
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json)
Hash identifier: OTjVDy6teaiVKfWuZ+JqaptPzUbekgExYmZVwFb+2Lc=
Subject key identifier: F8:7F:7F:0D:AC:F3:C5:4F:6B:E1:4A:6C:42:62:16:CF:95:C3:59:38
Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8
Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
Manifest number: FD
Signing time: Mon 11 May 2026 06:16:05 +0000
Manifest this update: Mon 11 May 2026 06:16:04 +0000
Manifest next update: Mon 18 May 2026 06:16:04 +0000
Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: baU6KMTaU7UkxCCexHyx2ytWTSclnWS9PQPuly8G1Ac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl
rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
Validity
Not Before: May 11 06:16:04 2026 GMT
Not After : May 18 06:16:04 2026 GMT
Subject: CN=6a017425-dbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:5a:4c:af:86:82:13:51:00:b7:74:54:24:
8f:47:67:cc:06:f8:3c:ef:db:b9:36:72:74:b4:4e:
27:28:5a:5e:32:f3:0d:09:a2:86:ab:94:51:3c:0f:
d2:3e:9f:f4:74:5d:d1:56:68:a1:d2:70:72:56:f5:
d5:25:33:16:83:b6:8e:e4:f4:de:93:58:a0:fa:e8:
e2:e1:0a:f5:9d:b3:98:ae:9a:d1:eb:6c:56:94:44:
66:bd:a3:55:f4:e4:3c:79:f9:38:c1:f4:05:4e:a3:
6a:a7:e3:a1:cd:5b:da:14:01:ba:58:60:1c:9b:35:
0f:04:ef:0d:17:95:77:74:7c:ea:b6:f2:ab:04:da:
34:b6:7a:53:17:be:4b:08:ba:28:56:a3:82:d5:01:
6c:b2:e6:da:6b:dc:91:f2:7f:6b:2e:76:2e:3d:24:
d6:6a:b6:fa:fa:35:c5:72:ea:e7:f9:97:f2:88:a3:
0a:b1:fe:2b:23:58:e0:b6:7f:b7:97:7b:b7:dd:b5:
2a:d1:08:6d:7a:35:df:d7:78:55:8e:58:45:46:26:
80:2a:5c:54:b4:8f:8e:ec:c8:a6:3d:53:5f:89:aa:
63:e7:dd:43:72:b1:18:ea:a0:7a:ef:12:49:8f:b0:
65:cb:6e:08:13:1d:7a:5c:68:a1:fe:55:57:d9:7f:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:7F:0D:AC:F3:C5:4F:6B:E1:4A:6C:42:62:16:CF:95:C3:59:38
X509v3 Authority Key Identifier:
keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:af:bc:84:b5:c5:06:f9:b6:95:77:d6:33:03:dc:5b:77:91:
6c:1d:48:3c:6a:e4:a4:c7:dc:3e:14:75:6e:aa:07:77:92:71:
45:78:73:d3:46:78:8b:79:d0:2c:24:3f:83:20:25:c2:89:77:
4c:28:21:a7:58:6e:c7:c7:73:ef:cd:fb:6b:46:dd:d2:aa:a8:
c3:9a:b9:19:d4:a0:08:0a:dd:56:de:44:64:01:ae:54:29:0e:
25:fc:10:0e:b0:b3:94:94:1a:78:92:3a:28:20:3e:b0:37:79:
e6:fe:c1:1f:db:b1:60:8a:aa:d8:6e:0b:07:f5:6d:c6:82:88:
7c:ad:e9:45:4f:d9:ac:09:ce:91:b8:e6:25:f3:40:c6:0e:cc:
12:24:30:93:99:e1:04:81:14:1b:b4:a1:17:8a:72:d4:bf:8a:
25:b9:56:9b:b9:ed:1f:b9:43:5d:7e:93:00:cf:8d:cd:83:cb:
ba:cd:3c:61:3f:3d:e7:b1:c6:87:1b:43:6f:b2:96:a7:35:46:
4a:9c:a3:84:b0:e5:6e:48:46:c6:f4:a0:d7:ed:d6:0e:79:5f:
0c:9d:e9:33:64:e1:15:4b:6a:e2:f2:6c:f0:52:5c:c0:16:95:
f9:05:0a:78:16:f5:0b:81:bc:38:36:eb:9c:b6:1f:5e:48:e8:
96:32:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:12:03 2026 by rpki-client