
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
File: XmtaBob1a6DA93-zvzGzhWMiCCQ.mft (raw, json)
Hash identifier: OlxgKBNJeOOXAW1x13vfX5GiRlYUw3RdLIUuVjLoLZc=
Subject key identifier: 41:1C:22:FE:4A:E2:6A:C6:3F:FF:D6:C4:97:91:54:F0:91:79:F7:AA
Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
Certificate issuer: /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Certificate serial: 2373
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
Manifest number: 2359
Signing time: Sat 28 Feb 2026 15:51:13 +0000
Manifest this update: Sat 28 Feb 2026 15:51:12 +0000
Manifest next update: Sat 07 Mar 2026 15:51:12 +0000
Files and hashes: 1: XmtaBob1a6DA93-zvzGzhWMiCCQ.crl (hash: juCHe70mZClHOL3wzAJDVcItWowhY1UmEWnt1ZHI1Hk=)
2: 44C007B0A0D611EDA2603C4EC4F9AE02.roa (hash: MAOIki/mm/t0sbRkALRqm8AR2/Jy8UBEI5Awsr4aYLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9075 (0x2373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE107, serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Validity
Not Before: Feb 28 15:51:12 2026 GMT
Not After : Mar 7 15:51:12 2026 GMT
Subject: CN=69a30ef1-df4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:14:d3:f1:1f:e6:f0:fa:bd:52:68:06:97:
41:50:00:c2:4a:67:8e:e4:ff:fb:06:8c:65:41:be:
fe:94:49:c2:0f:f9:de:82:3f:8e:51:bf:38:f7:33:
32:2e:0f:18:52:46:f2:75:20:bd:54:ed:8e:e9:2a:
31:3e:07:5e:04:dc:f6:1a:70:b3:d0:88:88:f3:45:
0e:07:2e:d6:7b:95:eb:55:0d:3d:c4:ea:1f:ef:1e:
91:29:93:08:dc:a5:8c:c3:c0:84:92:48:50:ed:9b:
45:b5:9a:87:58:7e:cc:e7:12:20:9b:49:c3:ab:a4:
73:cc:02:fc:8c:b3:1f:e6:57:fd:e2:8a:2d:08:2d:
9a:ca:9f:ac:41:01:4a:fb:b4:e5:cd:a2:f2:04:1b:
66:0f:f6:d7:ed:72:ff:bf:c1:dd:b0:67:0e:8c:0b:
f7:fd:41:10:0c:25:06:46:2e:c1:9c:5e:9c:16:e9:
05:43:38:86:51:9a:ac:74:a0:c7:5a:7e:ab:de:72:
b2:66:3c:2c:64:f3:a4:4e:36:74:8f:76:66:ad:37:
21:77:b6:69:80:36:3c:fb:c6:c8:3f:06:fd:58:25:
b9:2c:cf:57:2f:6a:db:29:cb:0e:ad:f4:9c:68:db:
9c:ba:7e:0a:10:49:52:8b:55:13:cf:83:68:63:88:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:22:FE:4A:E2:6A:C6:3F:FF:D6:C4:97:91:54:F0:91:79:F7:AA
X509v3 Authority Key Identifier:
keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:04:45:14:2f:4b:66:5c:6b:6b:c9:11:3e:7b:e0:c6:61:71:
3e:89:a2:c2:68:4b:39:bf:7a:7f:15:f7:36:72:35:8e:08:c9:
c6:8c:d2:33:82:a0:78:27:2d:35:3c:a2:d8:45:5f:cd:83:7a:
47:cb:2b:bb:43:31:86:1d:1b:5f:d6:e7:29:08:e3:4a:05:1d:
86:08:b6:3f:5c:de:63:47:ed:91:8b:8c:bb:a4:a8:4b:ac:7b:
be:51:7c:29:95:4f:ba:0e:2c:60:11:3c:b0:a9:9b:9a:87:35:
51:f8:5a:37:db:f1:10:e3:d3:40:96:18:62:7e:da:20:35:0e:
0c:ee:3b:77:af:e5:2f:1e:d8:9b:17:26:e3:d7:38:cb:b0:af:
7d:fb:5b:3b:00:43:11:53:c3:5f:55:5c:2b:e5:49:b4:62:6b:
83:d4:c5:d9:24:6f:15:43:79:50:b6:a7:7a:f1:e0:4d:4c:10:
a6:3b:8a:e9:c5:2d:e4:fb:a0:5f:f7:fc:9f:7b:40:d2:b5:bc:
50:d7:e9:18:ec:9a:9e:7d:39:5e:41:27:bf:65:56:9e:7a:bd:
c8:cf:5b:74:ae:56:6d:39:e8:cd:97:92:ec:46:f4:3f:d1:e1:
48:9e:d6:c7:07:f7:f1:f8:2e:0c:20:ad:18:14:dd:ca:6a:78:
1a:4d:d7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:08 2026 by rpki-client