
$ rpki-client -vvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
File: xHI5__XPeIUhf8bKkBt6MngIMfA.mft (raw, json)
Hash identifier: zDjwJHH7bxvRT156CRzLVrcr8LzC8gH0zj9BLcwjtAQ=
Subject key identifier: EA:28:4A:5A:5B:5C:88:24:93:A1:AC:45:63:5F:EB:B9:AA:67:FD:23
Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
Certificate issuer: /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
Manifest number: 34
Signing time: Wed 25 Mar 2026 07:49:24 +0000
Manifest this update: Wed 25 Mar 2026 07:49:24 +0000
Manifest next update: Wed 01 Apr 2026 07:49:24 +0000
Files and hashes: 1: xHI5__XPeIUhf8bKkBt6MngIMfA.crl (hash: doocez9js6vzOe6GU5yEQs60ruFHf6DkT2V4B4PydNo=)
2: A9AB917CDF2A11F092E976D2656F56BC.roa (hash: 2MH7BDCr/HiI9duO5pISv49IgB4HZsB0I/lhscn+60c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Validity
Not Before: Mar 25 07:49:24 2026 GMT
Not After : Apr 1 07:49:24 2026 GMT
Subject: CN=69c39384-d735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:e9:67:2f:e5:f9:cc:8e:65:e7:7b:b8:25:
97:78:43:a8:b8:46:58:d4:a5:a8:5a:ff:c9:f3:b4:
a0:bc:b8:72:00:ac:48:7e:06:19:d3:a3:89:26:26:
a5:ae:e9:5c:66:8c:fb:de:ca:de:79:67:f8:3f:57:
f9:7a:90:fb:0f:82:45:1b:ed:c3:7b:d4:d8:73:bc:
52:2e:76:92:50:5e:45:b4:00:dc:2d:a1:1b:0d:68:
4f:0b:60:d3:87:12:d1:3b:3d:48:e3:93:73:60:8e:
5e:2d:d1:34:e1:c6:32:07:55:ab:6b:4f:27:12:fc:
9d:2b:bf:c4:aa:ae:08:94:d0:88:27:91:3a:1f:da:
3e:da:8b:a9:d8:b2:a7:20:66:74:59:8e:8d:8b:aa:
63:c1:aa:ba:7b:57:9f:0a:56:46:f2:31:17:e1:bc:
0c:dc:bf:9d:9b:f5:18:8b:05:46:f1:19:01:86:e5:
ac:6e:71:6b:82:23:53:4b:ec:62:33:68:da:18:5b:
28:1f:89:4b:a2:6e:35:e6:8c:c3:9e:02:a5:22:fd:
1e:4b:28:56:ec:f0:7d:fe:70:f9:ae:5b:16:bb:cb:
51:26:2d:34:ca:82:f7:ed:17:61:bc:01:27:57:5a:
88:ef:e9:d8:7e:16:89:b0:ed:92:5f:0e:7d:9d:df:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:4A:5A:5B:5C:88:24:93:A1:AC:45:63:5F:EB:B9:AA:67:FD:23
X509v3 Authority Key Identifier:
keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:06:71:89:09:c2:98:c5:ac:dd:d8:81:5b:5a:15:03:b4:21:
24:5d:3b:b7:11:63:50:3d:18:32:5d:99:ad:9f:01:04:96:83:
44:3e:bd:57:0f:8a:d2:9e:87:ee:ba:e0:89:b8:af:86:4e:38:
2f:63:84:5a:b6:99:4d:8b:a4:53:32:39:8e:5d:14:e8:6d:d1:
58:f7:8f:9c:7b:3a:35:4e:74:76:34:43:b6:6f:19:32:dd:92:
7e:1f:b4:40:6d:83:4a:6c:4e:52:99:42:9c:ee:53:be:b9:71:
46:47:7d:85:7d:c3:19:f7:44:2a:09:ac:ee:49:7c:e0:bd:31:
69:ed:bc:71:13:44:3c:3f:c9:78:05:49:50:8c:cd:de:eb:a1:
ad:51:2f:0d:e4:f6:10:72:94:4a:e4:3a:c3:b8:97:0a:b5:d9:
5a:5d:97:b6:17:a1:e6:d4:68:80:e1:69:22:e1:13:b1:75:29:
b3:7b:3f:a5:a1:0f:ef:43:c6:aa:05:f3:77:cd:99:17:a5:44:
3c:2c:e3:a4:bf:13:8d:dc:05:5b:10:9f:4e:fc:00:20:b1:df:
87:c5:4e:3a:de:b0:9a:a6:b5:04:39:16:e1:a8:07:d4:17:f7:
c9:36:17:3a:4b:43:c4:15:5f:a5:2f:dc:12:59:0b:73:a2:9a:
00:02:1a:77
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NjFBOTExMC8GA1UEBRMoQzQ3MjM5RkZGNUNGNzg4NTIxN0ZDNkNBOTAxQjdBMzI3
ODA4MzFGMDAeFw0yNjAzMjUwNzQ5MjRaFw0yNjA0MDEwNzQ5MjRaMBgxFjAUBgNV
BAMTDTY5YzM5Mzg0LWQ3MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDG1ulnL+X5zI5l53u4JZd4Q6i4RljUpaha/8nztKC8uHIArEh+BhnTo4kmJqWu
6VxmjPveyt55Z/g/V/l6kPsPgkUb7cN71NhzvFIudpJQXkW0ANwtoRsNaE8LYNOH
EtE7PUjjk3Ngjl4t0TThxjIHVatrTycS/J0rv8SqrgiU0IgnkTof2j7ai6nYsqcg
ZnRZjo2LqmPBqrp7V58KVkbyMRfhvAzcv52b9RiLBUbxGQGG5axucWuCI1NL7GIz
aNoYWygfiUuibjXmjMOeAqUi/R5LKFbs8H3+cPmuWxa7y1EmLTTKgvftF2G8ASdX
Wojv6dh+Fomw7ZJfDn2d31T5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6ihKWltc
iCSToaxFY1/ruapn/SMwHwYDVR0jBBgwFoAUxHI5//XPeIUhf8bKkBt6MngIMfAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MUE5Lzc1MjhCM0IwREYy
NzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlVaGY4YktrQnQ2TW5nSU1m
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveEhJNV9fWFBlSVVoZjhiS2tCdDZNbmdJTWZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2
MUE5Lzc1MjhCM0IwREYyNzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlV
aGY4YktrQnQ2TW5nSU1mQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCCBnGJCcKYxazd2IFbWhUDtCEkXTu3EWNQPRgyXZmtnwEEloNEPr1XD4rSnofu
uuCJuK+GTjgvY4RatplNi6RTMjmOXRTobdFY94+cezo1TnR2NEO2bxky3ZJ+H7RA
bYNKbE5SmUKc7lO+uXFGR32FfcMZ90QqCazuSXzgvTFp7bxxE0Q8P8l4BUlQjM3e
66GtUS8N5PYQcpRK5DrDuJcKtdlaXZe2F6Hm1GiA4Wki4ROxdSmzez+loQ/vQ8aq
BfN3zZkXpUQ8LOOkvxON3AVbEJ9O/AAgsd+HxU463rCaprUEORbhqAfUF/fJNhc6
S0PEFV+lL9wSWQtzopoAAhp3
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:40 2026 by rpki-client