
$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier: 8cAIeGXyitGPAWFFB2QjcnXWQBOCkkzhYZAu19urLz8=
Subject key identifier: DD:EB:59:A3:DA:91:B2:73:AC:60:35:36:B2:DD:E1:DB:ED:7F:74:25
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number: EE
Signing time: Fri 17 Apr 2026 06:05:26 +0000
Manifest this update: Fri 17 Apr 2026 06:05:25 +0000
Manifest next update: Fri 24 Apr 2026 06:05:25 +0000
Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: 6C0uqI/tsAMmNEUhcz+RkDY4wQ3/4JYB60gmAYWJkSU=)
2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 88RG+IBp3+3IKje/6h9nyZS5YfSLYuAiRdPmohXdymE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Validity
Not Before: Apr 17 06:05:25 2026 GMT
Not After : Apr 24 06:05:25 2026 GMT
Subject: CN=69e1cda6-6c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:50:6c:1c:f7:d1:a9:ea:01:44:6d:6f:65:
bb:1c:94:a4:00:c9:53:f1:39:27:a6:f1:89:e6:ed:
46:d3:bc:b4:92:81:47:e3:c5:0a:88:16:33:3c:0e:
9a:6a:35:03:2e:11:3e:47:f5:1c:fe:8d:ee:48:95:
85:50:c1:ec:6a:ed:c9:07:c9:27:9f:3c:46:06:b8:
a7:01:67:f0:31:29:43:b5:a2:3a:a0:c6:2a:6f:c3:
31:04:61:e1:22:c1:6e:3b:60:7c:7a:9f:89:b7:99:
e0:9f:f9:53:ef:b9:a0:ac:49:29:00:1c:d3:93:6a:
04:da:f5:27:a5:69:32:cf:1c:40:77:be:c5:b6:6a:
55:fa:c2:a1:ee:7a:87:65:b1:a3:24:0e:71:40:ec:
a2:96:d5:1c:31:d0:62:02:0e:5d:de:96:03:4a:f2:
37:72:90:c4:fe:1e:ec:3a:a5:72:61:62:7d:91:12:
a2:08:61:11:99:3e:07:8a:5e:2e:9f:58:3d:03:9c:
52:8b:1b:ab:f1:1c:0c:23:55:6d:a1:ab:a0:aa:c8:
45:cc:3d:7e:32:22:bf:e1:3b:87:1b:75:f3:92:6a:
74:b0:35:04:ca:9f:f6:09:16:52:40:7b:db:7e:ed:
3b:38:56:6e:b8:81:0a:e9:ae:73:7c:f5:14:6d:7e:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EB:59:A3:DA:91:B2:73:AC:60:35:36:B2:DD:E1:DB:ED:7F:74:25
X509v3 Authority Key Identifier:
keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:88:b0:98:41:36:0a:a3:28:7c:21:c1:00:ec:14:e6:60:0c:
6a:84:bf:e5:1d:03:4f:58:f8:f0:38:8a:24:25:ce:a0:8a:ad:
72:bb:d7:af:58:ce:65:84:2b:85:be:64:c5:86:83:81:6b:07:
ad:c5:bf:5b:06:63:81:01:39:f9:f5:3d:c9:3b:05:63:60:53:
ea:45:7c:85:95:ad:a0:66:42:cf:db:1b:40:be:aa:dd:82:62:
ac:a4:bc:c2:ac:cb:47:05:35:bd:fd:24:86:d3:d8:bc:68:17:
a5:cb:ee:71:95:1a:bb:2a:62:98:6e:9e:da:f9:46:1e:7d:34:
65:01:93:0f:c1:34:df:8a:8f:13:4b:7a:ec:88:52:67:45:db:
69:69:a8:1a:c9:49:a5:32:e1:33:74:f4:16:54:c8:3d:76:be:
e6:c6:ac:21:a5:09:b1:00:ea:68:95:b5:ab:4f:b3:ff:6a:4b:
c5:f2:56:39:ae:ef:8a:87:52:74:cd:72:a1:93:f6:01:e9:d2:
4b:f9:64:9e:35:f3:1c:a2:3c:54:59:57:77:c2:0c:3f:57:6c:
d9:b0:49:5b:73:b5:a0:04:8e:fb:dc:13:78:0e:17:26:d0:4d:
3b:c0:c7:ae:2b:ac:f2:36:36:3a:0e:6e:b7:a9:d9:b5:57:80:
71:c7:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:33 2026 by rpki-client