
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
File: xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft (raw, json)
Hash identifier: hoAJXlX2Hyb01sX3Cq/0p0RULuyavFmwzzN1g4YDm2g=
Subject key identifier: C7:D6:F8:38:83:F2:83:A6:2A:B1:E2:92:43:72:C8:BB:4E:FC:C7:30
Authority key identifier: C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64
Certificate issuer: /CN=A91582DF/serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
Manifest number: 05
Signing time: Mon 11 May 2026 09:26:08 +0000
Manifest this update: Mon 11 May 2026 09:26:08 +0000
Manifest next update: Mon 18 May 2026 09:26:08 +0000
Files and hashes: 1: xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl (hash: 3Fmr8vVutcdvTb1LEmHXfgJ+vp5ZKmoZdictYMdIExU=)
2: A0AA3CC84A1D11F1B98DEBB6C9833773.roa (hash: vg1YeXy7A3skRrMrzsOzoL6vwmPs9b3WJpIatWza3uI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl
rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91582DF, serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64
Validity
Not Before: May 11 09:26:08 2026 GMT
Not After : May 18 09:26:08 2026 GMT
Subject: CN=6a01a0b0-76d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d4:2c:3c:ca:f5:9c:41:52:0f:00:59:d5:99:
21:d7:28:da:26:e7:df:55:1c:e9:08:c9:50:2a:8b:
bb:46:b4:58:44:30:44:4f:69:1c:02:63:a6:80:b7:
2e:d0:a8:5d:cb:be:03:dd:fb:4c:5c:26:33:02:8c:
92:43:ae:57:da:b8:92:12:18:fb:56:4a:fa:39:0b:
30:9a:23:3f:26:e1:64:28:e9:de:f7:03:88:d4:21:
60:4d:0e:29:54:ab:0d:74:05:3f:96:91:ff:1a:09:
63:26:ca:3a:aa:d5:66:32:34:1d:dd:58:de:20:f6:
9f:8d:61:3f:37:2a:21:17:35:4e:53:ea:73:33:bf:
9a:2b:ed:7d:56:f2:2d:3e:c8:f6:8e:51:7a:44:93:
cb:3c:23:d7:b4:c0:4d:62:0b:35:3c:d3:5f:69:c2:
20:c1:ed:51:e9:5c:2f:22:fc:ff:8a:1c:ed:ba:c5:
2b:3c:70:1a:17:d2:49:85:6b:b0:b9:52:23:ce:c1:
63:b6:ee:3d:cb:1f:09:49:cc:76:09:a3:fc:93:04:
6e:04:fb:d8:04:cc:a4:b2:4f:d1:e5:79:76:7b:6c:
bb:7c:aa:9f:8f:e0:92:7e:ce:e9:20:34:cd:be:1a:
48:f8:a0:f8:c6:5d:0f:a1:ab:95:b6:50:e6:98:5d:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D6:F8:38:83:F2:83:A6:2A:B1:E2:92:43:72:C8:BB:4E:FC:C7:30
X509v3 Authority Key Identifier:
keyid:C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:9f:40:33:50:3f:8a:aa:19:dd:94:ff:f6:78:a6:4e:b5:bc:
6e:8e:8c:5a:a1:4c:a8:9e:a3:32:f6:2b:5b:f5:ca:3c:ee:88:
8d:b9:e1:d4:a9:4d:e0:97:89:0e:24:26:1e:9b:69:32:ec:ff:
46:6d:a6:cf:79:01:15:6f:15:4f:39:51:db:1e:c3:2a:69:76:
1b:a2:ed:cb:67:67:61:e2:6f:37:34:81:3d:a2:05:36:86:d3:
30:5f:ff:ae:38:5c:35:92:e8:90:2d:88:2c:5e:c7:a0:61:4a:
c9:da:a3:e9:fb:1d:b4:62:41:cc:13:12:17:3d:04:22:1c:30:
6d:af:83:4f:39:dd:1a:85:56:26:a1:3e:fa:9d:4a:e3:af:77:
f8:a1:31:00:a1:54:b9:e1:88:47:3e:53:1e:f8:ff:0d:b6:6e:
3b:06:bd:33:98:da:5e:d3:4f:80:d4:29:c0:94:a6:2b:cf:a5:
97:f6:5d:11:c3:a7:34:ef:c4:e2:4e:2f:b3:0e:a2:99:4a:d9:
c2:80:00:8c:73:d9:b9:73:3a:55:9d:be:59:8c:1e:b9:fc:28:
09:36:7f:ef:35:05:8f:a1:69:5c:b2:34:4d:2b:33:dc:77:2e:
3a:b8:3f:e3:ea:c8:85:26:76:44:e7:fb:7a:70:58:af:fb:c6:
c0:c2:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:35 2026 by rpki-client