
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json)
Hash identifier: aixLJrtPhR4T9oEllEmaJeMy/nkq1D2rvlWrpMizTJk=
Subject key identifier: 41:FC:06:5F:80:58:85:90:98:F0:1F:85:25:FB:98:27:F1:5F:CA:53
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial: 0781
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
Manifest number: 076C
Signing time: Tue 12 May 2026 21:44:53 +0000
Manifest this update: Tue 12 May 2026 21:44:53 +0000
Manifest next update: Tue 19 May 2026 21:44:53 +0000
Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: KjCex7vNN3PVjkBKegK+m7rs4P0Tuusb+ICvRoZSbfE=)
2: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: FGwdEm0SPNy0TpBINVzEc/flFNni0xPCsSoqxUh+Nr0=)
3: 79520888650611EBA9BB2882C4F9AE02.roa (hash: /W4EDzCJO28OAsl3pdvhn80k2j9lIQ5KcY8vtvKyWxM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Validity
Not Before: May 12 21:44:53 2026 GMT
Not After : May 19 21:44:53 2026 GMT
Subject: CN=6a039f55-9b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:d7:75:a4:43:9b:e1:60:db:15:74:12:65:
19:22:24:6e:02:f6:92:07:07:58:27:07:1b:88:d3:
78:9d:55:40:f8:c0:54:3c:7e:62:7e:d6:af:00:37:
fa:a4:94:ba:4f:f8:76:35:49:0a:f7:d1:04:88:1e:
b3:51:70:a5:d7:2a:f4:7c:5e:cf:c7:46:78:62:5c:
8d:96:7e:31:88:7b:a4:ab:90:c3:24:15:b3:84:53:
a5:44:9a:06:9e:1c:c5:07:cf:dc:f5:ca:99:b5:23:
f3:77:5d:08:98:eb:4c:4a:c5:1a:03:37:3b:83:34:
88:01:01:81:97:6c:bb:5b:40:b8:6d:5c:79:ff:59:
7f:35:f3:19:fc:b1:8d:ea:22:ab:b7:6f:50:69:a1:
13:51:bb:92:a2:28:b0:cc:1a:27:de:e8:35:b2:f8:
47:51:39:3e:e6:10:d8:4a:23:78:50:dd:67:ed:76:
77:9d:cf:5a:17:8d:d1:f3:0e:3f:72:24:90:31:c9:
ff:d5:97:92:88:b5:2a:b6:5c:4e:58:65:32:e6:5b:
6f:8f:ac:45:03:e8:20:3d:e9:dd:9a:9e:00:9e:4c:
cd:4d:14:8d:40:3e:9c:bf:92:42:0d:34:2f:40:ca:
ca:02:ec:c9:30:af:82:77:9e:e5:e1:99:16:db:69:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FC:06:5F:80:58:85:90:98:F0:1F:85:25:FB:98:27:F1:5F:CA:53
X509v3 Authority Key Identifier:
keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:18:ca:b6:a0:37:aa:f8:20:24:26:14:9d:41:54:0d:24:16:
63:52:f4:c0:e9:1a:bb:ad:9a:e0:d8:dc:4f:30:01:c5:6a:ed:
7a:6d:0d:ec:da:9a:34:58:b2:fd:e1:2a:a8:51:e7:eb:50:de:
8d:ff:c0:e7:89:1d:9a:dd:32:aa:c3:ee:80:9a:97:d0:ba:ee:
8c:d5:b5:80:99:10:cb:e7:ae:f1:d3:68:0c:10:dc:9c:f8:e2:
e0:79:4f:04:bd:df:10:f0:ad:4b:5a:1d:11:00:37:f8:8e:fe:
ba:fb:4f:79:f9:68:a1:8c:51:c3:44:b4:d0:5a:3b:10:a5:ce:
d5:10:81:b1:ae:f5:0f:29:e4:67:ee:61:37:ba:59:e2:9a:00:
eb:8e:53:63:e4:04:6d:1f:05:ec:2e:85:c5:0e:67:44:0a:be:
59:54:2d:b7:8d:d7:21:5e:a2:0c:0d:37:2d:df:38:24:4e:72:
28:68:84:1d:dc:80:c2:a1:7d:52:d5:ab:27:f9:b4:b3:be:4c:
09:9b:cd:6f:91:b9:40:8f:40:6f:9e:59:41:89:93:ca:ae:02:
2c:16:b2:2a:fb:48:ad:ee:00:46:f0:95:51:d9:08:eb:24:08:
b2:4c:b0:f3:c8:8b:30:49:f9:27:39:ad:ec:6c:0a:87:74:df:
b4:d8:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:01:33 2026 by rpki-client