
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json)
Hash identifier: 1+Qer2/+htSvmkHakYaH9SBfjMg5EpkZwuVJI1jKe9I=
Subject key identifier: AD:BD:35:8A:11:38:44:39:DC:C0:5A:2E:0B:53:92:7F:ED:FD:4C:E5
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial: 0774
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
Manifest number: 075F
Signing time: Thu 16 Apr 2026 21:36:57 +0000
Manifest this update: Thu 16 Apr 2026 21:36:56 +0000
Manifest next update: Thu 23 Apr 2026 21:36:56 +0000
Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: ZYuV6U37RaWsmI6Xh7b/6rAbNyBk3avIqEsGBm+i8Rs=)
2: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: FGwdEm0SPNy0TpBINVzEc/flFNni0xPCsSoqxUh+Nr0=)
3: 79520888650611EBA9BB2882C4F9AE02.roa (hash: /W4EDzCJO28OAsl3pdvhn80k2j9lIQ5KcY8vtvKyWxM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Validity
Not Before: Apr 16 21:36:56 2026 GMT
Not After : Apr 23 21:36:56 2026 GMT
Subject: CN=69e15679-a9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:1c:eb:49:d7:96:cd:1a:cd:f6:ad:41:b7:
63:96:d4:48:4b:02:22:75:75:e1:b3:bb:cc:ea:5c:
2c:c5:ef:4d:cc:36:91:7d:75:d5:2e:f9:36:48:02:
fe:76:06:6d:73:dd:49:ee:b1:d4:28:d4:d9:94:37:
62:a9:69:b1:d5:b7:61:0a:e5:79:55:44:71:99:05:
b6:4f:3b:ac:65:44:7c:4d:74:40:f4:3c:85:4f:60:
87:df:8d:73:91:69:78:7c:ee:cc:43:be:71:5d:42:
3a:2a:de:d2:b4:8d:02:87:62:f5:65:ac:f4:5d:8b:
85:05:7a:07:ac:49:fd:c6:0f:86:99:0c:dd:98:94:
74:b0:f8:a7:f1:fe:c1:8d:d9:d5:a8:16:d9:60:14:
72:8b:aa:b4:47:86:9a:55:0f:fc:f7:5b:58:29:74:
5a:73:3a:4a:dc:ee:cd:ab:c3:d0:ff:8e:dd:e3:e9:
98:8f:a4:ca:8c:1b:83:72:dd:bc:9c:dd:c6:4e:d7:
f3:ef:e5:7d:4c:ba:9f:55:95:88:c7:cd:a9:ea:2e:
5c:89:7c:fd:42:94:7d:fe:25:ca:fa:ca:2d:89:7d:
37:3a:6e:d5:9e:c3:aa:67:7a:96:06:22:08:f1:85:
d7:53:92:3c:95:3e:5e:32:4c:b8:3d:1f:7f:c8:59:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:35:8A:11:38:44:39:DC:C0:5A:2E:0B:53:92:7F:ED:FD:4C:E5
X509v3 Authority Key Identifier:
keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fc:02:64:93:50:94:c9:00:a1:43:d4:96:c2:a2:91:93:15:
5a:ee:90:f8:8d:b2:70:7e:23:a6:09:bb:55:1a:ed:78:18:61:
05:7d:e7:db:79:ba:93:f3:0b:61:86:d6:56:37:76:06:44:f9:
7b:bb:65:36:c6:ea:68:48:6b:6a:f7:d5:aa:d4:ba:cc:dc:53:
74:43:70:53:64:4f:71:9e:7e:01:53:20:a8:77:1b:1f:07:91:
52:6e:89:5c:6c:b6:6f:41:23:99:98:c5:32:2e:67:a3:0f:af:
a5:bd:eb:c2:39:06:40:8a:7d:a5:51:1c:c4:b9:23:5f:42:d7:
c5:a5:2e:2b:ff:bf:d9:57:44:70:eb:ab:fc:bd:75:e9:2e:fb:
e7:0a:7e:c3:f2:83:9d:13:4d:76:bc:98:db:5d:cc:60:37:87:
bb:86:0f:72:f3:6d:fe:2f:13:f0:be:f3:22:25:a8:75:99:6d:
7f:f9:5e:8b:e2:48:a0:f5:51:8d:a1:62:49:e1:62:2d:36:2e:
a9:97:c4:6c:a1:f1:01:dc:b6:3f:12:57:4a:b8:cb:7d:fb:dc:
cf:96:49:52:25:1b:fa:0c:2f:51:5e:08:20:ca:8f:fd:a4:2e:
eb:99:b6:bf:40:26:e4:3b:c0:3a:b7:ac:f4:00:8e:c5:e5:cd:
81:46:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:18 2026 by rpki-client