
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json)
Hash identifier: 0X8sjWlUMh1WiHURUluic6C1ixF+TyAXxWGOaGW/Vhc=
Subject key identifier: 5E:36:FB:41:9C:2E:BE:A7:8B:9C:DC:CE:43:51:CD:BD:1B:5D:7D:26
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
Manifest number: 011C
Signing time: Mon 11 May 2026 05:54:57 +0000
Manifest this update: Mon 11 May 2026 05:54:56 +0000
Manifest next update: Mon 18 May 2026 05:54:56 +0000
Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: Q5nYD+0okuRkzwLcH4UakCfUwWUC+cn64kb35YjrFoU=)
2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: LUj3nw3I/55jfghfKNbIADhEH+zObxvm94ONzxqJb9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Validity
Not Before: May 11 05:54:56 2026 GMT
Not After : May 18 05:54:56 2026 GMT
Subject: CN=6a016f31-996b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:a6:a6:02:f5:04:b7:34:4c:27:76:0b:4b:
92:ca:4f:c9:3c:51:1f:e9:b0:ab:0a:3f:2d:97:f7:
7e:11:c3:c7:aa:c2:23:4f:b0:f8:1a:1a:90:aa:2a:
da:50:12:80:cd:09:42:aa:77:8f:dd:63:62:96:45:
4f:f6:ca:54:77:b3:0b:ec:71:4f:ef:0a:49:75:8b:
73:f7:23:83:41:3f:d7:90:72:a6:a0:15:c0:2a:a6:
24:fa:b2:6a:18:6f:dd:d0:2e:69:a2:02:42:e7:cd:
9a:55:f4:89:eb:81:79:2e:eb:2b:ca:56:7d:1b:cd:
64:5c:bc:01:a2:e3:76:44:4a:16:af:d2:c8:fb:b2:
ef:59:c7:2a:d5:77:53:d4:6d:5b:ee:18:d8:11:19:
11:a2:bf:0e:60:f9:9c:e7:59:0b:a3:79:8d:94:74:
4e:68:1a:93:88:5d:8f:bd:ce:76:05:58:26:9a:1a:
56:b6:9d:8a:c0:11:16:8a:8a:c5:60:63:16:59:79:
51:a4:31:e8:22:47:da:9d:35:a0:44:89:fa:b6:6d:
1e:2d:dc:d2:bc:7b:89:20:04:c9:a2:ae:6b:f4:42:
81:6e:88:34:54:89:7e:78:9b:96:a6:8c:1d:21:c8:
ba:60:36:ce:af:a2:2b:a5:26:f2:2b:f7:c4:b8:c4:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:36:FB:41:9C:2E:BE:A7:8B:9C:DC:CE:43:51:CD:BD:1B:5D:7D:26
X509v3 Authority Key Identifier:
keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:b5:29:8b:bf:e9:6b:72:d7:8e:21:05:c9:a9:47:02:25:32:
0c:c4:77:25:23:19:f6:e3:55:91:43:f5:ab:b6:5d:1a:50:b9:
b0:40:d7:c3:ab:88:7f:14:24:81:b8:52:10:e9:0c:06:35:53:
f1:3f:94:2e:10:01:62:58:11:d2:e0:19:cd:ce:81:d8:ef:90:
42:ba:03:7b:41:45:ec:04:dc:b3:48:76:8e:23:c9:3a:3b:bb:
ef:c4:81:2b:3e:b3:e2:dc:78:f8:ef:2b:17:8f:63:4b:0c:aa:
96:3c:af:a0:c6:76:cd:32:7c:92:e0:82:56:57:53:33:81:a1:
8e:7b:af:85:ba:e5:ca:96:8a:bf:64:50:37:1b:8a:94:4f:21:
7e:7d:6b:44:f6:3f:f9:e4:46:ec:ea:43:40:d6:fa:03:06:02:
34:81:15:18:3c:0e:ed:31:60:aa:fb:13:e4:60:bc:40:ff:4f:
f9:50:bf:df:e4:fb:92:fe:18:0e:d1:a2:45:09:0d:12:db:c3:
f6:ab:24:5a:42:fe:cd:af:0c:f9:5b:c6:c9:8b:f3:60:7c:c3:
77:a6:76:c0:cf:3b:ba:3f:27:fd:59:59:2a:a3:4d:5e:02:44:
f0:5b:b0:de:e9:c5:8b:a0:48:2d:d4:3b:24:6d:0a:ca:a5:fe:
2b:41:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:53 2026 by rpki-client