
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier: Sxf49SIf7Q7jFCRLnjdqfGthU3NOODhjvHhuUE5SmLE=
Subject key identifier: BC:42:47:3E:E4:CF:BC:83:18:CD:7B:37:35:08:07:F8:26:A0:A1:2D
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial: 0A55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number: 0A4B
Signing time: Tue 12 May 2026 19:44:30 +0000
Manifest this update: Tue 12 May 2026 19:44:29 +0000
Manifest next update: Tue 19 May 2026 19:44:29 +0000
Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: QBvDRWidiTbeJlAZro6GbSOJSLuRsYIMlMGFV0UKw0Q=)
2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: uL14OpfP32+5y3tA0ivSjK4NgQZZVX7Ob3/KlBQRVf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2645 (0xa55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Validity
Not Before: May 12 19:44:29 2026 GMT
Not After : May 19 19:44:29 2026 GMT
Subject: CN=6a03831e-aac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:48:70:81:8b:89:1a:3f:81:28:ff:5b:93:
99:9b:54:84:58:c3:58:93:5f:8d:33:80:8e:70:36:
f3:ce:f0:b2:c7:e0:69:34:72:c8:9d:e9:20:9e:bd:
ed:d0:4c:9e:79:f1:ac:98:6d:1d:8b:f7:28:8e:e7:
13:d7:11:07:a0:cf:cd:ff:3c:2e:c0:e5:c3:75:d8:
8f:12:6a:c4:72:7d:07:e2:1f:31:a0:1f:c9:4f:74:
a7:23:10:9a:e5:17:1a:c6:cf:a2:13:d0:6a:c9:3c:
09:85:6f:83:f1:2c:bc:8f:55:91:14:2d:b3:3c:f3:
90:39:33:49:bf:79:34:9c:0f:5c:f6:d2:c9:33:b2:
d4:a6:27:63:85:ab:e6:3d:b7:4e:c0:a7:78:e2:72:
ff:dd:5c:3b:cd:13:20:96:ac:b5:89:7b:01:25:e4:
3d:35:32:58:f8:96:6b:18:bb:dd:15:45:cf:53:fb:
21:55:bd:5f:7f:5b:b5:65:8b:c0:37:a9:23:e0:8d:
37:d1:04:a4:ac:dc:a1:46:a9:fd:9e:53:90:e0:02:
f7:79:7d:e9:ca:9b:b0:b9:48:56:66:c4:1b:a4:8f:
a9:4a:6b:ea:c6:78:80:43:42:5e:3c:74:d6:b5:56:
08:b0:55:5b:fb:e1:ca:2d:bc:2e:7c:fe:00:0d:e1:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:47:3E:E4:CF:BC:83:18:CD:7B:37:35:08:07:F8:26:A0:A1:2D
X509v3 Authority Key Identifier:
keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1c:4b:e3:56:0e:fb:02:1d:d3:15:dc:8e:60:5e:d1:2d:5f:
c5:fe:19:84:78:38:0a:02:91:2d:ce:c8:b1:2c:84:2f:ad:e9:
4e:a0:cf:f8:6c:c3:01:5c:f9:ca:85:10:43:5a:e4:4b:5a:74:
ad:05:55:ea:ca:5c:64:e7:bc:78:b8:9c:19:c8:5b:a0:27:19:
b0:52:4b:4c:25:3f:2e:83:3f:c5:47:3c:dc:bc:75:73:d6:0d:
63:19:45:bf:dd:5d:6e:58:1c:bd:6c:46:01:75:7c:2a:5f:66:
d9:15:a3:e0:cf:83:e1:66:c3:bd:85:84:d3:77:9e:76:ff:18:
f3:26:d6:7c:eb:eb:2c:74:62:bf:dc:e9:41:73:9c:86:7e:68:
fe:ba:fc:47:e3:b8:cd:ef:76:87:09:66:e5:97:b7:34:11:d4:
af:5d:5b:e8:bb:bb:14:ee:85:ae:e2:fb:72:98:ad:51:88:ea:
77:4a:cc:14:33:42:4d:d0:df:b8:08:d0:60:07:e0:83:aa:3f:
df:79:34:2f:2d:3c:c4:f7:4a:94:c0:3a:f6:8f:c3:02:2c:e6:
79:d3:c6:83:16:f4:dc:83:b2:36:f6:cf:6b:ed:b0:8b:e2:72:
17:37:bb:3f:94:a7:ba:3e:af:52:42:c8:4e:88:70:4d:08:09:
71:a3:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:45:55 2026 by rpki-client