:d9:94:c0:0e:cf:35:71:31:
af:52:be:5c:5e:b1:df:6f:e5:0c:db:af:54:eb:f4:
ad:41:5b:61:bf:6a:31:6b:b7:46:7d:81:5c:0a:3d:
58:7a:66:89:63:af:eb:44:ed:4d:7b:f8:67:23:21:
b2:c1:36:fb:6a:5f:8a:40:1e:94:08:40:a1:1d:fd:
b3:1d:f7:c7:0a:d1:fa:ba:14:4c:6b:ed:aa:7b:4d:
a7:6f:a1:b7:aa:f4:a0:99:31:cd:c9:17:ff:d0:1e:
c6:c7:83:80:85:81:fa:06:da:ba:6f:65:ee:b6:e8:
54:dc:a2:d8:d5:b9:37:7d:ad:91:18:b2:4a:39:61:
e9:bd:ba:91:da:38:5d:1d:35:36:2b:36:33:5b:f8:
55:a6:4d:88:c9:1a:2f:80:a9:24:75:07:a2:f6:80:
c2:bd:81:67:b4:ab:a4:c7:05:18:28:28:87:d5:a6:
02:ca:2f:e8:38:e3:5f:a0:c9:2c:31:0c:c3:0a:03:
77:4b:3d:69:b2:a7:44:c2:7f:7b:ca:4d:81:17:cc:
a4:7b:40:7e:d8:d3:05:3e:fd:ed:ee:dd:08:20:9b:
85:7c:ff:5a:5a:9c:e7:3f:35:1f:67:c9:b3:ef:ca:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1B:79:2C:96:53:13:55:6B:1D:EA:45:00:CA:B0:3F:7F:FD:C5:6E
X509v3 Authority Key Identifier:
keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:59:39:41:8f:34:03:19:dc:cb:49:8d:02:c4:b9:1f:34:
92:f8:f4:99:43:53:08:5b:73:9f:da:47:71:6a:3a:93:83:97:
d3:8e:7b:7f:2d:f5:cd:8d:1c:b5:9b:ce:dd:65:d1:45:76:d3:
50:a0:cf:a5:69:80:ee:bd:7a:d9:0e:f9:47:8c:ab:b4:c7:7b:
a4:ce:44:75:a3:c5:bd:2c:89:d8:3b:4d:1f:a4:87:a5:62:19:
18:be:72:af:91:b6:02:e4:61:ad:45:90:1f:c6:e6:8d:96:8e:
8c:44:25:0f:81:4b:ba:cb:5c:ff:8e:2e:da:9c:48:0f:53:02:
4d:b4:c3:bc:b3:5b:b9:9d:e8:46:e1:18:5a:b5:e7:78:75:88:
64:3a:12:aa:a2:bf:26:13:9a:72:05:05:e4:e3:7f:c0:e1:8a:
b0:9f:ab:f1:3d:6e:0b:9d:7f:89:1a:9b:b9:ea:8d:cb:a3:4f:
e5:dc:52:3e:4e:20:a5:c7:f4:e5:4a:6a:bd:4d:65:81:83:d5:
94:94:45:36:1e:51:17:1f:84:40:82:0b:11:bd:3e:cb:f0:a7:
6e:99:b9:3c:49:b6:e5:e6:b2:e3:a6:c0:3f:46:ba:16:30:92:
ec:91:ee:5c:d0:4b:de:be:56:f1:ce:9f:db:53:c8:2f:a1:20:
09:0c:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:18 2026 by rpki-client