
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File: xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier: t1+EGFpBJYc/qzTGVNEVnelwxO6eyCFKphXfQq/bqT0=
Subject key identifier: 99:31:52:B9:84:87:B9:58:12:DA:3E:AF:61:B8:DA:02:DC:91:D3:6F
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer: /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial: 08DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number: 08CF
Signing time: Sun 20 Sep 2026 20:21:55 +0000
Manifest this update: Sun 20 Sep 2026 20:21:55 +0000
Manifest next update: Sun 27 Sep 2026 20:21:55 +0000
Files and hashes: 1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: PbrN8SKbUB+yiIVUGDZVq2QipYfqITkGqBwefnYY6RY=)
2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: 0bOv1at0Vcb3GxsjET0li4ANb9C2Voi1AUcj6Mhivug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Validity
Not Before: Sep 20 20:21:55 2026 GMT
Not After : Sep 27 20:21:55 2026 GMT
Subject: CN=6ab04063-55be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:95:59:69:8d:75:ea:a0:74:22:8f:74:71:
cd:b4:5c:6e:85:02:d9:61:6c:b4:5c:9d:6f:67:02:
0a:91:c1:d2:1d:38:ae:64:73:dd:49:d4:8b:2f:c1:
b3:83:72:2a:b5:3b:35:1f:fa:78:87:d0:a5:9d:88:
98:08:17:4c:4c:9d:4d:04:51:f4:2e:ab:e8:1a:d0:
42:bf:5e:12:d0:85:98:ba:48:c1:d9:79:82:65:9a:
ee:e5:f4:4d:dc:c9:c2:fd:91:46:0b:f4:ab:b9:1d:
d4:b6:b7:2d:0f:7e:17:14:f0:87:74:fb:69:0b:c4:
ca:83:60:0e:d5:d8:b2:db:16:cc:ee:8c:ac:d0:5e:
16:2a:26:20:1d:00:f8:6b:e7:e9:37:e3:2f:8c:89:
c6:a8:d0:54:b6:19:53:76:d1:97:57:cb:e4:9b:da:
fe:f0:46:92:06:b4:7e:5b:c8:42:e7:18:41:57:8b:
ec:75:a6:28:44:fc:68:9b:a3:0e:a6:81:98:aa:0d:
e2:7b:63:3b:82:36:b1:62:40:30:84:01:32:f5:08:
23:03:e8:d8:12:e2:1b:d9:26:37:02:2f:fb:07:28:
6a:54:6b:71:69:49:11:59:4e:79:c6:a5:31:41:eb:
3d:ca:d4:60:c5:95:ba:35:d8:08:4f:b2:d2:6d:bb:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:52:B9:84:87:B9:58:12:DA:3E:AF:61:B8:DA:02:DC:91:D3:6F
X509v3 Authority Key Identifier:
keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:17:09:68:a5:a3:3d:4a:a2:c2:aa:3f:b6:1e:cb:8c:44:a8:
55:54:c0:42:2e:66:f6:cd:d2:0a:41:e0:76:78:3b:7e:a0:87:
9b:b6:3b:b8:d1:45:d0:a5:8f:1e:39:0e:87:35:de:7a:bf:d5:
99:37:f3:ea:70:a0:e2:ce:f3:a2:90:19:c3:9f:04:2d:c3:11:
29:d3:7b:a7:72:c2:5d:2c:71:35:86:1e:04:8b:64:b5:4d:d0:
bc:54:d9:32:ea:76:10:1e:f6:c0:a8:70:51:53:c7:c5:6f:14:
b7:3e:73:74:56:80:dc:79:a3:c4:c6:e2:ae:c0:d1:7a:2c:32:
b8:75:ac:4e:ac:27:a4:22:db:73:50:c8:9a:94:48:e3:31:b0:
29:0e:26:d6:6e:a6:0d:96:7f:c8:35:f5:d0:5b:21:a9:1e:19:
88:f1:4a:11:fe:b5:b1:03:82:02:a5:35:ee:10:42:74:20:b1:
c0:4e:cf:1c:0a:37:3d:77:a9:4a:8b:3c:85:47:53:3a:18:4e:
3d:2a:67:d8:8c:7e:fb:79:94:96:ea:58:13:da:15:71:82:bd:
9b:ce:56:dc:35:8a:7f:1b:b2:43:aa:21:9e:55:5b:fc:77:3a:
c9:23:e0:1a:d2:4f:c7:1b:dc:cb:21:8d:af:da:69:e6:40:13:
17:ad:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:04:36 2026 by rpki-client