
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
File: Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft (raw, json)
Hash identifier: i8ISies6JelvWsBwFfUQq1MRTDJXZwVBYSY93hHnW74=
Subject key identifier: 3A:D2:9A:57:1A:A3:0C:DB:3A:76:AE:E5:AB:BE:AF:2E:D6:29:32:62
Authority key identifier: 5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
Certificate issuer: /CN=A91D1E2D/serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
Manifest number: 0E
Signing time: Mon 11 May 2026 09:19:27 +0000
Manifest this update: Mon 11 May 2026 09:19:27 +0000
Manifest next update: Mon 18 May 2026 09:19:27 +0000
Files and hashes: 1: Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl (hash: bgr5wgclan5rMF+zjndN427Dsv06RS8zR7eqArK1YJA=)
2: 8533A604448D11F19D9C22A9A7833773.roa (hash: ud2XdvTOeMSMCgpchf7dcf0qY7ZIOdm72flkkkj9uWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl
rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E2D, serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Validity
Not Before: May 11 09:19:27 2026 GMT
Not After : May 18 09:19:27 2026 GMT
Subject: CN=6a019f1f-f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:c9:3b:7c:1f:ec:3a:e8:d4:b1:74:da:ca:
45:b5:0c:8c:6c:78:2e:93:bf:9e:83:6b:8b:68:a4:
24:fd:5b:c3:2a:65:ff:69:64:ef:de:a1:4e:e8:e0:
39:fb:c7:cf:0b:84:66:87:36:9a:86:31:03:60:bf:
59:d1:ba:13:93:79:07:c9:04:46:57:4c:cc:cc:e6:
13:f1:8e:83:c4:d1:a9:eb:d6:9e:c6:c8:c4:8c:f0:
71:15:53:68:43:38:b4:a1:0b:4d:3b:f4:96:96:96:
4a:91:f9:19:c0:fe:e5:04:98:4f:a0:28:14:1a:87:
c7:b8:0c:bf:fc:20:ae:7b:e7:94:7a:5b:51:43:91:
68:68:01:18:a8:c8:c5:27:1d:ad:eb:66:ba:53:44:
e0:39:99:cb:e0:48:54:fa:ba:a4:7e:4e:15:7c:89:
6b:56:b5:e3:28:5e:79:4e:d8:f2:af:4b:5a:9b:5d:
73:4e:5b:5e:36:de:07:2f:44:39:d8:2b:6f:10:1b:
6b:14:66:85:c6:66:69:2a:b4:7c:a0:5f:31:a0:56:
1f:a6:01:d7:65:8f:10:75:db:cf:84:95:67:ad:4a:
94:d3:0d:90:2f:92:3b:99:65:75:27:26:96:98:4a:
a9:ee:72:4b:da:1d:19:cc:90:01:c9:c9:48:86:3d:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D2:9A:57:1A:A3:0C:DB:3A:76:AE:E5:AB:BE:AF:2E:D6:29:32:62
X509v3 Authority Key Identifier:
keyid:5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:a4:6d:e3:78:da:b7:1c:bd:c3:aa:fb:8a:37:f8:0f:87:04:
41:42:fb:e6:0f:78:76:bf:cf:dd:0c:4e:8e:2f:0b:a6:f1:0c:
64:1b:17:d0:79:bf:68:f2:7e:43:8b:d8:7c:87:47:89:47:2b:
fa:ab:4d:4b:25:cf:b8:0b:17:9e:74:e6:e5:c2:44:ad:29:6c:
5b:5f:71:66:11:3f:ea:3f:8c:2a:bf:75:fe:a1:ea:c0:6c:0f:
43:6a:5c:7f:26:38:de:1c:af:61:6d:97:79:cd:60:a4:56:b7:
38:60:b5:a3:49:e2:f9:ab:e7:39:84:bd:e1:61:bf:ea:de:bf:
13:bf:fc:11:f5:98:c5:d4:d2:11:0f:7f:d6:b8:2f:30:29:85:
f5:0f:38:18:42:4b:80:3e:bb:7d:a0:62:c7:f1:0d:3d:c7:a6:
45:bd:35:bf:eb:92:bf:dc:79:b8:64:6f:e2:7e:21:26:d7:8b:
da:ea:e8:7f:63:27:05:57:40:96:21:27:d6:fc:e1:f6:13:cd:
04:76:92:9a:9e:18:46:a0:4e:05:a7:94:dc:65:4b:cc:19:49:
21:b0:07:e3:b9:ce:be:45:49:3a:4f:9c:ee:cc:47:5b:df:76:
58:9d:ae:e4:8e:fe:8f:ad:a7:8c:05:2c:6e:b1:da:36:ae:94:
02:62:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:49:06 2026 by rpki-client