
$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json)
Hash identifier: bJypOppOvE9dKcQamcgpCcX8+J0iD0wLw6UsvOfJF5A=
Subject key identifier: 05:5A:76:B9:FE:E3:35:48:B9:2C:D7:F2:F4:3D:E1:46:B3:55:3D:7E
Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66
Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866
Certificate serial: 1744
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
Manifest number: 1736
Signing time: Sat 18 Apr 2026 16:31:49 +0000
Manifest this update: Sat 18 Apr 2026 16:31:48 +0000
Manifest next update: Sat 25 Apr 2026 16:31:48 +0000
Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: YwXTLOusAYbNzrciXRh826V/cyOozmpvEaWOfYYfuns=)
2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: n3LIJOsHlARAi65lnMhL3wL2TR8QPk4sPY0Xr04F6l0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl
rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5956 (0x1744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866
Validity
Not Before: Apr 18 16:31:48 2026 GMT
Not After : Apr 25 16:31:48 2026 GMT
Subject: CN=69e3b1f5-ad8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:6b:60:23:ab:96:d0:46:b0:45:2e:70:bd:
31:4f:e1:ef:29:be:7a:a7:2c:bd:54:fb:60:58:a8:
82:31:49:ee:53:72:a7:02:91:3b:9b:3b:ba:a2:45:
ad:73:95:a0:ad:d3:c5:8d:90:58:35:dd:3b:50:f0:
f4:3a:48:53:35:85:a0:55:61:4b:34:97:3b:08:34:
74:c0:1f:d7:bb:69:32:4d:d8:5e:1a:2c:c5:7c:9e:
b9:51:4c:39:17:b3:54:79:09:6b:ab:2c:1e:34:97:
e2:fd:64:f5:fe:e8:e5:96:3a:40:67:2c:08:eb:88:
c8:2b:73:e7:8e:12:a2:95:d5:10:06:40:e0:50:00:
d1:fd:f8:a8:a9:e8:35:43:42:bd:b9:00:8d:89:3d:
db:90:4c:2d:ae:d9:6e:f5:0d:db:9c:c4:0b:b2:78:
fe:55:b7:46:0e:e0:79:38:2a:77:15:1e:eb:06:27:
d8:46:b0:76:89:57:4a:83:98:47:62:91:55:4d:78:
a4:5e:e7:32:5a:68:ae:c5:57:c7:d2:fe:c1:15:af:
84:8c:ee:51:7b:f0:8f:9f:d4:93:2e:4b:06:3e:03:
5a:9d:50:d4:97:f4:8d:fa:71:25:7a:f9:d0:47:82:
66:53:41:6b:26:26:93:6b:95:ef:7d:3f:7d:45:3b:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5A:76:B9:FE:E3:35:48:B9:2C:D7:F2:F4:3D:E1:46:B3:55:3D:7E
X509v3 Authority Key Identifier:
keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c4:a0:2e:c1:4d:c7:90:16:1b:82:63:df:99:d6:7a:b9:40:
a9:c1:df:fa:ce:b7:9e:69:e5:35:e7:30:f0:8c:04:69:49:02:
de:c5:4f:ee:88:66:6e:09:6d:f3:9b:d0:5f:c2:e3:26:f2:06:
21:6f:4b:fd:47:de:e0:12:ca:81:cc:fc:2f:cc:f6:ba:75:32:
c4:cd:f5:73:fd:4c:2f:62:2f:b4:52:d6:3d:c8:5d:43:4b:c9:
d8:17:1c:d0:71:ef:b8:a1:99:51:28:93:7a:ab:76:58:98:b6:
da:de:f3:ff:6d:54:35:de:3c:28:65:28:98:13:94:ad:ab:68:
67:50:1c:7d:e1:bc:97:ba:a5:f6:39:92:71:1f:97:85:79:41:
9a:d2:e2:0e:04:7e:b8:08:5e:e9:e0:01:1b:ab:33:04:1c:99:
31:41:50:8f:55:40:6d:0f:ef:7a:3b:79:16:26:3b:4a:d5:87:
54:18:80:c8:0b:d0:d5:1c:34:3a:17:5d:71:73:f8:8f:57:5c:
86:93:e2:31:24:b8:ec:a6:51:46:71:bc:c5:e7:4e:1e:99:11:
63:e8:93:a1:b8:0d:0f:c1:b6:f5:8d:9d:bc:b5:29:5e:66:88:
e9:93:ea:4e:f8:35:8f:ff:1d:1a:c0:bf:a9:de:d3:56:0e:91:
84:b5:a3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:54 2026 by rpki-client