
$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft
File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json)
Hash identifier: Tbopx26aCmxT64+Z7RydZ1XRtBgoGPZArKohqZ/zvck=
Subject key identifier: 48:D3:A1:C8:65:69:98:07:F7:AC:4D:EE:BE:BA:EF:3A:CD:16:D5:14
Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58
Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft
Manifest number: B8
Signing time: Wed 13 May 2026 07:11:53 +0000
Manifest this update: Wed 13 May 2026 07:11:52 +0000
Manifest next update: Wed 20 May 2026 07:11:52 +0000
Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: dL/z8E1w9Gu+Cx5GkwzKD3Zn3WDrz6xTuouTwvh8T2s=)
2: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=)
3: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl
rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958
Validity
Not Before: May 13 07:11:52 2026 GMT
Not After : May 20 07:11:52 2026 GMT
Subject: CN=6a042439-44f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:4f:53:bb:55:4d:68:11:5a:3c:2f:ac:53:
3a:11:76:93:61:6f:ca:ac:d3:a0:40:a2:c4:61:be:
fd:4d:31:d6:7e:89:e8:de:f3:9d:d7:e0:0d:7a:8d:
02:d7:57:de:84:e7:67:66:c1:e1:84:22:d9:d9:fd:
e9:2c:76:15:07:43:7b:a7:47:54:91:00:f7:b1:f6:
5a:02:df:b5:bc:77:dc:fc:03:41:d1:a7:88:90:50:
ac:3c:2d:27:b0:13:97:47:60:ab:b3:23:07:23:3a:
5e:f8:78:c0:1c:61:29:92:c9:87:a8:fe:dc:1a:cb:
f6:38:d6:d8:5f:e4:72:92:2b:fc:c4:19:9e:04:98:
3e:42:b9:28:b4:2f:6c:1e:f8:0a:fb:ed:92:f5:2e:
ac:ad:b9:8f:8a:61:91:98:85:90:76:e4:60:ae:f8:
33:24:e5:c5:79:89:8c:e2:6c:64:cf:fe:93:6e:cf:
ba:55:67:39:28:46:06:39:5a:63:6f:19:0a:63:30:
a2:c7:63:ac:38:57:18:98:dd:79:df:66:71:88:a7:
8c:68:8e:eb:3e:f1:03:7d:d2:1f:7c:8e:58:66:70:
c7:8a:88:6b:b4:95:a6:37:9f:8f:66:60:da:3b:1f:
57:cf:23:1e:8e:95:23:25:05:c3:09:ef:6b:62:a7:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D3:A1:C8:65:69:98:07:F7:AC:4D:EE:BE:BA:EF:3A:CD:16:D5:14
X509v3 Authority Key Identifier:
keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:60:f8:5b:f3:0c:fc:9e:f7:4c:58:cd:31:90:47:3b:03:70:
3d:b9:75:4e:41:a9:97:83:e7:e8:17:c4:6f:da:4a:e6:86:2e:
57:b2:91:81:86:38:74:20:09:f9:00:dc:21:fb:20:77:7f:4e:
80:33:04:7f:3a:6f:07:22:05:be:ce:a7:ba:1f:a1:b9:6c:ac:
06:0b:2a:2b:b0:0f:21:2f:ac:4c:fb:d9:20:0d:9d:39:7c:a8:
00:99:48:a6:1b:36:cb:9b:04:d2:e4:4e:52:9f:75:fe:1d:13:
0a:8d:41:e6:f7:4c:b0:68:d0:0c:dc:d3:98:c2:41:07:c4:9b:
72:d3:63:d1:2a:e6:48:ec:be:68:ff:12:41:39:63:32:78:18:
7a:3f:d5:b2:bc:98:23:69:57:9d:01:e2:94:3c:16:d3:ce:e4:
03:2c:17:c1:b0:4c:6e:46:c2:79:0d:ab:d6:53:68:d3:ed:4d:
78:0a:47:b8:0a:58:11:7b:24:ba:e6:99:33:48:5d:44:58:e6:
1d:15:56:d2:27:5e:aa:8b:7a:f0:85:0e:6c:ad:23:55:12:37:
27:33:ef:c8:f0:64:11:69:c7:65:a7:9d:24:74:03:e4:be:3f:
82:d0:f7:24:7a:2b:1d:4c:41:ae:f7:49:ac:a2:b5:f3:48:40:
8a:9a:f9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:37 2026 by rpki-client