
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json)
Hash identifier: SaAIe0OEctOI5MCUaV3135Mq/LNkCiYAXKJcpaLOFvU=
Subject key identifier: EE:C7:18:E0:79:5A:E7:02:FE:0D:1A:8D:00:14:09:58:C8:51:DC:47
Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73
Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
Manifest number: D5
Signing time: Wed 13 May 2026 06:51:06 +0000
Manifest this update: Wed 13 May 2026 06:51:06 +0000
Manifest next update: Wed 20 May 2026 06:51:06 +0000
Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: TmsMfTxcxug9V6Ljy1RuAOqgWTY2ILMYrMZA5BPF3+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl
rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
Validity
Not Before: May 13 06:51:06 2026 GMT
Not After : May 20 06:51:06 2026 GMT
Subject: CN=6a041f5a-1ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:a6:2a:d3:f7:eb:b2:b7:f4:9f:5c:2d:52:
04:23:e4:d3:ba:29:54:b8:43:8a:56:7d:b6:0b:86:
73:17:e4:11:ac:8c:b0:62:ef:b4:92:74:d4:bf:d2:
8f:13:47:a0:3b:e9:cf:f2:1c:19:9a:70:42:c6:0a:
69:f6:e0:f7:48:a6:29:f0:3b:78:f1:cc:3e:42:85:
fc:ae:72:ce:48:74:49:8e:e5:5a:7d:58:82:be:cc:
78:e7:0e:d4:ca:03:4f:e1:2f:16:a9:2d:bb:d1:91:
f1:0a:61:03:6c:45:05:98:a9:56:2e:9a:a8:1a:05:
1e:0d:99:d0:fc:b7:df:be:5b:5b:29:5b:14:5d:13:
e3:27:c1:55:73:8e:66:89:18:e5:11:59:26:4d:0a:
dc:b3:6e:cd:f2:03:84:0b:4d:77:ea:09:b5:ae:32:
4f:9b:39:79:98:b9:d6:29:53:32:08:00:c7:65:fc:
3c:a2:e6:cb:d8:da:f1:14:ff:82:80:6c:43:9a:e1:
68:f4:e1:d8:50:02:c4:e9:e7:37:6f:9f:39:76:ac:
5b:99:b5:59:56:b3:e6:e3:95:49:18:55:af:1e:80:
76:9a:6f:88:e2:47:be:46:f6:65:eb:5d:6c:06:12:
24:79:b5:89:c3:41:46:91:d3:7a:35:3e:b4:70:da:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C7:18:E0:79:5A:E7:02:FE:0D:1A:8D:00:14:09:58:C8:51:DC:47
X509v3 Authority Key Identifier:
keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:e9:79:31:8e:15:42:9e:e3:16:93:cc:00:53:17:ae:7e:02:
92:88:3d:48:f6:5f:26:e8:e4:8b:b0:07:6c:2d:63:a5:24:68:
4a:3d:a4:78:44:fd:1f:48:3d:80:ae:a9:f7:2a:19:1a:5b:c2:
0d:67:51:29:ab:9f:36:06:59:66:4b:8b:dc:83:9f:75:59:10:
ab:4e:42:69:15:29:2e:0c:4a:1a:a9:c6:ba:64:dc:96:06:22:
60:c1:2b:4e:c2:39:fa:4e:fd:7b:28:69:e7:0b:ff:f7:9c:a0:
0b:4e:61:e0:62:07:9e:da:1f:9f:cd:20:96:fb:e5:98:5b:40:
ac:30:95:6a:39:0a:71:8a:b9:3a:46:29:f7:ed:d4:4b:5c:05:
d4:27:65:66:c5:9f:36:ab:94:a6:f0:a0:0e:70:dc:33:04:9e:
d1:5f:7b:ac:85:c7:60:30:6e:f7:6d:06:30:77:93:68:60:7d:
55:31:e7:ec:c2:90:9f:16:42:b0:e0:08:27:70:cb:34:b6:88:
cf:7b:33:5c:09:94:76:7f:9a:d6:27:11:6a:3d:02:a6:79:48:
9f:67:58:c9:04:89:7e:fd:fc:3a:96:a4:88:43:7b:b1:42:99:
59:58:05:57:93:91:20:1f:40:3e:d2:82:bb:f2:b1:b4:57:fb:
58:5d:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:18 2026 by rpki-client