
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
File: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft (raw, json)
Hash identifier: teDhucFnQCDvdin1JC6LB5f24G3B9bIkRvP1yG/plOQ=
Subject key identifier: 93:B0:3B:2F:A0:64:CE:89:A7:A7:9F:12:63:58:23:56:33:09:45:CC
Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
Certificate issuer: /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Certificate serial: 09B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
Manifest number: 09A9
Signing time: Tue 12 May 2026 20:00:35 +0000
Manifest this update: Tue 12 May 2026 20:00:34 +0000
Manifest next update: Tue 19 May 2026 20:00:34 +0000
Files and hashes: 1: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl (hash: n7wY1NZoLanhlBYFBE1+2Z0Mdy+/pVQAmhYZ2qe8T64=)
2: A862F866AA3111EA9E08C324C4F9AE02.roa (hash: ugSUEDm51JpwxsKQw3/Ce/i8kMyJ/T7+EguAolkLIDY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481 (0x9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4BD2, serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Validity
Not Before: May 12 20:00:34 2026 GMT
Not After : May 19 20:00:34 2026 GMT
Subject: CN=6a0386e2-b0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:38:28:57:b7:a1:f0:54:40:65:79:ab:4b:
cc:1f:d3:75:d9:eb:5f:5e:d8:3c:78:bd:b2:35:5e:
14:bc:f4:4f:f2:d0:96:e6:04:c8:89:ab:d7:a5:67:
96:14:7a:a7:9d:b8:d4:38:16:24:12:61:c8:53:37:
ab:84:32:84:80:31:17:1d:be:43:9e:52:f8:30:15:
8f:c6:c7:f8:0f:de:e8:9e:24:93:b9:7f:ca:c8:f7:
12:e9:e9:22:8b:38:8e:59:b2:c1:b2:90:f4:43:d1:
71:47:63:1b:cb:bd:ce:cd:a9:0e:d3:fe:25:82:b3:
18:ec:01:06:20:f8:e0:40:d9:bb:88:83:cf:1c:8c:
f3:ec:22:d7:eb:32:68:a2:8d:50:1a:d9:82:19:b1:
b9:fc:3c:d9:d0:22:53:55:e1:c0:51:73:aa:59:d7:
27:89:1a:07:d0:f9:ee:15:c4:ea:f2:84:a9:5a:cb:
06:c6:80:80:d2:a6:35:97:d2:92:dd:ff:e3:06:52:
8f:ca:4c:e6:48:31:8a:4f:ea:b2:a3:ef:59:75:27:
d2:6a:a6:4a:ec:11:d7:f3:ee:21:51:5a:fb:72:54:
49:93:ea:fd:13:7e:94:ee:97:4e:56:e5:ca:27:70:
49:67:b3:46:b0:fb:b5:23:c4:25:57:6a:96:80:12:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:3B:2F:A0:64:CE:89:A7:A7:9F:12:63:58:23:56:33:09:45:CC
X509v3 Authority Key Identifier:
keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:80:f1:14:02:49:66:5d:43:29:7d:ab:ea:a6:9d:33:da:d3:
e0:4b:3c:c6:cc:e1:22:f8:27:7a:3f:bf:e6:00:c5:77:7a:4a:
9b:d9:4c:91:f2:24:34:3a:c9:5b:0a:17:92:7a:c5:41:65:29:
c0:0c:35:39:5c:b7:f9:8a:16:b1:62:62:6b:d2:fc:03:01:2e:
55:c5:d2:f0:88:13:02:b7:f3:21:95:92:2c:6c:25:2b:5b:ef:
09:3c:49:80:87:2f:07:10:db:d2:e8:d7:23:21:ea:96:e6:13:
60:6e:44:b5:26:ee:f8:a3:a0:2b:37:76:41:86:81:87:78:c3:
0f:6d:b8:06:26:50:f4:d3:9d:d6:b2:82:2b:86:e2:3d:9c:5b:
45:fc:21:3e:fb:3d:fd:11:28:5d:9b:d0:f2:bf:82:22:14:d0:
ae:58:0f:29:f4:86:d4:ed:b8:ef:cd:75:dd:3c:9d:31:37:8e:
e2:d2:fe:a3:0b:22:8e:9e:38:5a:58:fc:79:3e:8d:62:2d:a8:
e5:b2:00:47:9b:09:76:3a:75:24:54:2d:db:51:e2:a2:a8:62:
1c:d8:e5:53:98:34:cf:fd:a6:53:35:8a:fb:af:b4:3f:13:0d:
87:ea:ef:87:d5:7e:da:4d:24:c7:9f:e6:d2:17:d0:25:5c:0a:
f2:88:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:32:54 2026 by rpki-client