
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json)
Hash identifier: 80eOd/H6s7O3hyMwwVqp+v3VgvLuoyCbdiwTRDT1WP8=
Subject key identifier: 62:E4:A1:1B:B3:43:CE:0F:D3:45:44:0A:BA:3B:34:C7:A3:10:C3:2C
Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
Manifest number: EB
Signing time: Mon 11 May 2026 06:39:42 +0000
Manifest this update: Mon 11 May 2026 06:39:41 +0000
Manifest next update: Mon 18 May 2026 06:39:41 +0000
Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: 3GtJeczQxMId4vczESseJKaD2pETKbCEmn/yg905EDk=)
2: 917D3A184BED11F0A2F7CC21C4F9AE02.roa (hash: fvOW/E/H4txmKlUGL4qB5PT9I4APbJO6w4MS+iWEvcM=)
3: D2E899F86EB511F0A3A63A59C4F9AE02.roa (hash: e+Kx8yx39vD35NK5FmMiKiiW7Dize/nId4xxFjZxyI0=)
4: 2C0E544C6EB511F094E66857C4F9AE02.roa (hash: 5hXzmFr17jMpDBDwfAxIzSXfRZTLmAdnHnJCXCD80mw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Validity
Not Before: May 11 06:39:41 2026 GMT
Not After : May 18 06:39:41 2026 GMT
Subject: CN=6a0179ae-7179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:23:07:49:e9:56:77:b8:f2:82:64:3b:13:
c0:0e:f3:ca:1f:66:da:19:97:1d:cb:61:3d:ec:af:
9f:87:c8:55:a7:32:eb:0d:60:8a:69:27:19:78:0e:
cf:9b:2c:64:b8:76:2d:dc:1c:ec:28:30:9f:71:a6:
0b:73:c4:4e:7a:f1:67:57:a8:3c:7d:db:b0:2b:f3:
1c:4a:af:72:0e:95:a2:6c:8b:e3:52:27:20:f4:8f:
06:17:8a:4b:ad:44:e9:cd:a3:0f:b0:3f:e4:00:1d:
5f:6f:4a:08:61:8e:9b:d4:61:82:cb:d8:5d:cc:0e:
df:3f:97:62:f5:6f:bc:bc:fe:0c:b5:31:df:27:6f:
df:ef:69:74:74:fa:2c:33:2d:16:ab:8b:2d:b2:16:
55:03:30:2c:de:c6:f1:0f:d1:41:5d:a0:30:fd:16:
d5:b0:75:f3:fc:2d:cf:8f:5f:fd:03:80:76:ee:9e:
2f:da:af:a4:55:e9:a9:1e:ed:ed:39:6d:c1:ef:a9:
04:bb:24:63:c5:79:f0:9e:df:ff:87:a3:48:7a:ce:
7e:87:ef:22:ea:53:06:b1:5d:37:b5:aa:50:ce:76:
46:68:55:c8:59:d6:70:f5:4f:b2:e8:37:c9:be:4a:
f6:7f:24:30:71:8f:15:82:eb:57:74:fb:53:bf:18:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E4:A1:1B:B3:43:CE:0F:D3:45:44:0A:BA:3B:34:C7:A3:10:C3:2C
X509v3 Authority Key Identifier:
keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:b7:d7:b9:bb:88:93:15:17:2d:fe:42:a9:51:3b:53:70:
3a:d4:56:73:62:13:76:a0:38:43:ae:a0:fb:f6:3c:bc:94:18:
fd:ce:97:04:f4:bd:a8:ac:18:89:32:83:ff:ab:ea:87:85:ae:
08:93:a8:bc:94:27:f4:d3:7f:fd:20:e9:d2:80:4f:cb:78:3d:
0c:f2:23:62:76:2a:dc:d8:5b:6f:5a:3a:da:26:58:51:c1:0b:
12:34:15:18:4a:78:56:91:77:b0:ef:7f:b9:0b:1f:02:a8:74:
a1:62:fc:d7:eb:ee:be:2f:51:3c:5f:8c:00:70:85:c7:6a:1f:
57:d4:ba:b5:35:fe:28:2d:e4:61:69:99:8b:05:3b:56:0c:ed:
e0:5a:fb:5e:1b:52:bf:e7:e9:54:e7:e1:fc:49:d7:2e:d8:56:
fd:f9:86:38:65:e4:89:c8:7b:89:f3:24:b2:a9:ed:f6:41:31:
d1:bd:50:99:49:18:34:0b:5c:34:20:9e:86:e5:38:dc:f4:73:
f7:10:43:46:6a:a3:ec:09:04:55:e6:65:41:16:4b:a7:dc:55:
25:b3:1f:3d:6b:12:99:04:33:0b:0c:b2:97:65:c6:a6:50:09:
71:e1:0a:a8:2d:e2:ef:ad:6e:ad:ec:10:b5:46:72:69:bf:c2:
7e:ad:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:24 2026 by rpki-client