
$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json)
Hash identifier: wL4JQuflEqo24eWvRJvWSKl7FVdVCjP1E1bt6i6z0Lk=
Subject key identifier: CB:0C:0C:0E:8C:05:3D:EE:C9:B2:44:5B:05:E0:F3:87:7A:B5:D7:D9
Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
Manifest number: 01F8
Signing time: Wed 13 May 2026 03:15:41 +0000
Manifest this update: Wed 13 May 2026 03:15:40 +0000
Manifest next update: Wed 20 May 2026 03:15:40 +0000
Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: IXc+BMl+9yRR18pWBqscF2g6Gxrl+PjKIb7pY1glE5o=)
2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: XYht5ZQ/KAnp+RFAT2TWXGSNLAgSyYgAZ+uFeNVyc8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Validity
Not Before: May 13 03:15:40 2026 GMT
Not After : May 20 03:15:40 2026 GMT
Subject: CN=6a03ecdc-5d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:92:61:00:90:02:0c:69:9d:09:d4:d4:3a:
2b:99:88:87:87:02:90:c0:b1:7e:fb:31:b5:47:e7:
75:64:bc:5d:76:af:eb:33:4e:5d:30:e6:5d:a1:b0:
76:56:b0:d7:f5:37:7c:91:a0:da:d7:72:6b:bd:ef:
8f:b7:f8:bb:bf:1b:d3:9d:5b:19:2c:44:ef:5a:b3:
f9:1a:90:53:25:c1:22:9b:77:a7:a4:bc:aa:81:e4:
fe:58:eb:df:b7:57:40:f1:c8:68:16:90:23:ba:07:
cf:51:e7:23:24:94:70:d8:e1:88:81:06:4a:5d:72:
3f:c7:1e:15:88:f7:bc:d2:4b:fe:c5:71:42:d5:29:
43:d2:cf:f4:2e:54:29:f3:19:43:f4:34:e2:3d:58:
43:a6:09:f4:e7:b2:7c:67:a5:d8:28:99:d3:6d:ce:
42:f0:88:09:16:8f:69:48:bf:37:39:da:16:71:6c:
10:21:c3:d0:3e:6d:7d:c3:f7:cf:17:87:a4:db:0b:
4a:a7:b6:43:3d:73:7b:0e:e9:ef:a5:b9:ab:61:7c:
82:af:81:92:35:f9:35:37:5c:cf:a8:c0:fb:05:1d:
d1:29:56:ce:04:c2:90:61:64:a1:ae:18:d4:74:8d:
28:60:18:53:ca:4a:ad:c6:8e:d2:b0:3b:2d:8d:a4:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0C:0C:0E:8C:05:3D:EE:C9:B2:44:5B:05:E0:F3:87:7A:B5:D7:D9
X509v3 Authority Key Identifier:
keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:6c:98:7a:71:df:0f:2b:ba:7c:e4:5c:e2:9f:6b:23:80:2b:
45:a5:da:59:ee:e1:08:5e:2c:37:6c:37:d5:77:6e:ce:4f:10:
79:f3:bc:19:db:7f:29:7f:fe:d1:7b:8b:a1:85:4c:78:98:75:
20:b4:22:59:5b:cb:18:ff:b0:bc:7b:5b:3c:2f:61:34:1f:17:
fb:af:9f:98:b0:fc:b8:9a:df:79:bd:f0:3c:35:80:35:5a:c5:
6d:49:6f:ac:d9:23:91:74:49:31:4b:2e:3b:63:e7:04:82:db:
a9:9a:e1:8a:45:bc:e4:c1:24:46:c7:80:a4:03:9a:5d:93:a3:
c8:2e:52:c5:6d:9a:b5:43:5a:06:db:c0:45:35:92:a3:b8:80:
05:65:45:73:1e:77:73:7c:4b:ea:54:03:e6:c2:ff:08:d7:74:
46:42:93:d7:c1:03:c2:49:42:8d:6e:6b:f8:43:ca:c2:20:f9:
96:c8:52:14:34:67:f0:c2:4f:1b:6c:c3:58:3b:4e:22:18:bd:
c8:8c:06:96:0a:61:b9:c1:40:b3:80:c8:70:54:8c:48:e0:ae:
41:6f:8d:95:fe:9f:e4:aa:4c:77:1d:9d:26:2b:57:bb:4a:bf:
17:2c:44:04:25:8e:22:3b:e8:29:ad:aa:20:76:a8:84:7a:5d:
62:2f:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:19 2026 by rpki-client