
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
File: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft (raw, json)
Hash identifier: vlR18ksx8iVck89ihFmCOWOmyzGcQI3PQOuH1qcO+2s=
Subject key identifier: 15:D6:53:F8:3D:41:9B:FD:5B:00:DF:A8:13:9F:FD:80:3E:C7:93:DC
Authority key identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54
Certificate issuer: /CN=A91B4F01/serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154
Certificate serial: 0509
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
Manifest number: 0502
Signing time: Tue 24 Mar 2026 23:20:48 +0000
Manifest this update: Tue 24 Mar 2026 23:20:47 +0000
Manifest next update: Tue 31 Mar 2026 23:20:47 +0000
Files and hashes: 1: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl (hash: vVHx3oUFY+EMCsZvrYQ2JILBkXORKdH0R98Vlh3KhaQ=)
2: BD115AB24B7C11ECA63C0038C4F9AE02.roa (hash: +GvQ/NXwtK6n9zSmGQYOiyRLx0NfuJisquadWhY4pho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl
rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1289 (0x509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4F01, serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154
Validity
Not Before: Mar 24 23:20:47 2026 GMT
Not After : Mar 31 23:20:47 2026 GMT
Subject: CN=69c31c50-08fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:16:13:1f:7f:cc:1d:97:1b:16:02:a8:fd:
4a:38:67:43:37:ae:9f:ac:23:fb:c1:de:0f:63:37:
9e:c2:98:d9:f0:2f:0c:91:d8:d2:03:dc:96:4c:1d:
b0:ce:68:06:36:c9:31:ee:99:06:c1:8c:34:8e:96:
4b:57:4d:ec:13:ec:2c:7b:e6:a6:02:e5:43:2e:48:
cb:85:d1:ea:31:46:f9:68:60:3e:2c:d3:c2:6f:a1:
38:ef:c7:8f:07:91:65:2c:1a:d4:bd:8e:2b:70:02:
a9:f2:9c:c5:88:cb:a5:db:f5:39:15:e5:db:70:10:
8c:b1:34:f3:0c:13:6e:cb:b2:6a:68:48:99:41:ef:
8f:5a:36:bc:f2:4b:82:9a:44:d2:fa:1b:e8:6a:6b:
00:f3:03:c9:c3:b5:76:fd:cc:90:6e:70:44:22:0f:
0b:a6:91:c9:99:d1:c0:40:ad:50:ea:f2:fb:93:c9:
ba:49:8f:08:f7:ab:a5:b9:2f:6c:f6:e7:bd:fe:5b:
19:94:a9:9f:7c:44:28:f3:79:bf:4d:87:c0:c6:10:
5f:d5:6e:88:c5:ff:30:45:86:6f:c8:43:7d:4e:90:
53:15:45:f9:62:ec:ae:5e:26:fb:6c:36:ac:9b:1b:
73:b1:db:b5:9f:19:a8:77:73:de:f2:06:3a:96:08:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D6:53:F8:3D:41:9B:FD:5B:00:DF:A8:13:9F:FD:80:3E:C7:93:DC
X509v3 Authority Key Identifier:
keyid:5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cb:1d:43:9a:4d:06:52:c6:4b:f2:0f:22:c1:ab:7f:0e:09:
ba:4c:5d:40:15:ec:24:a9:4b:53:66:fb:3a:9b:43:c2:97:72:
32:75:95:61:71:90:73:d0:6d:90:b4:b7:0d:6c:e4:80:5d:1a:
ea:c0:bb:9f:65:63:c6:95:61:39:e9:d5:c8:f4:da:4c:85:59:
8b:7c:f1:df:a2:c3:f1:1f:af:af:31:aa:a8:10:81:bf:d3:bf:
4e:1b:33:61:89:1c:c6:ab:96:dc:03:9d:a0:3f:ed:e1:ce:12:
5f:d9:06:29:42:f7:a8:1c:21:7b:07:1f:54:29:d8:12:28:36:
5b:a9:31:1e:ea:1b:00:c4:65:ee:7d:02:00:3a:9e:83:a5:df:
d1:97:29:91:b6:fe:78:54:0a:65:02:62:aa:6f:9d:ab:2f:ab:
6e:16:60:1c:2a:04:5f:e5:f8:4b:a5:27:36:8a:0b:36:bd:02:
c7:7c:07:fc:80:d1:48:27:b0:60:44:c2:4c:fe:c7:61:1d:05:
e6:3b:50:c7:d4:75:79:09:ec:77:f7:f0:74:84:02:76:5b:14:
ed:70:75:42:c3:a0:26:38:16:67:a4:65:69:7f:f8:05:c6:10:
9c:ef:a0:b1:5d:d6:10:bd:b5:38:84:26:4f:dd:99:17:c9:22:
65:9c:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:01 2026 by rpki-client