
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json)
Hash identifier: kGjVFkxa9fY/iBxLRTbtI6dIPLsdDWVFbm3H0IHogBM=
Subject key identifier: 05:11:70:1A:B6:D2:C5:61:6F:8C:EA:34:36:8C:8B:79:B8:61:B8:18
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
Manifest number: 0199
Signing time: Mon 11 May 2026 04:21:50 +0000
Manifest this update: Mon 11 May 2026 04:21:49 +0000
Manifest next update: Mon 18 May 2026 04:21:49 +0000
Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: zdKSZ1Q7N4atJ7zJHtiXZWjPqkXLtlGc8f0/02VB4Uo=)
2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: dTKobTpgmqVlw9+3THmdhV/OqwJR2m6apo+OjMA3HTs=)
3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: 3E36B1MpZYDiaAYeovA9u0vflfKd+OIxRnYYoJKDjag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Validity
Not Before: May 11 04:21:49 2026 GMT
Not After : May 18 04:21:49 2026 GMT
Subject: CN=6a01595e-049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:f7:d7:dd:82:9d:0d:ca:4b:7e:a4:88:85:
04:56:d1:c2:eb:f3:94:76:83:67:df:d5:76:32:f6:
03:fc:2b:8f:67:20:5e:4d:16:51:2c:a2:5e:b4:37:
70:fb:78:40:d7:67:16:e3:ea:30:b4:af:eb:bc:59:
12:27:4e:a2:9b:b2:a3:ae:6c:46:ef:9d:41:cc:dc:
c0:9f:2a:64:29:1f:2e:a4:c6:65:1d:61:a9:3b:41:
83:60:ac:d7:72:b1:e3:c9:6b:74:f6:15:eb:63:90:
07:6e:ef:1b:d2:12:04:58:9c:6b:02:9b:eb:38:5b:
97:d6:71:df:8e:7f:46:82:c7:30:8b:cd:f4:06:f5:
73:c4:29:7e:32:3c:a5:b7:a8:e8:2c:d1:cd:07:88:
dd:17:42:a2:b9:57:eb:01:87:18:8b:17:f1:33:82:
97:0c:64:22:81:72:fa:e2:8d:2c:0e:d4:29:11:ef:
b5:5a:3e:37:09:cc:a6:dc:4e:7b:52:66:a1:26:d7:
a2:95:0c:26:0b:4e:e1:fd:26:32:f0:59:22:6b:bc:
35:74:0f:2d:20:76:d2:84:b8:49:ec:39:c0:81:c1:
42:e2:e0:17:81:5a:53:35:80:04:f2:cf:91:fd:8f:
93:da:e3:40:30:e6:de:21:28:02:b9:53:4c:6d:e3:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:11:70:1A:B6:D2:C5:61:6F:8C:EA:34:36:8C:8B:79:B8:61:B8:18
X509v3 Authority Key Identifier:
keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:e7:0f:19:b6:79:e5:24:0e:d4:55:47:b4:08:d4:6d:4a:36:
62:4b:69:12:d8:0e:07:9b:d9:18:d0:d6:af:2f:29:95:37:ab:
be:6b:e5:db:00:60:9c:e3:79:1c:d3:97:49:63:4c:1e:1d:c5:
a9:d9:8c:8c:05:42:9e:3c:6b:da:87:0c:43:fd:38:ae:81:81:
c8:a5:da:8b:30:10:0b:a8:85:3b:5f:aa:91:71:8b:6c:a8:b0:
dc:e6:c5:f6:31:da:40:7c:01:9f:ef:41:5d:3b:50:20:62:3b:
5d:d0:82:cb:1c:c6:f9:bd:b5:b6:69:df:04:9f:86:97:82:25:
a5:e0:89:1c:48:30:c7:0c:19:54:4e:88:34:1e:7b:41:69:21:
4e:28:5d:dc:91:c9:46:23:04:7a:00:56:b1:a6:af:78:82:c7:
c8:31:a5:6b:05:71:21:2a:dd:37:c4:b7:db:6c:42:c0:fe:87:
98:ac:02:f9:ff:ad:5c:bd:a9:4d:95:f0:51:c8:4b:35:c8:c3:
10:79:e8:d8:23:fc:22:83:ef:37:1f:4a:d3:f8:1b:9a:46:11:
78:2d:c3:87:01:bd:c9:49:42:1e:ab:4b:be:2a:da:96:a3:fe:
84:a7:f9:86:fb:8e:20:40:55:e5:a4:e0:a0:2f:3d:2f:8d:25:
fa:4b:98:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:43 2026 by rpki-client