
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json)
Hash identifier: 92Qq63y3qM5zCphhN3lCvU/pZdnkFKsT+emfw7hL3qA=
Subject key identifier: EF:47:2C:F0:11:F4:A3:17:6B:67:D2:27:2B:FC:17:A3:E9:88:6B:36
Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C
Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
Manifest number: 0260
Signing time: Tue 12 May 2026 23:12:23 +0000
Manifest this update: Tue 12 May 2026 23:12:22 +0000
Manifest next update: Tue 19 May 2026 23:12:22 +0000
Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: sN+0VzjyxwEvfeTyspkXiCGw6v5H4Ta0EO11G+WlHDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl
rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
Validity
Not Before: May 12 23:12:22 2026 GMT
Not After : May 19 23:12:22 2026 GMT
Subject: CN=6a03b3d6-22f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:39:da:69:f8:ec:8f:9f:a3:cf:a5:b7:7b:
98:69:39:20:b8:e5:da:32:b3:bf:3f:59:2b:eb:a7:
f2:88:6e:e4:0b:ba:87:64:23:ec:46:ec:42:ec:8b:
b1:ad:4d:53:20:45:be:54:27:63:ae:15:a3:3c:ac:
66:7f:ef:68:81:91:70:b6:53:fe:bc:56:0f:c6:76:
c8:36:94:1a:64:19:4f:a1:9d:3e:6e:96:43:7a:a9:
71:05:82:79:c4:67:df:00:a9:0d:07:5e:7d:a3:6c:
d7:34:35:fe:7d:31:b0:09:ec:4f:e4:3e:f1:fe:0e:
bd:0e:87:84:3e:c1:b9:c5:bc:87:58:6b:73:2b:21:
76:e4:d5:f4:d6:63:90:00:4b:3f:fb:07:82:1a:ec:
6c:d7:9a:fb:0b:c8:56:0d:66:64:22:06:40:f1:22:
9b:51:80:2c:c6:1e:3b:e8:18:b3:3f:85:b3:04:d1:
27:80:55:1f:09:30:bc:0a:ff:fc:bf:f1:e1:33:47:
f3:c2:7f:53:b1:a8:29:18:6e:1d:92:8b:ae:d2:c1:
6f:68:47:56:b6:0f:55:39:6f:d9:9c:07:31:81:42:
40:6d:e0:8c:76:f0:fd:96:b6:23:b3:86:aa:af:f1:
b1:d3:2d:79:89:26:2e:01:a1:02:17:1b:f5:51:a0:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:2C:F0:11:F4:A3:17:6B:67:D2:27:2B:FC:17:A3:E9:88:6B:36
X509v3 Authority Key Identifier:
keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b2:bb:35:33:a0:25:4d:f2:38:12:f8:c9:02:04:ad:ca:14:
3c:19:98:46:e5:1e:16:01:58:e8:89:3d:1b:e4:fe:c9:61:35:
64:30:bd:c3:65:cf:bb:d1:33:37:18:85:f8:7d:7e:50:de:7e:
1e:bd:69:54:00:37:4d:73:b0:b0:75:3d:d1:1c:d6:e6:ef:24:
6b:25:c3:93:e9:f2:f5:9d:58:ce:86:9d:b2:2d:6c:e8:1c:32:
1e:cb:7c:91:48:05:d3:f0:da:0d:0a:27:9d:34:8c:dd:4c:69:
ff:d5:f5:1c:3f:90:f7:bb:c2:f4:98:0d:96:d4:2d:76:20:de:
4e:f7:a8:e0:9b:06:dc:e5:68:ca:16:cf:db:21:68:96:6d:48:
2c:87:27:09:c0:23:00:8b:36:02:86:5c:a0:e7:cd:8f:31:e4:
87:e8:5c:e9:e2:6d:32:0b:4c:cb:95:92:00:5f:ba:c2:bf:58:
29:b5:97:a2:ce:2e:69:d1:a5:ba:85:d2:c1:ec:e3:16:38:0b:
39:44:3c:1d:78:32:c2:eb:be:cc:1a:3d:50:b4:8f:a4:d5:f2:
f8:48:f9:c0:89:ab:b3:0d:bc:dd:fd:6c:d8:29:54:a2:65:3f:
9b:c6:37:b8:5b:8d:fa:76:01:10:11:08:51:31:67:f9:9e:ce:
7c:c0:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:01:48 2026 by rpki-client