
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
File: xVznjEX0hWCLgkNgYAPYCooWzNY.mft (raw, json)
Hash identifier: wQNoSj7nNs0D4Ua6cK7aWC1NswEY3cBVtG1aN3a8iKU=
Subject key identifier: 18:82:62:66:FC:76:30:95:D7:FD:E6:61:B1:C0:D9:55:EE:1E:FE:77
Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
Certificate issuer: /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Certificate serial: 0540
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
Manifest number: 0535
Signing time: Thu 26 Mar 2026 23:18:38 +0000
Manifest this update: Thu 26 Mar 2026 23:18:38 +0000
Manifest next update: Thu 02 Apr 2026 23:18:38 +0000
Files and hashes: 1: xVznjEX0hWCLgkNgYAPYCooWzNY.crl (hash: mNFZXt0WzVyeu4TWAadoU3u9aRp8yDjmAU29PKCKdqo=)
2: 64DE26F6386011EC83DC2E23C4F9AE02.roa (hash: bVXZbXIetCBnuQjaSLYLUQur0ysTmVtMviP//NDBnCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1344 (0x540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Validity
Not Before: Mar 26 23:18:38 2026 GMT
Not After : Apr 2 23:18:38 2026 GMT
Subject: CN=69c5bece-fc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:5b:aa:d3:cf:4d:0a:d8:c7:c7:af:81:21:
ec:a5:17:a9:2c:97:16:c0:74:17:8c:90:a9:fc:63:
2e:8f:b4:fb:41:73:4b:42:cd:2c:8c:70:34:5f:04:
c5:98:24:a2:ba:eb:92:fc:54:5d:58:c2:7e:81:db:
71:9b:b1:5c:5e:ca:55:0a:24:46:cd:c0:ce:c8:cc:
2e:76:72:27:f1:52:ec:09:73:07:9c:4c:9f:00:94:
ba:59:d8:bb:72:fb:12:d5:3f:3c:41:b2:58:1d:3e:
05:dc:79:06:06:5b:18:27:17:1a:22:bf:54:aa:ba:
7f:fe:12:ba:41:5a:5a:95:b9:f1:3a:13:95:6c:63:
9e:6a:42:16:d3:39:94:5d:7f:a3:84:9a:96:d4:0b:
86:8c:f6:1c:fc:e8:4e:c2:23:77:32:89:f2:07:4d:
27:d3:3b:aa:c9:78:a5:8c:8c:f4:51:3e:7f:98:5e:
b4:fd:a4:00:26:b4:47:32:39:d2:91:fa:bd:b0:1c:
e9:ec:33:ef:ab:46:db:7f:4b:c0:34:53:a2:63:70:
ec:cc:eb:3f:20:bd:04:40:00:63:45:49:21:ab:0e:
0e:18:94:cf:b3:6a:a5:b3:43:d5:70:be:a2:b1:f1:
70:85:95:4a:a0:90:4c:1d:c3:5f:70:5f:9f:92:46:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:62:66:FC:76:30:95:D7:FD:E6:61:B1:C0:D9:55:EE:1E:FE:77
X509v3 Authority Key Identifier:
keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:75:ce:ec:df:94:92:86:c5:8d:61:29:37:3a:d5:a7:e5:49:
06:72:60:36:78:1a:e0:82:14:52:59:74:98:67:f8:08:4d:75:
2a:6a:a4:18:7c:04:e4:19:d6:40:ad:46:1e:97:04:ea:b7:28:
aa:e7:43:cc:7b:b2:ea:db:24:c5:71:f1:8b:dc:45:be:45:d4:
4d:d4:94:04:42:a4:7f:f2:b8:77:f1:9e:7c:a4:30:fa:f3:b7:
95:3b:ec:74:cc:ae:a0:60:59:bb:ce:9a:3a:aa:df:5c:81:d3:
41:43:26:72:9c:34:fa:14:95:b1:b6:73:ab:b7:3d:63:7c:5a:
ab:b8:0c:c2:bb:f9:95:ee:37:ad:96:d5:c8:fc:e5:56:80:b4:
6c:67:c1:aa:01:5a:cc:e1:44:f3:d2:ad:fe:be:f0:3f:01:a5:
26:1e:43:af:8c:ff:94:6d:17:78:0d:2d:86:f0:07:8b:7c:c2:
68:77:85:48:44:1f:d9:e1:dd:b4:58:5c:bc:3b:b3:5f:36:81:
c0:2f:59:25:44:2c:88:8b:6e:2b:7c:a5:b3:bc:b2:c0:59:52:
0d:88:c3:d3:07:64:57:45:a1:01:81:fd:1f:36:cb:ad:bf:db:
b5:56:98:bf:51:a3:a4:e3:f7:58:9d:70:37:8c:30:53:13:6d:
00:97:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:58 2026 by rpki-client