
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json)
Hash identifier: XdmWX9vVvAr4HqFdTo/hozrdz3aJV5QX047pJk1AQ2k=
Subject key identifier: C2:B0:2D:3D:06:79:69:67:60:4C:BB:1F:FA:D2:DF:89:FC:F5:54:73
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial: 0571
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
Manifest number: 0557
Signing time: Thu 16 Apr 2026 23:24:30 +0000
Manifest this update: Thu 16 Apr 2026 23:24:29 +0000
Manifest next update: Thu 23 Apr 2026 23:24:29 +0000
Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: B7SaxceDrT0fohWYG7dvhdki4NAZk1ovmPnFuHQptuw=)
2: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: XRPA2JKWpTIHSFaMOHgkHY8yCfbif5wXEREcy191bJ4=)
3: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: et9HDrh+GN5yOnO0QC3PHWe6pVv8xUnM/31aeD6iTS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Validity
Not Before: Apr 16 23:24:29 2026 GMT
Not After : Apr 23 23:24:29 2026 GMT
Subject: CN=69e16fae-e712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:0f:f5:ea:b3:8d:40:bb:5c:a6:18:db:dd:
61:29:ae:21:2d:96:1f:bd:0d:22:dd:1a:9e:9c:bc:
fd:4f:c9:e8:5b:17:c7:c4:80:1c:d3:3d:25:70:1a:
de:62:f0:89:11:f3:64:55:c1:bd:6e:3a:f6:e1:80:
38:09:5d:cc:b7:47:81:78:a2:7d:48:80:77:e1:a1:
4d:0a:29:d6:68:dc:a9:32:48:f6:c3:06:ef:6a:96:
e7:a1:a1:3b:55:e6:26:59:e2:26:c1:cd:81:c8:8e:
fd:1d:db:df:db:5e:8e:9c:96:86:d7:7f:c9:84:2b:
7d:51:5e:58:4a:50:92:73:b8:42:94:ad:c5:3a:80:
a5:ef:50:55:59:ec:b1:3c:d5:8e:e0:00:a1:fc:ce:
41:2c:3c:4a:e9:d0:8b:7c:f8:61:6a:73:a2:06:71:
14:17:5c:a3:f5:44:bb:a7:09:93:8c:b7:b5:32:27:
af:ae:5a:6c:e5:03:d5:ae:48:e8:a5:98:bd:2b:74:
11:a9:f7:09:70:bf:89:82:f3:2f:7c:77:d6:9c:6b:
7b:22:b7:33:cd:cc:27:06:d2:c8:54:72:96:b1:e6:
70:74:d5:f6:9d:0d:c2:5d:b4:4f:29:1e:11:05:b7:
e5:18:f5:07:fe:82:61:1d:47:ce:f6:8d:61:2c:be:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B0:2D:3D:06:79:69:67:60:4C:BB:1F:FA:D2:DF:89:FC:F5:54:73
X509v3 Authority Key Identifier:
keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:b4:5e:f9:48:e3:94:93:ff:b8:9a:23:29:ae:91:77:3c:c7:
34:6f:d5:f0:91:5d:5c:9b:12:97:d0:07:9f:bd:ce:84:10:ae:
f7:fb:03:fd:aa:b6:d2:c8:59:8e:78:26:c3:1e:1c:b4:f1:f0:
6f:78:f0:89:ac:5f:92:43:04:b1:45:7f:b8:4b:d7:e9:40:f5:
2a:43:cf:ff:fb:65:94:a0:5a:1c:0d:55:97:ca:0e:5c:34:1f:
25:67:31:bc:61:b7:ea:b1:65:ae:98:a8:bb:34:3d:06:0e:71:
be:25:12:7a:19:7e:c5:a2:cd:ea:62:09:bc:84:07:d0:de:ab:
8a:05:86:fb:50:16:a9:0e:2d:8f:c5:80:9e:b5:33:21:79:c4:
c6:c0:98:36:c7:1f:13:75:5b:2e:da:9c:03:d0:70:a1:bd:2d:
33:d0:28:97:d1:c1:ca:44:3f:5b:d1:80:23:33:34:dd:63:dc:
b5:bd:66:be:3a:a8:5f:20:98:38:e3:cb:42:a9:b2:94:4a:44:
4b:05:f7:3d:87:0d:37:75:5b:bf:bb:88:3d:58:87:81:ec:14:
00:c7:b7:fe:73:86:aa:dc:5b:07:1e:cc:14:bb:66:86:40:cf:
b2:17:b8:4b:fc:08:8f:b9:ab:95:87:df:15:ed:c9:87:3d:13:
53:81:bb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:25 2026 by rpki-client