
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
File: XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json)
Hash identifier: adxqmsGl1OmZLABiNFPJjfPHiiNOe45WcI5iWkvjvHw=
Subject key identifier: F7:06:2A:11:F3:34:D2:8A:D7:D7:FD:1F:0D:78:5A:69:96:9C:04:4E
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Certificate issuer: /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial: 032B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
Manifest number: 0323
Signing time: Mon 11 May 2026 01:14:08 +0000
Manifest this update: Mon 11 May 2026 01:14:08 +0000
Manifest next update: Mon 18 May 2026 01:14:08 +0000
Files and hashes: 1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: vIf8B6pfXLNr9LcXuvpdF/uXl/gf/9LG4sJ8HBkzyo0=)
2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: kypD0HNpdZMUft2CKjrM9l4+dpJKPDYyDTu1PYOEbrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Validity
Not Before: May 11 01:14:08 2026 GMT
Not After : May 18 01:14:08 2026 GMT
Subject: CN=6a012d60-8f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:c6:d2:6a:df:2c:9c:5e:f5:55:90:1c:13:
54:ef:0d:f0:26:dc:bc:71:0d:3e:bb:bc:1d:61:ac:
32:44:32:91:a1:3e:e8:91:62:8f:db:d7:e7:b3:04:
c7:ad:42:34:15:b1:82:df:ec:54:39:75:69:11:1c:
a8:b0:05:aa:c2:5e:d0:f9:32:10:3b:57:f9:a5:5d:
5c:b9:2d:65:75:cc:50:f6:ad:dd:84:b5:73:ef:fd:
36:f3:1f:04:71:77:79:f3:72:ea:5b:c4:2c:2c:7b:
57:25:e4:b3:41:48:cb:98:ee:03:e8:32:7a:db:12:
90:e2:9b:8b:f3:86:d8:aa:5a:c7:68:fc:b6:eb:d7:
0b:71:64:fd:04:9d:2d:3f:bf:01:43:60:67:65:2b:
c1:14:da:99:77:c6:db:5a:30:b3:a1:9c:87:0d:46:
b6:77:0e:58:49:ec:1a:60:e1:19:77:d0:75:ba:4a:
85:2a:07:28:2b:43:c5:68:6a:6e:11:19:65:1c:85:
af:b3:96:92:42:e4:33:db:b9:70:e5:ca:1f:1a:9a:
b4:9f:7c:e4:35:59:6d:76:43:4b:46:bd:94:bb:ef:
39:c2:76:61:b5:6b:7d:f0:ee:61:94:34:bb:fb:29:
3b:35:12:12:f4:f0:23:be:41:5a:36:04:cc:47:8b:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:06:2A:11:F3:34:D2:8A:D7:D7:FD:1F:0D:78:5A:69:96:9C:04:4E
X509v3 Authority Key Identifier:
keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9d:ae:72:ee:88:65:5e:ee:c4:7b:57:49:c2:11:6d:1f:80:
39:34:55:d9:e0:e9:2a:74:41:46:b9:9c:f7:42:ea:90:2f:88:
9b:ac:64:e1:b3:4d:11:c3:41:1e:32:e1:08:88:81:3b:03:b9:
80:c0:65:69:1d:88:0e:71:3a:41:14:af:bf:ad:a8:2a:97:51:
68:ce:16:61:30:b8:7e:50:d9:d1:54:de:98:1d:49:c4:4b:3a:
03:87:19:2a:66:13:bc:03:6c:25:6e:3f:d6:72:51:bf:3e:66:
b4:23:69:69:32:71:be:40:1e:6a:d3:76:01:06:90:8c:45:24:
07:cd:64:04:8f:dc:b0:5b:15:ba:47:81:ef:1f:6e:6e:7e:e3:
0f:0c:bf:13:f3:04:2b:86:8b:6e:46:a8:60:69:0f:0f:d7:85:
44:37:86:7a:9f:93:5d:18:83:77:e2:6b:6f:f5:d4:db:98:9d:
58:e0:6e:74:69:00:09:17:56:1c:cf:f2:22:65:89:0c:88:00:
fd:c6:d5:f5:ed:97:90:67:b9:ed:0b:5e:2e:69:52:b3:24:ab:
5c:2c:7f:b2:1d:e4:6c:d6:ce:f4:a1:3d:46:b6:72:69:2f:4f:
74:30:32:77:7a:a0:53:61:c2:65:ba:8b:40:90:53:76:5d:59:
9a:b4:c8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:04 2026 by rpki-client