
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json)
Hash identifier: DtXXkdWoR4qQ9P08uNoBDMCoKXQHgTh4AT8IEXG5b1c=
Subject key identifier: 8E:79:B0:13:AF:AA:57:62:D8:F4:C2:0F:25:4D:7A:84:EB:BC:98:BA
Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
Manifest number: 83
Signing time: Mon 11 May 2026 03:21:25 +0000
Manifest this update: Mon 11 May 2026 03:21:25 +0000
Manifest next update: Mon 18 May 2026 03:21:25 +0000
Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: wyeARLhyanK0merza1n7uCm61s1gbWHfNrKdDCLZRqg=)
2: 1BBB25FC49CA11F1A95850E4A4833773.roa (hash: Vek/532qK9nsnWVHXuKx/eDjZdW+7NvUZaOyvOfg5S4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl
rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0
Validity
Not Before: May 11 03:21:25 2026 GMT
Not After : May 18 03:21:25 2026 GMT
Subject: CN=6a014b35-b975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:7b:c3:34:9a:a8:6e:53:21:71:91:d8:ca:
62:d7:9a:ca:84:4f:f8:77:1d:42:77:c6:10:8c:54:
3f:6a:4f:bb:8b:fc:06:c4:aa:06:96:e5:a0:a2:29:
dc:9c:09:0f:2e:ab:d8:3d:08:47:be:d6:94:6d:6c:
b9:5f:47:96:87:e8:0d:c9:bb:5b:ee:4b:b0:66:86:
4b:d1:2b:2f:51:30:fb:8c:9c:3d:cc:b9:30:09:f5:
fb:24:d1:ad:e7:7d:f3:65:f5:22:58:9c:8d:c2:65:
35:d1:f8:d7:f5:19:29:6b:c7:34:ee:c6:56:53:93:
f5:07:5d:5a:d6:1e:3a:7b:20:71:73:27:13:41:00:
40:8d:4f:f4:96:7b:02:7e:bf:1f:67:13:45:2c:50:
67:73:a8:8b:1e:f5:80:14:d5:2a:94:6a:66:dc:5d:
dd:1e:08:d5:11:5e:0e:5b:8c:78:97:a5:f3:5d:c0:
1d:7b:e6:0b:39:fc:e4:c6:e4:e5:dd:71:96:2a:38:
48:ac:6c:15:61:49:04:b0:1e:a8:f1:ae:c5:6a:6c:
7c:5e:80:ad:ca:dd:61:6f:e3:58:54:8c:f9:92:4a:
ab:28:aa:a7:8d:5f:04:f9:ef:b5:98:f7:3b:03:e8:
f8:41:7e:58:c6:53:75:9b:0a:8c:3d:e5:f7:00:53:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:79:B0:13:AF:AA:57:62:D8:F4:C2:0F:25:4D:7A:84:EB:BC:98:BA
X509v3 Authority Key Identifier:
keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:bb:92:69:54:85:89:f8:e2:f3:81:52:7b:8f:db:a7:6b:52:
ec:5d:93:d7:06:ed:f1:07:5e:aa:78:a6:91:39:3a:cc:2d:f8:
3f:ff:58:dc:f8:19:d8:a5:66:95:e5:46:73:1e:5f:8f:cf:61:
29:61:fb:58:2a:9c:eb:a7:01:7f:71:65:e1:6e:1c:25:2d:1a:
c5:39:31:e3:1e:05:12:0b:14:11:8f:f7:6d:8f:e3:66:7b:82:
d9:51:e9:9e:7f:08:5a:ea:2b:62:90:51:36:73:3e:9c:8a:70:
32:1c:f7:6d:10:a7:b8:9e:27:5b:2d:92:65:78:53:76:58:b9:
ec:58:59:39:81:97:10:92:ab:99:b0:36:74:e4:00:01:4d:85:
b2:7d:4f:5c:1f:92:13:46:99:19:67:30:2d:c1:dd:13:6f:63:
f5:7d:f9:89:f3:bb:8d:08:28:e9:95:77:9c:6f:0c:e8:0b:80:
1b:42:6b:3d:d1:9f:4b:6c:ce:15:81:0b:1a:a1:d9:e5:87:97:
8c:db:52:23:d1:db:a5:ff:90:f0:4e:f0:59:64:46:40:c2:a1:
a9:88:b1:e7:57:9b:16:f1:88:b9:71:52:28:d7:f4:54:5a:13:
a2:27:ce:36:79:0c:7a:f6:57:e3:d0:38:44:0b:31:16:e0:3d:
95:38:66:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:51 2026 by rpki-client