
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
File: xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json)
Hash identifier: kgNgzTLcnKvc6siGzc6T+wV6sC/NhMYfbO8kLJm5wsc=
Subject key identifier: B7:E8:7D:ED:EC:16:42:FE:7F:2E:D1:E8:71:F9:0D:73:21:45:56:F6
Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91
Certificate issuer: /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
Manifest number: 5C
Signing time: Mon 11 May 2026 08:16:03 +0000
Manifest this update: Mon 11 May 2026 08:16:03 +0000
Manifest next update: Mon 18 May 2026 08:16:03 +0000
Files and hashes: 1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: nCG6sO527OXtlWTL7HkWsTo+ehxnYM9AyrWto0/W8qg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl
rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891
Validity
Not Before: May 11 08:16:03 2026 GMT
Not After : May 18 08:16:03 2026 GMT
Subject: CN=6a019043-1466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:cf:19:32:17:25:a4:22:49:f1:1d:d7:8b:
57:dd:5e:24:bf:ba:ae:5a:2d:6c:82:09:2f:bd:47:
39:5b:54:24:f9:ce:77:75:8c:2e:8f:24:b8:75:04:
98:d6:79:dc:43:06:17:6d:10:88:f9:88:57:bc:be:
08:8f:fa:01:72:62:61:72:15:9a:38:2b:15:81:7d:
47:17:da:3e:ec:b5:2f:24:f9:60:64:34:ed:7b:87:
5c:dd:6d:e1:69:df:af:3b:52:3e:29:a6:5e:f6:6a:
07:d3:3e:c9:36:9f:5b:e4:9a:1b:07:02:c6:ed:15:
f6:62:06:a5:3e:f3:8e:f2:8f:05:80:4c:13:7c:27:
47:f0:57:a8:8d:ed:2d:7a:b4:b9:a2:7a:bf:a1:19:
fa:bb:89:8d:45:d9:c4:22:f6:d8:50:25:0f:ae:d3:
92:dc:59:15:c7:cc:b0:2d:c3:9d:f5:21:3c:d7:fe:
5c:e0:4b:4f:01:3f:0f:0b:5c:a8:19:61:92:b3:70:
a0:b9:c2:3c:0c:a2:06:42:5e:30:24:e5:65:4a:ae:
6e:33:3b:9b:75:8e:c0:43:b1:b0:49:1a:45:f5:e9:
a3:25:17:17:76:84:40:89:57:7f:cb:8a:5d:a0:3e:
60:35:fa:d3:f6:d3:94:f5:4b:0d:c2:71:bc:4d:a1:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:7D:ED:EC:16:42:FE:7F:2E:D1:E8:71:F9:0D:73:21:45:56:F6
X509v3 Authority Key Identifier:
keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:80:ae:2d:dd:6b:0b:97:e0:93:af:61:d3:f7:cd:56:24:
32:f0:1f:d4:3d:4f:b2:d5:2e:73:b8:a8:96:86:72:89:7f:06:
c8:61:e0:47:99:9f:14:96:cb:13:00:2f:c8:7e:89:39:b9:6e:
6d:fe:09:bf:83:27:c7:06:13:c0:8e:58:0d:d8:b9:18:77:75:
17:4c:af:83:7a:d4:c6:1d:af:31:13:34:ff:25:8b:3e:d4:26:
bc:aa:14:3c:e9:a0:b9:ac:4d:e7:24:c7:7e:0f:64:4d:94:55:
da:39:aa:17:8b:59:93:d8:04:d5:da:a6:f5:05:51:0b:ed:22:
52:c8:33:fa:ae:87:92:7b:2f:dc:34:49:93:0b:14:af:cc:45:
7d:04:b7:9f:48:b9:bd:30:44:e9:37:23:a4:18:ff:ed:e8:00:
14:6e:f2:9c:dc:c2:d2:64:e8:f7:83:23:7f:5b:f5:91:f1:ef:
59:41:ed:6e:07:73:e8:18:50:8f:44:c7:0e:6b:de:99:8c:48:
69:61:5c:d2:3d:3f:c8:9c:71:28:a7:f2:ec:22:b6:b6:d8:01:
cf:60:69:bc:88:4d:c6:b9:9f:f7:47:8d:05:e0:c5:cb:a4:f6:
4c:00:7d:41:d4:1b:ee:d2:1d:2c:d7:76:c6:f5:b5:39:45:a3:
10:ba:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:32 2026 by rpki-client