
$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json)
Hash identifier: wUF9zxXMb6O83rNRwE/9hJAc6xS2Ejb/25VE+f4GSTk=
Subject key identifier: C7:2D:BC:99:11:3B:56:8C:32:D4:4C:31:46:54:C3:7F:23:38:A0:D1
Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13
Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13
Certificate serial: 2C4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
Manifest number: 2C4F
Signing time: Thu 16 Apr 2026 15:29:55 +0000
Manifest this update: Thu 16 Apr 2026 15:29:54 +0000
Manifest next update: Thu 23 Apr 2026 15:29:54 +0000
Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: nvpXkIPvFToxXcOz3umDdTjK2rLB/q8t1XSXRxcV/5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl
rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11343 (0x2c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13
Validity
Not Before: Apr 16 15:29:54 2026 GMT
Not After : Apr 23 15:29:54 2026 GMT
Subject: CN=69e10072-ed8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:de:94:c7:46:43:39:c4:5c:25:3a:55:d3:
b7:47:e5:c4:bd:e5:10:56:3b:24:5f:8d:20:26:cb:
b8:ea:ce:de:f1:35:79:33:54:2e:66:a7:42:e4:c3:
f6:f9:19:e9:ef:85:cf:52:ee:da:39:fb:a3:ca:e3:
e8:c3:a6:79:40:65:68:11:7f:51:16:37:05:5a:0d:
8c:3e:2b:f7:25:14:96:b5:d3:bd:02:f7:71:c9:eb:
b3:5d:84:f9:a1:bd:a3:c7:e2:bc:f7:30:2b:ec:4e:
f1:2e:a1:a7:46:ae:fc:93:21:e8:f6:8a:67:9e:3b:
e2:00:17:5b:8b:99:17:0b:a7:a3:a0:27:e8:09:2c:
39:64:45:09:05:19:9f:dd:91:f9:63:81:4d:b6:02:
69:6e:58:75:5d:bf:d3:33:e5:9d:bc:06:e0:19:f1:
9b:3a:3f:59:65:2b:c8:96:1a:5d:ef:ee:4b:53:3b:
56:8e:e9:78:d6:c3:02:fe:d4:29:33:fc:45:ab:ca:
c2:30:9e:d0:c2:9c:3c:7c:5b:23:bf:87:e7:d4:c4:
fc:8d:33:20:18:4c:60:8d:1b:8a:f6:9d:d0:ff:98:
27:62:fa:c1:fc:39:cc:40:1f:42:33:d9:60:fb:4d:
be:af:9a:b2:18:a8:55:72:f8:bb:d4:67:38:58:d4:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2D:BC:99:11:3B:56:8C:32:D4:4C:31:46:54:C3:7F:23:38:A0:D1
X509v3 Authority Key Identifier:
keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:0d:a8:78:72:aa:ef:96:4f:a0:0b:31:18:ba:8a:32:f1:83:
81:1d:cd:14:24:27:f0:77:b3:61:57:b1:59:34:b7:37:8c:8f:
b4:a5:10:20:a4:28:1e:e8:b4:0a:6d:53:25:5c:fe:92:80:10:
94:5c:bb:57:8f:04:c7:da:05:0d:42:41:2f:6a:38:11:21:5c:
e0:2c:65:d3:97:94:21:5b:c7:1b:b9:e2:c4:34:8b:17:90:b8:
c7:03:56:d6:54:5a:ee:69:15:bb:20:f6:91:d5:0b:d4:82:62:
92:da:07:fd:c5:d8:3d:de:f7:a8:31:cf:c8:4f:28:f9:8f:8f:
54:fe:4c:ca:b0:b0:00:32:ce:b9:a2:82:ab:5c:ba:77:0e:50:
a6:08:47:20:27:ae:27:97:cc:c8:07:87:30:89:58:c2:da:b8:
7f:c4:72:aa:b2:e3:85:07:ea:25:da:26:c5:f5:02:d3:4c:64:
54:60:b9:b4:ab:5f:3b:59:33:54:f9:6f:87:15:7b:74:e9:a9:
60:57:16:0b:4e:dc:97:70:32:9b:5d:4c:28:62:ae:3e:81:ba:
eb:5b:07:c6:fb:01:41:9e:3f:33:31:75:3e:9c:b5:ab:e8:84:
c0:08:66:e0:5e:83:ac:4f:fe:57:bc:36:29:63:98:9c:4e:0e:
6a:95:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:02:24 2026 by rpki-client