
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json)
Hash identifier: gXDnBkQ4KjyyRfmx2VEPuEP0BOFKNuYACfpzXKUurGM=
Subject key identifier: DC:88:E6:B5:39:79:D5:E4:BA:4E:5D:91:9B:ED:5E:F5:73:DA:09:B2
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0CBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
Manifest number: 0B6B
Signing time: Tue 12 May 2026 19:48:50 +0000
Manifest this update: Tue 12 May 2026 19:48:50 +0000
Manifest next update: Tue 19 May 2026 19:48:50 +0000
Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: djsI/5gpLi0iAZi7waj4mXNsqsJJSNHeYmtBwA2EQPs=)
2: 89135068FD2911F09BBA873E426F56BC.roa (hash: k6L2RtaPfs9iJDZ6OaWxGKY/ymoQfy3jPyd5OxyAkZs=)
3: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: 6WjdsXo2+LZgxWiVDy4rRpY13i0Lx3BV3M/QLcdy5a8=)
4: 37778C1E130A11F18BFDFDDD163D8C67.roa (hash: Hx4jtOuJzXTTc5VHMURxCz4V4clqTWRLtCDPvPlgRLQ=)
5: C255F0921BA611F1A0C1BD34093D8C67.roa (hash: JJB1fRNMQNiQ7UphAqBCNRImICoAXfFr6cutkg5XqI4=)
6: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: 70UT6YcmvBlzj1xKlGcaUiyXDKtBEdfDGecHQzUFaBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3262 (0xcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: May 12 19:48:50 2026 GMT
Not After : May 19 19:48:50 2026 GMT
Subject: CN=6a038422-8162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:5d:e7:54:c1:56:29:09:32:f4:eb:d8:78:
a8:6d:c0:e3:70:f9:79:d0:6e:a0:a2:20:37:02:6a:
12:cf:ad:cb:ad:cb:a4:c2:eb:c8:d6:46:71:19:ff:
13:31:11:00:fb:fb:4e:ab:1d:be:57:95:24:b1:68:
d1:f9:5a:44:4e:07:3a:88:7e:4a:a3:e8:7d:75:31:
7c:52:95:57:52:9b:95:72:42:a4:65:53:89:1c:e9:
f6:36:10:db:79:a6:0f:b7:4a:36:42:46:70:9f:25:
9c:ec:7a:29:db:57:ee:29:f3:61:7d:ab:7b:d0:57:
6d:54:b1:93:c4:7f:9b:1f:8b:7f:27:35:a5:ec:ea:
94:7f:2d:6e:03:e1:8a:3a:5e:ba:c7:e1:e8:c4:4d:
d5:bc:69:e5:06:1b:88:28:3c:c6:c5:1e:59:27:bd:
85:f5:e2:b5:e0:4a:1c:ea:53:76:50:ac:45:92:38:
7d:c8:9a:1c:1d:1b:5c:72:15:79:77:06:a4:80:29:
4f:95:e8:3f:b4:fb:44:67:ff:77:58:16:d9:b5:d8:
b0:b4:cd:bc:50:da:ce:a7:c6:8a:4d:5f:4d:0c:e9:
6c:00:3c:b9:d7:f2:e0:e2:c7:ad:ed:c5:c8:77:60:
d7:3f:8d:d1:42:8f:59:48:d3:44:96:af:2c:fd:02:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:E6:B5:39:79:D5:E4:BA:4E:5D:91:9B:ED:5E:F5:73:DA:09:B2
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:d4:7b:87:e8:fa:90:d0:24:90:9a:84:09:41:31:96:d9:ed:
ee:1c:52:e0:34:06:0d:d2:62:50:23:a8:67:10:ee:2b:2c:63:
29:a1:13:e9:4e:31:64:47:87:5c:c2:c6:55:af:90:2b:17:4c:
94:56:d7:27:16:1f:54:9a:20:60:78:e2:15:d7:6c:60:3b:df:
c4:a5:14:43:8e:3b:0d:41:1f:d9:17:1f:2c:82:9e:5b:3c:3b:
1f:2c:a5:93:b0:92:17:3a:58:d6:32:71:89:fc:ff:49:81:6c:
3c:8c:4d:27:cb:36:5e:df:de:77:84:d1:a2:83:ab:00:68:ed:
9f:d1:c2:0a:fc:e5:12:37:50:f0:c1:f0:eb:7d:c4:bb:8b:3c:
bb:72:78:d3:47:0e:20:5a:c0:72:b2:8a:a0:99:d9:ba:6e:9a:
c5:10:d8:9a:4a:a0:81:c3:cb:08:eb:42:d5:d7:eb:76:14:97:
71:e7:34:57:6a:e9:4f:0b:ff:1d:16:fa:5c:83:8f:f2:62:7c:
b7:08:d5:cc:3c:4c:ba:26:a1:52:a1:b7:53:58:54:23:bb:1f:
f7:2f:6d:ed:a4:98:90:12:30:6e:ea:b1:fb:21:fe:87:99:00:
c7:61:c9:da:cc:91:17:d0:6d:3f:92:b1:46:dd:2c:07:a4:4a:
2f:6b:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:11:29 2026 by rpki-client