
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json)
Hash identifier: Z9kRqWT5wEnJMCrz6fhHXes7OMwlaJugpzzQ8rfJ2hY=
Subject key identifier: C2:85:C2:65:1F:FB:9A:CD:CD:B5:D0:22:3C:77:8F:44:90:0E:39:4E
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
Manifest number: 01B9
Signing time: Mon 11 May 2026 04:07:42 +0000
Manifest this update: Mon 11 May 2026 04:07:42 +0000
Manifest next update: Mon 18 May 2026 04:07:42 +0000
Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: HHyRhirymAwfDN8g8Fz/dYVydj1bA22LMIac77CSC+A=)
2: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: X6aIaG1zQqgDiSqMFiuqRqeQ5WZkrDJTEHFLzyOj2LU=)
3: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: eKVOlBNn+5WuwNFphnK/oDxQ3aByduRE2UhfBxYvHBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: May 11 04:07:42 2026 GMT
Not After : May 18 04:07:42 2026 GMT
Subject: CN=6a01560e-089f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:e0:8a:da:bd:7e:24:48:c0:cd:56:68:cc:
c2:21:56:2a:7b:73:36:73:59:59:99:a1:45:ad:63:
53:c3:f9:6e:de:54:e2:da:a7:ba:1c:32:15:0b:5b:
6b:aa:68:ba:69:ac:67:5b:5a:de:ea:a0:f2:e4:ed:
c3:3b:23:e9:d9:3f:9d:e7:74:d9:86:eb:28:2c:17:
39:e0:ec:81:c7:0e:87:65:0f:18:eb:60:2c:41:9f:
36:06:71:ab:49:67:ab:6a:3c:1e:88:47:89:58:79:
b1:e8:49:db:a5:fc:e1:76:52:76:7b:2c:56:85:ef:
3a:5d:bd:66:ba:e0:51:b9:a5:9f:d8:d4:67:e9:73:
d1:a5:e7:3a:44:cc:a8:f3:a6:e9:36:a8:7e:31:63:
2e:a5:ef:aa:06:a6:f8:ff:31:b4:d6:2b:eb:31:90:
98:2f:05:e1:e2:cf:4f:24:bf:30:df:97:1e:9f:5b:
64:6f:75:4d:a6:bd:2a:04:94:b5:f2:0d:7d:fe:8e:
6f:d3:78:d3:a0:cb:a6:d1:cb:af:43:80:6d:17:3f:
4e:0f:38:cd:65:14:5b:b7:c8:5e:16:22:74:fb:af:
7a:d1:13:3f:10:5a:42:7c:31:fa:37:23:07:a5:0c:
f3:b3:3f:41:d7:a5:d9:02:be:22:57:5a:a3:46:db:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:85:C2:65:1F:FB:9A:CD:CD:B5:D0:22:3C:77:8F:44:90:0E:39:4E
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:97:16:95:ef:34:aa:99:21:b2:14:d4:64:96:9a:1e:a2:89:
9a:46:02:0c:ee:8b:ab:b3:1f:ea:1c:d0:29:c2:ca:e9:aa:1c:
3d:9c:11:e6:3f:4d:e1:e1:50:64:f8:3e:09:b6:aa:0f:43:94:
ba:bd:83:2b:5a:cd:78:40:a9:fe:03:29:3e:91:31:4e:63:ba:
0c:f7:ae:f7:ad:49:e6:a5:44:61:9c:b3:49:8c:6f:a6:47:e8:
7b:a2:81:04:ea:49:f5:ac:d3:5f:0d:d2:e1:53:02:79:1a:54:
d9:3d:20:09:6f:3a:ca:2e:63:16:13:45:66:20:c6:1e:3a:dc:
fe:74:db:98:02:d5:de:55:6f:60:57:5e:15:de:0e:c3:d5:12:
fe:98:ba:0a:2d:dd:8c:ad:e1:eb:f8:34:a8:3b:b0:d2:55:c2:
ef:7c:2d:2c:e1:21:a5:03:53:d8:25:61:dd:3a:db:8a:e9:42:
c1:50:93:3d:c9:eb:40:b8:19:89:db:2f:0c:25:b3:f3:62:00:
18:c3:79:fd:ba:10:74:21:d3:52:97:4b:a4:9d:77:dc:27:99:
a6:2a:57:fc:6e:7d:2c:aa:e9:33:7d:b9:dc:a1:70:2e:54:1a:
7c:1a:26:36:e2:2b:64:dc:dc:da:88:ae:c2:7e:5e:f6:33:4f:
0e:0e:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:10:28 2026 by rpki-client