
$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
File: xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json)
Hash identifier: p7OsfGtj18FcT9psWQOHTRQ6Hf+7kKBH/yDmYLGI9mo=
Subject key identifier: 32:10:58:78:DD:5F:44:60:3E:E0:26:F4:BC:22:68:55:5E:B1:F2:81
Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Certificate serial: 033A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
Manifest number: 032C
Signing time: Fri 17 Apr 2026 01:01:31 +0000
Manifest this update: Fri 17 Apr 2026 01:01:31 +0000
Manifest next update: Fri 24 Apr 2026 01:01:31 +0000
Files and hashes: 1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: ShrFf+jYKvFQ21A8KyZ0mrSRAerK6JjmtfXjfqeHmBA=)
2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: yNX1Hr9oIcR58b1nEt7c5c8aU3fBu8ibYkFmNG/a1UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826 (0x33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Validity
Not Before: Apr 17 01:01:31 2026 GMT
Not After : Apr 24 01:01:31 2026 GMT
Subject: CN=69e1866b-6ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:e4:31:f8:99:07:89:4c:e4:60:96:1a:be:
ad:aa:cd:e2:29:82:dc:b8:6f:7e:cf:86:aa:cc:9b:
e1:ab:c1:d4:cb:ac:ca:72:2f:54:18:7b:db:f1:57:
9a:f4:b0:56:9e:86:ba:c7:10:59:f4:9d:8e:9b:a4:
52:f0:48:18:9a:dd:99:21:7e:8a:30:2e:09:5b:00:
e4:5e:14:5a:2a:cc:2b:6e:73:28:72:53:a1:2f:74:
90:1d:95:36:01:d8:e4:2c:8b:a2:bb:dd:b9:c0:ca:
f6:88:f1:97:09:6f:fb:60:9d:20:a5:ee:fe:f4:8e:
ec:91:4d:ef:07:58:ee:fb:8a:79:2c:36:aa:fb:d5:
c4:94:bc:43:6d:70:44:d6:fc:f8:48:0e:cb:bc:65:
e6:91:15:d0:92:49:c8:12:42:8f:01:6d:99:22:45:
0e:1d:27:9b:2a:61:00:25:63:79:c7:6a:5d:4f:58:
29:0f:3f:3f:98:ea:42:08:c2:d8:2f:79:ad:44:ee:
77:37:05:d8:2b:0c:97:b5:eb:99:ca:c2:01:d0:1c:
d3:b6:12:7e:af:2c:0c:42:ea:a5:80:b8:e4:2a:c6:
df:97:7b:b0:a5:5a:a9:81:a0:de:9f:91:3f:d1:16:
96:5c:30:53:8d:e6:ee:a4:1d:d0:a0:09:b5:8d:48:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:58:78:DD:5F:44:60:3E:E0:26:F4:BC:22:68:55:5E:B1:F2:81
X509v3 Authority Key Identifier:
keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:eb:d0:46:50:0b:96:e5:b7:65:09:bc:92:5c:39:20:2d:a6:
1e:d4:b8:59:8f:21:39:44:95:c2:db:fd:ad:48:0b:20:8c:79:
45:3a:56:98:27:71:ee:f6:4e:0d:2c:b2:e3:94:1d:75:a4:ca:
ed:aa:8e:83:62:64:ed:4b:66:7f:e8:67:86:b7:25:ae:fe:1b:
73:17:a8:07:43:43:94:50:24:ca:06:cf:e0:05:5e:7a:5a:2c:
f6:64:54:8f:1b:47:43:a9:bd:82:0d:7e:31:32:85:6a:e1:f8:
f9:62:5f:26:7d:c9:4c:35:c1:fe:13:b6:67:52:e9:ae:ad:85:
71:d1:f1:fa:55:a7:54:c4:c3:65:96:4f:e4:eb:24:9d:1a:af:
4a:d7:27:95:bc:e0:da:f4:a8:23:6d:3b:cc:8f:a1:6c:57:45:
c5:12:ac:10:80:9f:22:3f:f7:b3:49:16:15:b2:7d:82:49:67:
24:af:92:91:49:7f:5b:63:ac:66:81:d1:cb:d0:80:c0:bd:4a:
18:00:f3:b9:a0:05:df:31:35:23:22:08:62:2d:46:9d:4a:9a:
c8:74:82:ff:25:d7:bb:d1:ca:a4:dc:f2:cf:1f:f4:11:8a:f3:
58:0c:31:03:ad:41:a7:0b:08:ac:f6:47:d5:17:dd:9d:fe:4c:
c7:35:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:14 2026 by rpki-client