
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json)
Hash identifier: 0APmP/JXDrVfhwF/Nx+6RLiGXpFCnExigSsCRHbYgzo=
Subject key identifier: C5:7D:0F:A9:FD:A6:8D:37:86:3A:C9:FF:6B:BE:27:DE:97:33:EA:84
Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A
Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A
Certificate serial: 09EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
Manifest number: 09E5
Signing time: Tue 12 May 2026 19:55:12 +0000
Manifest this update: Tue 12 May 2026 19:55:12 +0000
Manifest next update: Tue 19 May 2026 19:55:12 +0000
Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: 3z4i+awH3D5Q07QWloW68uke5XTtoUS1tD2hk6QnZuY=)
2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: lDb01SzRr4flIC0mr35RR7fbVzd2VcHd4sFXDjKyy5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl
rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2543 (0x9ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A
Validity
Not Before: May 12 19:55:12 2026 GMT
Not After : May 19 19:55:12 2026 GMT
Subject: CN=6a0385a0-ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:b6:8d:10:ae:a1:aa:e9:d0:61:3f:0c:61:
4e:93:eb:c8:77:f4:f4:13:b3:48:bb:c1:f8:4b:38:
3e:a2:fe:85:1a:a3:20:30:52:21:07:26:3e:80:e5:
fd:03:a7:10:ed:de:68:e1:35:6c:69:4b:14:26:1c:
d7:db:03:24:6b:7d:2d:1f:e9:62:82:79:bf:41:cd:
90:b1:c9:4b:a2:0d:ba:95:56:a9:5f:e5:7a:a5:bc:
c9:8b:75:da:b0:37:11:30:3d:ee:3e:7c:29:33:37:
f7:68:dc:6e:20:c6:72:d3:83:10:bc:60:72:7c:d9:
dd:cc:5f:7b:11:7f:ff:0a:60:e7:4a:46:54:9b:13:
4b:61:16:c2:01:03:24:7e:ad:a0:ec:60:82:21:cd:
27:d7:85:1d:56:94:6d:78:d0:a3:f7:53:05:f5:46:
7e:88:e9:43:7a:5d:a1:41:cf:0e:f9:9b:ef:97:38:
a7:95:cd:80:68:d7:32:73:91:6e:b7:fc:59:95:c4:
5c:22:5b:56:2b:f6:8b:4f:8b:32:72:d3:56:e3:69:
53:42:8e:fb:42:56:47:29:41:4c:c9:b0:aa:93:97:
6b:e0:2a:8c:1e:4c:aa:a5:0d:80:ec:67:9c:0b:a7:
14:30:aa:ad:28:5a:cc:36:c2:f9:49:83:80:59:a3:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7D:0F:A9:FD:A6:8D:37:86:3A:C9:FF:6B:BE:27:DE:97:33:EA:84
X509v3 Authority Key Identifier:
keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:7e:86:df:b2:30:a6:2b:d3:8d:85:04:10:b0:71:d9:f3:
30:e5:a6:73:10:a8:40:a0:93:ce:1d:86:24:2d:3f:94:dd:dc:
2a:88:a5:1d:8e:d8:fd:97:2e:46:e2:31:2b:ec:f9:61:6b:65:
b7:7b:a7:00:5f:04:67:69:3e:e7:2e:48:d9:94:34:71:cc:85:
a5:86:f8:95:aa:71:fc:f4:fe:30:1e:72:5c:be:9e:50:cd:9d:
a7:13:cc:69:ce:43:3d:3b:f1:61:bc:eb:81:a4:cd:51:77:d7:
97:e0:34:a8:c5:e0:78:c4:0d:1a:0e:21:d5:9c:f5:19:f1:2f:
1d:ac:13:49:28:96:d1:6a:88:f7:5c:41:ff:8e:31:45:68:36:
08:7d:1e:84:bf:96:7f:80:57:69:68:fd:9f:47:6d:ec:46:38:
ff:d7:15:14:ef:73:26:ec:27:58:cc:45:0f:0c:88:9d:8c:c5:
2d:fe:42:78:ed:88:90:a0:f7:86:9c:18:17:04:1c:4e:18:b9:
6f:c3:1f:72:9d:cc:7b:7c:2c:bf:31:9e:9b:5a:4b:88:38:af:
22:d0:4c:ee:3d:04:49:50:bc:4d:46:73:b8:17:16:05:e7:aa:
01:ae:17:ba:6b:bb:33:ea:3e:7d:be:85:40:2d:e2:5b:5d:27:
e4:c8:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:59 2026 by rpki-client