
$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier: zf1lVIeG4Mbex/QYWJ7va/wGzT7y41I/JFHrbld+m2A=
Subject key identifier: C2:CD:B6:F9:DA:77:59:06:70:DE:37:33:ED:66:86:15:E4:F3:CE:61
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number: FA
Signing time: Mon 11 May 2026 06:20:37 +0000
Manifest this update: Mon 11 May 2026 06:20:36 +0000
Manifest next update: Mon 18 May 2026 06:20:36 +0000
Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: w1NN5CWtu4FCkhax0G/8BDwxU+o4mghBlD4uZDephnU=)
2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 88RG+IBp3+3IKje/6h9nyZS5YfSLYuAiRdPmohXdymE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Validity
Not Before: May 11 06:20:36 2026 GMT
Not After : May 18 06:20:36 2026 GMT
Subject: CN=6a017535-d477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:ef:1a:aa:bb:c6:05:ac:36:31:48:1f:fc:
57:9b:d9:14:81:6c:86:4a:89:b7:f5:80:76:98:14:
82:7f:3b:1d:df:64:b2:58:aa:b9:de:7d:b5:7c:20:
91:ae:60:f4:91:4f:9b:ea:dc:bb:94:e5:55:77:e9:
db:ec:c2:c8:7a:44:e0:b3:22:ce:de:29:37:04:89:
f3:79:9a:93:23:fd:3e:e4:27:f9:aa:dd:65:6f:e7:
ea:56:c4:4b:d9:8f:1e:04:d2:75:ee:2f:5e:89:2f:
43:4a:3b:49:b3:b5:a2:92:e7:f1:40:47:50:38:53:
b3:cb:8b:04:20:e0:51:3c:ff:f0:8a:dd:ed:6c:2f:
92:b1:bb:9a:8c:b3:ee:f9:a7:ed:49:d1:70:32:5f:
de:ec:1a:69:b5:9e:d5:74:e3:8d:33:e0:15:0f:92:
dd:c1:a6:77:60:f4:4a:4e:0f:48:91:12:57:10:39:
48:3d:65:bc:97:59:cd:8a:29:38:db:37:dc:8a:f7:
d9:4c:1f:25:bf:62:79:bb:c3:2f:66:ee:23:e4:44:
3e:8e:29:9d:57:9b:6e:1e:46:d8:e2:67:80:9b:00:
5b:70:8f:fc:49:05:ff:08:8d:88:f1:cf:65:23:ae:
32:7c:29:b3:73:fb:0c:75:23:df:a4:c0:bc:35:91:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CD:B6:F9:DA:77:59:06:70:DE:37:33:ED:66:86:15:E4:F3:CE:61
X509v3 Authority Key Identifier:
keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:43:71:26:16:21:7a:df:43:c4:ae:09:bc:a4:86:69:e7:b0:
6e:b7:f2:ae:70:24:5e:6d:c7:86:41:cb:24:e9:bd:95:8c:75:
3e:98:98:74:4f:28:ee:e8:53:c1:4e:90:0d:ea:40:7b:ec:ee:
c5:6c:9d:bc:01:97:d0:e6:73:51:ff:e8:9e:1a:06:47:a2:5d:
51:bc:49:6d:cd:18:e3:e0:40:61:94:bd:92:75:1c:bf:6e:83:
5b:ae:4e:5c:6c:2c:92:9b:b4:33:20:ac:59:58:cc:11:39:2e:
d8:5e:98:b1:3c:81:9e:5c:05:e7:72:b8:15:49:2b:2a:71:c9:
e8:4e:0b:2e:6f:ae:9d:92:c5:ad:3e:20:61:0f:3d:0a:54:60:
87:64:8b:e0:4b:91:6e:2b:e6:37:18:64:ad:e8:5f:f9:1d:83:
5d:ae:ec:c2:21:61:2c:dc:c0:eb:6b:e2:48:e7:56:13:71:33:
2e:39:b7:f1:7c:80:58:65:39:54:ec:1e:e9:d9:44:d5:23:e4:
5a:82:23:3b:78:1d:da:65:8e:89:4b:61:6c:f7:d6:92:a4:2d:
8c:27:c0:3d:8c:d7:75:12:41:36:ce:65:e7:63:76:cb:72:99:
95:47:28:16:16:5b:fb:a0:4f:c5:f6:90:3b:02:da:02:16:fe:
06:8e:d1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:47 2026 by rpki-client