
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
File: XDlbosoKv2WIhyaHTHgktpt4mZU.mft (raw, json)
Hash identifier: 7WQXUi6inswY0coxkr5BgdUYUsxDb9qeJJX1FqZWyWM=
Subject key identifier: F5:D6:9A:AD:D7:21:DB:B2:BA:06:F8:B9:6C:95:73:F8:90:1C:A2:C8
Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
Certificate issuer: /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
Certificate serial: 0EFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
Manifest number: 0EF0
Signing time: Tue 12 May 2026 17:40:03 +0000
Manifest this update: Tue 12 May 2026 17:40:03 +0000
Manifest next update: Tue 19 May 2026 17:40:03 +0000
Files and hashes: 1: XDlbosoKv2WIhyaHTHgktpt4mZU.crl (hash: r6iBU99cFeRb1DpaQbxdBWo3t7R84vg8d929OX727q8=)
2: AECDA1B0448F11EDACC30815C4F9AE02.roa (hash: Vv+ic3tuHHAEO62okYNeBPpK0SKMbTv6XBExdyT6xHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl
rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3839 (0xeff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E66E5, serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
Validity
Not Before: May 12 17:40:03 2026 GMT
Not After : May 19 17:40:03 2026 GMT
Subject: CN=6a0365f3-7337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bd:6a:ec:60:77:69:cf:d7:b9:93:39:8d:11:
84:b7:c7:50:48:0b:c9:d4:79:1d:5d:ce:6a:ad:60:
b0:70:8a:56:4a:fe:32:11:e9:b9:d4:d7:f0:4e:e9:
a7:2d:09:8b:25:fd:8c:6c:fe:62:91:cc:25:e7:63:
b4:ed:dd:90:49:c0:a3:ac:24:0f:58:8b:ca:2d:49:
18:47:95:4a:f5:64:35:cb:c5:21:d1:d5:6a:1b:82:
f9:11:33:b1:8f:c3:53:f3:ef:5d:ae:74:b0:fd:2f:
38:87:1e:9f:01:c8:51:82:6c:cb:ad:93:67:d9:63:
05:b0:7b:72:85:c1:17:2b:74:57:be:e1:90:6f:77:
23:93:9a:fb:55:ef:9b:c6:5b:88:3b:49:34:89:fa:
e0:45:73:ed:b1:ec:0a:ce:bc:f1:bc:8c:94:14:54:
d2:41:74:0b:8d:e2:48:20:c0:7f:11:94:f7:01:29:
e9:a1:ee:cd:6c:01:82:8a:cf:af:f9:f2:9c:b0:2c:
f7:bf:fc:11:e9:32:67:c4:7e:53:8e:9f:30:9e:ad:
97:a8:14:51:57:51:f4:0f:88:74:59:92:6e:e9:66:
46:22:36:cf:44:14:33:07:af:4f:8d:dc:2e:89:10:
18:42:32:97:84:f2:11:93:7c:7c:3a:9b:71:9e:98:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:9A:AD:D7:21:DB:B2:BA:06:F8:B9:6C:95:73:F8:90:1C:A2:C8
X509v3 Authority Key Identifier:
keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:84:e3:7f:84:2f:a9:d6:ee:0c:54:71:e9:89:3c:10:b3:66:
46:fe:29:63:8b:a8:b6:e3:ec:be:36:44:e7:a0:a5:17:35:ac:
e8:9b:25:a5:6d:75:d9:f9:58:00:38:d6:68:c5:bb:ae:95:fb:
d3:85:e5:70:1a:cf:df:a0:39:96:94:5b:60:f6:1a:51:5d:d6:
e6:93:44:2e:dd:8e:80:96:3c:57:bb:3c:a1:06:2e:36:73:ff:
af:8e:dd:8e:65:c9:12:4a:13:93:7e:6d:d8:e6:e4:36:69:a9:
22:58:5e:e2:12:29:92:33:61:34:18:d8:38:b8:f9:ea:e5:56:
56:df:f8:fc:44:8e:ff:c6:60:31:43:1e:a3:5a:20:ac:5c:d0:
60:09:a7:6b:6b:ad:06:45:de:d4:a1:b6:ae:dc:77:8e:73:d9:
74:56:39:94:0c:a2:75:26:5c:2d:d6:c9:bb:5c:24:bc:56:09:
fd:c5:17:d7:2c:43:a0:9b:5e:ff:63:e7:87:71:94:0d:65:77:
59:17:b6:09:4d:8f:1a:b7:5f:08:d8:9e:af:dd:f5:57:26:02:
03:56:e1:41:6b:4c:8c:9e:e6:77:48:8b:97:5c:1c:a8:b2:06:
29:5c:31:e4:9f:bd:a2:95:53:d2:35:a5:e3:c5:47:07:c8:03:
ab:ad:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:40:16 2026 by rpki-client