
$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
File: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json)
Hash identifier: upKfmWofDBJRgK8+b8UoHot90Uyy4GhH3M1fIx+a20I=
Subject key identifier: D5:3B:58:8B:9B:4D:EE:C3:33:03:5D:B0:D4:C7:63:9F:12:F8:56:2A
Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C
Certificate issuer: /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C
Certificate serial: 0731
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
Manifest number: 0729
Signing time: Thu 16 Apr 2026 21:43:42 +0000
Manifest this update: Thu 16 Apr 2026 21:43:42 +0000
Manifest next update: Thu 23 Apr 2026 21:43:42 +0000
Files and hashes: 1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: e4LH1HlgOdMbfmPnD04qx0zxkgIXoVjXxhRpK18ocis=)
2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: C0ESLiEnAX5h0tC7phozNCWEJw6YCgeY9oR14gnaKkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl
rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1841 (0x731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91569FB, serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C
Validity
Not Before: Apr 16 21:43:42 2026 GMT
Not After : Apr 23 21:43:42 2026 GMT
Subject: CN=69e1580e-c823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:74:81:d9:c5:48:14:54:97:de:1d:0d:f0:
51:19:fe:9c:30:b5:bc:55:7e:c4:2f:b6:36:37:03:
f0:77:68:50:a6:23:7f:77:c6:2a:4f:a2:52:5a:7d:
50:dc:d8:11:94:ff:15:2f:a1:eb:04:1f:52:13:d3:
59:e3:fb:1a:a0:aa:fb:b2:db:b7:86:d0:99:18:4b:
b4:ec:45:63:90:62:1c:e4:42:52:53:1b:1b:c7:4d:
2a:0a:97:9f:19:6c:d2:0a:8f:7a:90:59:45:8f:17:
6a:b5:75:06:cd:b9:bc:cc:3d:20:d0:8a:d8:6b:5e:
44:91:53:bf:29:5d:23:f7:8c:21:77:e9:43:49:f2:
45:dd:27:9e:6d:f0:69:11:0b:bc:e2:7e:2a:d7:c8:
2f:96:b0:f0:7f:b6:06:3c:57:70:1a:b1:eb:ba:84:
c7:4c:b4:0e:46:d7:f0:3d:8b:5c:48:b0:c2:5f:3e:
32:83:9d:9d:1c:75:f2:c7:47:b9:f0:67:52:27:40:
22:da:2d:38:94:6f:b1:76:c8:73:46:ec:89:73:1c:
f9:fb:92:b5:d7:30:53:77:f3:81:bf:e3:c6:16:58:
02:c2:1a:d9:eb:7b:be:9d:67:8f:88:68:c0:b7:15:
ed:ad:92:d2:1d:fe:91:8b:a8:aa:db:96:12:e6:b6:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:58:8B:9B:4D:EE:C3:33:03:5D:B0:D4:C7:63:9F:12:F8:56:2A
X509v3 Authority Key Identifier:
keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:48:e0:40:1b:c7:10:cb:58:e0:f9:f6:56:7b:60:1f:f7:40:
93:ce:57:30:7b:03:8a:78:92:8d:79:4b:d4:35:ec:23:39:fe:
5e:6d:51:33:4f:4f:9c:e6:c1:2c:07:95:2d:be:68:7c:ab:35:
db:dc:77:b2:75:e1:cd:d0:39:68:08:0c:d4:f6:cc:cf:5d:d6:
8c:ca:dd:bb:33:a5:32:36:a1:06:18:cb:37:6f:29:2d:e6:81:
1e:5c:57:69:5d:bb:ae:b8:17:4f:5f:37:73:4a:13:2b:59:80:
b4:7e:11:c6:0d:6b:65:03:a1:f5:da:cf:b3:45:90:bd:78:30:
2e:5a:86:57:46:d7:1b:81:c8:86:c2:17:bb:1f:cb:18:dd:b2:
f9:d3:ea:b1:bf:86:28:af:f0:f0:ae:63:d6:fb:81:5b:29:8d:
81:23:d1:29:24:e5:26:e3:08:bd:33:b3:20:b8:a0:71:ec:75:
4e:bd:ca:94:60:30:9e:f2:0b:97:7b:82:37:e8:88:bb:32:f3:
85:03:d2:41:c1:49:be:e3:f3:41:43:eb:8b:3b:87:c5:24:0e:
12:58:5f:96:c0:0c:19:a5:62:88:58:4a:bf:8f:dc:9a:26:d0:
1e:a7:da:56:78:59:39:0d:b8:79:48:35:2f:ac:99:b7:3e:f7:
0b:ad:58:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY5RkIxMTAvBgNVBAUTKDVERUUxNkVGODVBMkJGODREQUQ4ODc2NjY3NTlCMUVD
MTVEMUI5NEMwHhcNMjYwNDE2MjE0MzQyWhcNMjYwNDIzMjE0MzQyWjAYMRYwFAYD
VQQDEw02OWUxNTgwZS1jODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt710gdnFSBRUl94dDfBRGf6cMLW8VX7EL7Y2NwPwd2hQpiN/d8YqT6JSWn1Q
3NgRlP8VL6HrBB9SE9NZ4/saoKr7stu3htCZGEu07EVjkGIc5EJSUxsbx00qCpef
GWzSCo96kFlFjxdqtXUGzbm8zD0g0IrYa15EkVO/KV0j94whd+lDSfJF3SeebfBp
EQu84n4q18gvlrDwf7YGPFdwGrHruoTHTLQORtfwPYtcSLDCXz4yg52dHHXyx0e5
8GdSJ0Ai2i04lG+xdshzRuyJcxz5+5K11zBTd/OBv+PGFlgCwhrZ63u+nWePiGjA
txXtrZLSHf6Ri6iq25YS5rZ/3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNU7WIub
Te7DMwNdsNTHY58S+FYqMB8GA1UdIwQYMBaAFF3uFu+For+E2tiHZmdZsewV0blM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjlGQi84REUxRENEQTc2
MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0VGEySWRtWjFteDdCWFJ1
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hlNFc3NFdpdjRUYTJJZG1aMW14N0JYUnVVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjlGQi84REUxRENEQTc2MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0
VGEySWRtWjFteDdCWFJ1VXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALUjgQBvHEMtY4Pn2VntgH/dAk85XMHsDiniSjXlL1DXsIzn+Xm1RM09PnObB
LAeVLb5ofKs129x3snXhzdA5aAgM1PbMz13WjMrduzOlMjahBhjLN28pLeaBHlxX
aV27rrgXT183c0oTK1mAtH4Rxg1rZQOh9drPs0WQvXgwLlqGV0bXG4HIhsIXux/L
GN2y+dPqsb+GKK/w8K5j1vuBWymNgSPRKSTlJuMIvTOzILigcex1Tr3KlGAwnvIL
l3uCN+iIuzLzhQPSQcFJvuPzQUPrizuHxSQOElhflsAMGaViiFhKv4/cmibQHqfa
VnhZOQ24eUg1L6yZtz73C61YFw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:32 2026 by rpki-client