
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
File: XRhbcS2TBWvydLi3qJjGklTruYM.mft (raw, json)
Hash identifier: Gj+KEWAhCYZO6rOuX+6yMwlOOdrDtTGK8IEHuv/4oxY=
Subject key identifier: 6C:42:A0:AA:2D:6A:77:9F:25:74:81:61:87:AB:52:7D:58:2D:94:1A
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Certificate issuer: /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
Manifest number: 01D6
Signing time: Mon 11 May 2026 03:52:57 +0000
Manifest this update: Mon 11 May 2026 03:52:56 +0000
Manifest next update: Mon 18 May 2026 03:52:56 +0000
Files and hashes: 1: XRhbcS2TBWvydLi3qJjGklTruYM.crl (hash: /u0/osH/dc7dRiOBOjhxp7/ecoLOIthwUJv78TJYyQ0=)
2: 749BAA209BC911F0B2979527C4F9AE02.roa (hash: yisXBV9UfHcLi2zgyB/ljlR1ltN6rD2jMrD7xMFxYDU=)
3: DCCEA912A3EB11EE8049E335C4F9AE02.roa (hash: I8WOH8J1MhGqNbLqVfvMzdR8rX2Yq8UcwqrXooh3Mjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE972, serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Validity
Not Before: May 11 03:52:56 2026 GMT
Not After : May 18 03:52:56 2026 GMT
Subject: CN=6a015298-52c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:c4:e5:cd:0c:58:cd:f9:6e:06:f7:44:c9:
52:1e:be:cd:3e:a1:ad:01:16:4d:c3:55:34:99:90:
97:df:aa:54:bd:4d:cf:0e:c7:12:2e:a9:7c:9f:6f:
5f:bd:63:03:1a:7a:8b:60:9d:87:28:69:bd:88:20:
14:d1:84:1d:57:d7:28:8c:f1:42:00:38:ae:1b:93:
0d:eb:31:eb:a1:85:1e:d2:da:8b:6c:3d:9f:a2:99:
a5:eb:a8:67:78:39:33:27:f1:f1:93:66:2c:21:7f:
2f:e4:a0:d6:f0:7b:03:f2:c1:61:97:f0:de:11:0f:
64:4a:ff:21:31:d9:9e:3c:e1:7c:c3:7a:7f:5e:73:
cc:d3:b4:d6:4a:ea:24:a6:41:12:13:c2:ba:bb:7e:
23:5c:f9:85:a4:94:8a:05:95:e6:c2:74:57:f2:ce:
7a:ba:d7:71:4b:50:55:26:3c:1e:1f:4b:fc:06:09:
e2:9f:a3:fb:42:07:ac:2b:4c:a6:de:38:cd:74:6c:
ae:e5:18:ae:23:47:be:ce:68:25:26:0f:1c:8f:2f:
70:d1:86:ef:9e:9b:bf:a3:74:b3:85:cb:40:18:b0:
a9:de:f1:79:be:05:12:56:0c:c4:45:e5:48:cb:6b:
9d:b9:2c:14:82:b3:d1:9a:c0:51:8b:0d:77:7e:fc:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:42:A0:AA:2D:6A:77:9F:25:74:81:61:87:AB:52:7D:58:2D:94:1A
X509v3 Authority Key Identifier:
keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4e:56:54:6a:ef:cc:5a:72:b8:57:ab:b1:64:61:39:b7:74:
0f:0e:8d:57:aa:c2:4a:52:d4:40:cb:e7:97:24:a1:73:bc:64:
b2:a4:f0:21:95:c0:db:6d:92:f1:a5:ba:09:8d:fd:55:89:54:
d2:42:6a:31:f0:5c:cb:e5:20:bf:b5:d4:d4:aa:d6:f9:23:d1:
36:56:1b:5b:bf:b9:59:52:64:36:3c:9e:5b:9a:e3:e4:30:33:
34:70:9a:10:3e:57:cb:ff:26:01:b5:2a:77:74:1e:0c:5d:93:
ec:fd:e7:2e:ca:a1:8a:b1:98:83:32:a4:1c:f1:41:d0:ec:39:
d4:fe:e5:82:1e:5c:30:2e:40:8e:3d:c7:03:d0:c2:7a:74:4e:
23:45:18:55:fe:47:ac:e6:4c:21:f4:d4:e3:f4:4f:13:76:a3:
80:4c:62:e7:13:e4:95:03:9d:6b:1f:b4:b7:ee:d8:f1:f8:ed:
5a:01:aa:d4:27:6a:0b:78:06:0a:a5:1e:d5:c6:9a:ca:3f:8e:
ae:45:5f:93:0b:ad:e3:3f:e4:0d:da:ed:64:93:26:75:b9:50:
97:e6:64:13:55:4f:92:43:86:b3:0c:33:00:1f:34:76:3c:0d:
6c:8e:3a:f4:f7:11:6b:86:17:ee:0c:0d:e3:8f:11:16:98:d0:
f5:f6:a3:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU5NzIxMTAvBgNVBAUTKDVEMTg1QjcxMkQ5MzA1NkJGMjc0QjhCN0E4OThDNjky
NTRFQkI5ODMwHhcNMjYwNTExMDM1MjU2WhcNMjYwNTE4MDM1MjU2WjAYMRYwFAYD
VQQDEw02YTAxNTI5OC01MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmdPE5c0MWM35bgb3RMlSHr7NPqGtARZNw1U0mZCX36pUvU3PDscSLql8n29f
vWMDGnqLYJ2HKGm9iCAU0YQdV9cojPFCADiuG5MN6zHroYUe0tqLbD2fopml66hn
eDkzJ/Hxk2YsIX8v5KDW8HsD8sFhl/DeEQ9kSv8hMdmePOF8w3p/XnPM07TWSuok
pkESE8K6u34jXPmFpJSKBZXmwnRX8s56utdxS1BVJjweH0v8Bgnin6P7QgesK0ym
3jjNdGyu5RiuI0e+zmglJg8cjy9w0Ybvnpu/o3SzhctAGLCp3vF5vgUSVgzEReVI
y2uduSwUgrPRmsBRiw13fvydEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxCoKot
anefJXSBYYerUn1YLZQaMB8GA1UdIwQYMBaAFF0YW3EtkwVr8nS4t6iYxpJU67mD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk3Mi8yNDVCM0REQ0Ez
RTYxMUVFQURGOTQ4NTVDNEY5QUUwMi9YUmhiY1MyVEJXdnlkTGkzcUpqR2tsVHJ1
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hSaGJjUzJUQld2eWRMaTNxSmpHa2xUcnVZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTk3Mi8yNDVCM0REQ0EzRTYxMUVFQURGOTQ4NTVDNEY5QUUwMi9YUmhiY1MyVEJX
dnlkTGkzcUpqR2tsVHJ1WU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm05WVGrvzFpyuFersWRhObd0Dw6NV6rCSlLUQMvnlyShc7xksqTwIZXA222S
8aW6CY39VYlU0kJqMfBcy+Ugv7XU1KrW+SPRNlYbW7+5WVJkNjyeW5rj5DAzNHCa
ED5Xy/8mAbUqd3QeDF2T7P3nLsqhirGYgzKkHPFB0Ow51P7lgh5cMC5Ajj3HA9DC
enROI0UYVf5HrOZMIfTU4/RPE3ajgExi5xPklQOdax+0t+7Y8fjtWgGq1CdqC3gG
CqUe1caayj+OrkVfkwut4z/kDdrtZJMmdblQl+ZkE1VPkkOGswwzAB80djwNbI46
9PcRa4YX7gwN448RFpjQ9fajjg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:20:29 2026 by rpki-client