
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
File: XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json)
Hash identifier: 9CSnCbDuixpjjoeVIq6dcomdlhud2brzJhkk3kk9O8g=
Subject key identifier: 95:DA:75:58:53:44:F7:1C:57:96:F2:CD:93:F7:3E:40:81:12:4F:C0
Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F
Certificate issuer: /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
Certificate serial: 0380
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
Manifest number: 0378
Signing time: Wed 13 May 2026 00:57:52 +0000
Manifest this update: Wed 13 May 2026 00:57:51 +0000
Manifest next update: Wed 20 May 2026 00:57:51 +0000
Files and hashes: 1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: ewVq+bxWyvIxxRHbxynFDZbPYwbOBIrzSoadhZUxIFI=)
2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: 2U6xmhzv0fOgJj7RZr6nEhhX0Za/2a3PlEUXvRGOzUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl
rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
Validity
Not Before: May 13 00:57:51 2026 GMT
Not After : May 20 00:57:51 2026 GMT
Subject: CN=6a03cc8f-21bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:69:68:65:71:d3:e4:bf:c2:1a:71:00:a9:
2f:1f:b0:d5:b3:c2:b2:5b:4d:2c:c8:cd:a0:4a:3c:
4c:1e:25:7b:dc:4d:fb:87:5d:50:59:8b:e5:97:64:
7e:99:27:c3:8d:7f:bc:a2:87:00:6f:24:be:b7:da:
95:4a:9d:87:c4:3d:36:ec:57:e6:c5:c5:cf:68:83:
d7:92:e2:be:27:5f:3e:19:eb:83:73:d3:ef:a2:26:
16:22:c3:af:f7:f7:5c:0a:8a:2d:a3:c4:48:bc:db:
27:38:1c:10:fb:9b:ce:b9:a0:cf:a4:e4:65:75:17:
f2:b7:aa:86:00:3c:19:3c:1c:9c:f4:8f:a3:d6:b2:
36:be:87:96:50:ce:36:1d:a5:1f:eb:00:58:63:88:
7b:f3:eb:db:16:1e:b5:ad:14:07:2a:16:e5:b8:14:
f2:2e:f5:cf:1c:b1:9a:a8:26:33:a2:e2:ce:97:a9:
d7:e7:c5:30:11:0a:60:d2:7f:f1:59:3c:3f:e0:6c:
c4:83:dc:0a:47:8f:7e:fa:2a:f0:b4:0e:f9:cb:5c:
7f:9f:61:cd:c0:27:35:2c:67:89:84:dc:c4:2b:ef:
d4:71:37:36:f3:c9:5f:be:22:bd:b2:ee:77:f4:c2:
0c:7f:7c:05:8b:ef:39:f5:df:2c:c8:53:8c:99:87:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:75:58:53:44:F7:1C:57:96:F2:CD:93:F7:3E:40:81:12:4F:C0
X509v3 Authority Key Identifier:
keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:dd:94:28:7a:db:eb:45:ed:c1:97:4a:2c:87:97:1e:f0:
e7:12:b8:ba:e7:ee:bc:14:57:33:d3:d5:3e:6c:c5:61:b6:a6:
4b:ae:46:19:2d:02:fd:c8:86:ca:87:56:12:17:5c:89:a6:07:
e6:94:19:8f:24:41:76:a9:e8:9f:bf:17:30:68:2e:fc:0b:0b:
14:ec:65:84:92:7e:cb:1c:b6:50:94:ba:43:57:16:ca:e9:55:
e9:8a:94:08:f1:c3:73:8c:79:b0:86:6b:96:77:71:ca:39:30:
1f:b3:4e:cc:31:12:cc:2e:e3:d4:2a:85:9a:4d:6c:4b:e9:eb:
4c:00:ea:d8:b3:44:6b:f7:69:68:f4:11:ce:50:de:9a:eb:24:
08:b3:1e:87:ea:01:97:84:15:81:72:cf:c8:72:8f:b0:96:ea:
21:cd:72:54:18:88:86:f6:2b:65:4f:75:e9:00:85:fc:66:12:
7d:22:07:73:7c:df:82:51:45:ca:df:fe:59:31:22:96:ed:b5:
6f:af:21:36:c3:6d:10:d6:b6:ad:96:d0:63:e7:80:4d:17:6b:
74:7b:f0:5c:0c:5f:12:8c:2e:07:b8:4a:c4:a7:12:13:03:58:
c8:4a:e0:5b:1f:44:11:17:55:a1:51:42:8c:54:f8:1f:ed:f2:
72:15:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:13 2026 by rpki-client