
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier: T77we4bgwx2Zcip+SVV+BtSU1VcfHEFNmJH074Jlu38=
Subject key identifier: 49:D3:64:1E:66:37:DB:81:27:9A:65:50:4B:B1:FD:17:B7:F3:EE:5E
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial: 26A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number: 268C
Signing time: Tue 22 Sep 2026 15:39:03 +0000
Manifest this update: Tue 22 Sep 2026 15:39:03 +0000
Manifest next update: Tue 29 Sep 2026 15:39:03 +0000
Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: eZGmefjMdXe+0STjSeKEhLR4BjsAZVNV3yxljiw2WM0=)
2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: 8wXuS4+JORHsa5NlR+0rKW7paq6mS+3bQqZ2PWslzSo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9897 (0x26a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Validity
Not Before: Sep 22 15:39:03 2026 GMT
Not After : Sep 29 15:39:03 2026 GMT
Subject: CN=6ab2a117-1217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:50:ee:07:f4:8e:9d:70:dd:f0:cb:6a:96:
66:b3:5c:d6:fe:2c:6c:b2:58:61:9c:30:bc:ae:3b:
8c:b0:28:44:e3:ad:4d:6d:da:66:79:1d:36:4b:34:
c7:e5:71:fa:ad:c1:87:7e:1c:0f:1e:ab:f9:ac:45:
6b:6a:4c:28:9f:54:4c:0d:b1:45:1a:5e:39:95:44:
a2:81:cc:e4:ae:0c:f8:70:c9:e6:5e:a1:d9:75:8d:
f7:42:92:06:0c:08:7d:4e:1c:11:3e:c8:5c:c3:c1:
7f:b6:d0:06:3b:18:a5:86:01:5c:bf:cf:86:4c:66:
2c:6b:92:8b:f1:ca:55:ce:3d:55:17:18:a8:6f:bd:
be:5e:ca:24:5f:bf:39:75:21:a1:76:27:3b:17:c7:
b7:fe:74:de:0c:19:fa:60:80:8e:e7:d6:2b:50:42:
be:eb:5d:1a:6e:17:23:ee:87:1f:37:65:b0:c2:dd:
a4:8f:f2:d6:dd:02:41:4a:a7:42:3e:17:02:f7:2d:
ae:fe:36:fd:94:d4:30:9f:eb:44:7a:19:32:73:e5:
9f:53:e4:e5:89:64:f3:cd:a6:27:ff:25:a7:c1:18:
6a:98:58:25:33:e4:68:24:a8:62:85:bf:7c:01:6b:
e4:d1:2e:45:f7:7a:d8:e2:86:c8:a4:4b:ff:15:91:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:64:1E:66:37:DB:81:27:9A:65:50:4B:B1:FD:17:B7:F3:EE:5E
X509v3 Authority Key Identifier:
keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d2:44:a2:83:9f:b5:59:26:63:96:6a:bb:f3:4f:58:f9:15:
a2:dd:9a:96:49:83:b5:71:8d:7e:1e:b6:a3:83:f4:a1:9a:dc:
98:1b:da:03:0e:32:46:a4:a4:07:6d:43:c1:2b:7d:d6:f8:39:
4b:53:94:80:8e:51:66:c3:14:22:a2:41:be:c8:19:07:d3:6b:
2e:e3:e6:55:fe:a8:6c:98:1a:53:af:b3:c4:c2:97:c6:22:da:
f6:05:c5:0b:d7:47:34:86:7b:09:b6:e6:2a:67:e4:de:31:04:
1d:a9:bb:67:29:54:0e:2b:a5:59:ea:e2:ab:c0:49:13:79:36:
12:a3:63:86:29:cc:46:34:2c:d2:26:8b:ad:08:70:f2:ac:8b:
dc:b4:2e:8d:ed:06:e3:07:c1:c6:18:1c:1b:e6:41:b4:48:79:
87:a2:44:43:78:60:c5:4c:9c:15:a1:34:78:7d:c2:5e:1a:9f:
ed:38:71:f6:fb:fe:19:24:d2:a4:f2:88:db:2f:3f:b2:f8:c2:
32:1f:ae:e3:e5:c2:7b:e0:e2:1f:37:e9:d4:16:d4:94:6d:ac:
f1:81:f2:49:29:91:39:c5:96:25:87:06:a7:91:2c:23:ab:fd:
12:82:05:c7:98:8f:6d:ff:01:32:7f:62:51:7e:31:3c:d2:f0:
3e:68:f7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:43:08 2026 by rpki-client