
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File: x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier: EvKUILJBZfbZTs4qSkc6a41IFkziAvALhvjCR4P0vZU=
Subject key identifier: 92:F5:31:10:41:B6:C5:F5:29:91:03:51:1C:3B:37:D0:FC:8D:26:0B
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer: /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial: 07F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number: 07F1
Signing time: Thu 16 Apr 2026 21:08:45 +0000
Manifest this update: Thu 16 Apr 2026 21:08:44 +0000
Manifest next update: Thu 23 Apr 2026 21:08:44 +0000
Files and hashes: 1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: xq0THg4njyrktQ+IU9NKNG3fXA37yavTxQluj+mnqlg=)
2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: 55CxpWCtuoXOi6t/gybs+bucccea1BToqnuBzxE+HNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041 (0x7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Validity
Not Before: Apr 16 21:08:44 2026 GMT
Not After : Apr 23 21:08:44 2026 GMT
Subject: CN=69e14fdc-d3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fe:3c:2a:c5:88:15:c6:de:32:b7:4b:ff:a6:
4d:bc:7e:cc:82:b8:1e:61:7c:73:64:2f:48:73:79:
ad:13:f8:2b:55:54:16:b7:7b:71:09:6e:1f:8a:95:
77:c0:90:1d:41:6b:8a:eb:69:ba:5a:99:17:c0:48:
cd:a8:6d:e8:da:c8:b6:da:26:de:2c:25:b6:a9:7c:
b5:7e:f6:2e:77:e7:5a:22:a6:3d:22:6b:5f:7f:6b:
65:5a:fa:3b:76:2d:09:be:88:86:b7:dc:f0:60:82:
6a:10:3f:6f:61:10:59:d7:b3:4a:3a:0b:1c:10:e7:
3a:e4:cc:f4:36:32:70:47:14:44:59:3b:a7:73:4a:
4d:48:31:ca:66:9e:2c:6e:d2:a5:84:55:3d:b3:d5:
6f:00:ae:80:9b:7c:c0:dd:fc:f9:31:34:a4:3e:61:
49:53:46:b6:e3:13:02:be:09:a5:50:e8:93:43:f3:
c7:c9:42:bd:a6:dc:4e:32:56:10:21:ca:ef:40:94:
8b:0e:e4:b8:81:b8:79:22:4c:53:f8:cb:62:f4:bc:
62:9e:69:2f:42:1b:2c:b7:ba:6f:81:8d:d6:1a:4a:
16:24:de:94:88:97:2d:e2:1f:91:7d:56:c3:0f:b1:
89:35:ef:d5:18:7e:9e:77:69:fb:36:3c:17:2c:cd:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F5:31:10:41:B6:C5:F5:29:91:03:51:1C:3B:37:D0:FC:8D:26:0B
X509v3 Authority Key Identifier:
keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:63:91:6b:6c:61:34:be:2d:89:db:26:79:dc:30:4e:e4:84:
3c:2b:55:08:f4:ae:44:bb:17:43:7e:82:f9:14:ce:66:09:1f:
54:05:04:4c:55:65:e5:11:39:0d:d2:b1:0c:7e:eb:25:26:e2:
c6:ad:71:a7:ba:68:ce:b5:9e:08:ad:f9:4c:92:73:fc:7c:1e:
bd:4a:c8:48:1d:18:e7:63:f2:4c:e6:81:df:39:07:06:88:35:
06:36:8d:0e:b7:bb:9b:a7:3e:e0:43:fd:6d:fb:f5:9c:82:de:
0f:80:12:d5:3d:a2:47:c0:f0:d4:ac:83:44:8f:c4:36:8f:0a:
d5:be:ad:d6:c0:dd:29:88:c8:1f:4b:88:69:a0:e6:6d:0e:82:
91:bf:14:0d:45:89:9c:7c:e3:4c:bc:0d:df:20:6a:d2:79:9e:
33:5c:91:cc:79:69:49:fc:b3:52:6c:95:28:7a:b8:69:be:ca:
9e:5e:5e:40:6d:35:da:8e:b5:6e:53:40:19:f0:3e:c5:74:6c:
b9:90:73:48:aa:a8:c8:0b:66:11:c0:14:04:14:13:91:63:bc:
b3:16:5d:94:a1:7f:ba:c6:92:03:05:ac:87:09:87:b9:ba:59:
46:e9:45:8c:48:5c:cf:fd:52:a4:87:7d:14:6d:31:e6:ca:d3:
1e:b4:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:57:46 2026 by rpki-client