
$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
File: xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json)
Hash identifier: a3Wh6DbOStki1d7DkavfJ5EL8i/sCLNQhU5BRuDggbc=
Subject key identifier: 18:77:16:AA:8D:A0:93:90:E8:6C:93:85:33:AF:38:C6:80:53:E3:F6
Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Certificate serial: 0347
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
Manifest number: 0339
Signing time: Wed 13 May 2026 01:12:21 +0000
Manifest this update: Wed 13 May 2026 01:12:21 +0000
Manifest next update: Wed 20 May 2026 01:12:21 +0000
Files and hashes: 1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: QaUX2p2XCQL7pOwwaUGe2T/3ImcCszSc4xCzwtWEpAw=)
2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: yNX1Hr9oIcR58b1nEt7c5c8aU3fBu8ibYkFmNG/a1UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 839 (0x347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Validity
Not Before: May 13 01:12:21 2026 GMT
Not After : May 20 01:12:21 2026 GMT
Subject: CN=6a03cff5-0c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:82:8d:f8:83:4b:7b:9e:de:bb:3c:15:c8:
83:2b:ba:d3:25:77:5c:5b:e2:e7:0e:75:7f:12:23:
99:36:7a:9c:b7:af:c6:00:b9:86:92:ac:ee:84:05:
03:5d:4d:2a:ab:34:9b:29:73:8e:af:2f:29:60:e6:
4a:ac:f2:c1:10:51:34:f1:70:8d:d8:bc:80:78:7e:
f1:00:6d:a7:25:03:7b:29:99:d8:6f:90:d0:15:3b:
5b:e5:d7:74:b0:ed:29:fb:03:5d:ec:24:64:78:c0:
41:0e:bf:26:20:26:16:97:a5:1d:4c:48:14:c1:3d:
b4:78:a4:85:36:ef:f7:99:64:64:2c:ef:0d:0b:f6:
f8:b1:72:27:13:c8:77:68:98:d6:93:c3:5b:8c:59:
aa:a3:c6:76:9b:8d:79:c9:95:28:9a:96:a3:68:29:
69:e8:af:05:a4:55:6d:fd:68:84:6e:19:d5:05:5e:
32:d0:e0:4c:34:60:9b:ba:68:ce:e0:2f:06:61:9b:
40:4b:fb:ba:e4:76:d3:10:6d:9c:d0:ba:d3:b2:80:
3d:0b:36:7c:49:01:87:5f:67:fa:b9:65:33:eb:98:
99:de:30:e5:ab:44:ae:5b:a4:25:a4:6f:de:56:32:
07:e0:92:84:f4:52:a4:a9:9a:dd:b1:34:44:00:ba:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:77:16:AA:8D:A0:93:90:E8:6C:93:85:33:AF:38:C6:80:53:E3:F6
X509v3 Authority Key Identifier:
keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ac:61:d1:b2:8a:38:3f:02:12:f2:89:17:69:2e:3e:b9:1f:
62:fb:f8:57:a3:3c:1e:61:e7:bc:26:72:2d:1a:15:4b:b4:2a:
60:a4:0f:66:3a:2d:2a:e4:de:f4:4d:ec:a5:af:e0:92:bd:0f:
c8:fe:6e:50:a7:cd:57:02:22:b4:6b:3b:82:ab:eb:41:95:29:
73:17:6f:99:01:dd:61:15:9a:7c:4d:fa:a9:f7:29:f8:f1:a3:
35:ac:d8:5a:67:e0:04:6d:64:38:bc:8a:93:11:d5:7a:0e:59:
03:63:92:72:59:10:fe:47:c3:36:27:24:d0:af:3c:7b:1c:90:
07:cf:fb:9e:af:0e:5b:0f:d8:ac:95:1f:63:ed:33:ba:a2:5c:
51:54:bc:ae:04:76:e5:0b:29:9d:dd:4c:14:db:0a:a8:70:09:
eb:8d:58:38:02:8a:78:7e:d2:aa:0e:c8:c1:cc:a5:ac:2f:fe:
20:ed:11:c7:d1:6a:31:80:2b:4e:f1:03:fc:2f:f9:4f:9b:35:
e0:55:4d:47:99:a6:f6:49:ac:a0:11:41:69:c9:7b:2a:e2:32:
ec:70:c8:87:6f:d7:48:8d:70:46:1d:31:5d:b9:89:8a:af:1a:
6b:0e:45:22:3b:f4:b8:18:7e:04:b5:03:bd:ba:a8:ed:d0:77:
f9:f8:61:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:34:30 2026 by rpki-client