
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File: x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier: mfsAxEDD0Q/FfFUPkQFCsmQMrR3KbiWuSiYcOkG0nhc=
Subject key identifier: 58:C5:3D:01:16:35:63:97:4C:92:5C:07:EC:E3:F1:3E:1E:D3:8B:2A
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer: /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial: 07DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number: 07D5
Signing time: Sat 28 Feb 2026 21:42:39 +0000
Manifest this update: Sat 28 Feb 2026 21:42:38 +0000
Manifest next update: Sat 07 Mar 2026 21:42:38 +0000
Files and hashes: 1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: Xx0Dz0yQD1cnpksCHuQp6Q2go107qjzfuWoh2H1fBow=)
2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: wsrS8Hj9tlKWrRYJKi3rNPfDpEOnN9QMK0e9qX0Cib4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2011 (0x7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Validity
Not Before: Feb 28 21:42:38 2026 GMT
Not After : Mar 7 21:42:38 2026 GMT
Subject: CN=69a3614e-ff03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:e7:3a:02:4b:b4:45:9e:31:18:fa:74:ee:
20:6a:23:e0:e4:b8:60:35:ae:2f:38:33:fd:77:6a:
b0:79:36:25:a7:a6:ae:ae:e7:e8:b9:3a:f9:ef:33:
33:dc:f0:e4:bd:63:9a:ce:ea:7c:24:c4:4b:2a:3d:
01:1c:a8:a4:4f:34:17:46:c3:d8:f8:2d:84:60:54:
f4:ca:70:ad:25:5b:e3:9f:6d:7e:30:1c:dd:2a:bd:
a8:4d:6d:16:46:eb:9d:70:58:8b:1a:4d:36:ea:e3:
80:86:94:56:2a:16:f0:2c:29:ef:51:90:08:65:6d:
ad:af:a6:2f:ff:b3:9e:2e:4c:31:f4:e5:bb:25:a3:
62:12:71:da:c7:de:4d:f5:14:30:b2:b3:75:b5:4b:
22:0d:68:ba:c8:54:95:a8:c0:99:04:f3:f7:f9:a6:
af:fa:81:52:16:20:b1:dd:c6:52:36:65:87:45:1b:
27:ff:fc:39:68:2b:5d:5b:96:04:71:cb:d4:51:b8:
71:bf:97:3c:18:99:e1:d8:15:89:24:9b:cf:a2:e6:
0d:fc:bf:b2:d6:e9:82:a8:42:47:be:67:c6:c3:dd:
8a:01:f7:6a:94:15:cc:93:40:db:1b:d0:07:89:2a:
23:90:68:46:15:ac:48:b3:77:1e:17:81:2d:91:e2:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C5:3D:01:16:35:63:97:4C:92:5C:07:EC:E3:F1:3E:1E:D3:8B:2A
X509v3 Authority Key Identifier:
keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:02:c8:16:ff:46:52:7c:c2:3f:cb:e4:f2:94:9a:ed:ca:45:
f3:ac:a6:5f:b5:a9:96:02:45:b3:69:31:e5:28:ad:35:16:75:
11:86:b2:c6:63:f9:cd:46:4d:27:2b:fd:15:73:fa:66:96:0b:
82:e0:2d:45:97:60:9e:c8:89:31:a0:97:ee:9f:fb:c6:9d:1e:
92:f9:03:6b:7e:87:27:76:a7:04:5f:8d:bb:1d:71:55:75:9e:
cb:87:09:c4:c2:51:18:67:34:7d:01:97:a0:53:80:d6:80:be:
76:96:86:f4:47:7b:bb:01:18:e7:7d:9f:00:fd:45:03:8a:17:
02:17:be:99:1b:16:7b:a3:aa:2a:d2:e1:11:82:46:32:b5:c9:
37:bb:24:81:90:7e:23:d3:57:63:c9:24:55:56:b2:d6:d5:39:
99:b8:d6:03:49:24:d9:aa:18:a6:6a:43:ac:24:11:86:24:5d:
99:68:33:ad:8f:61:ae:fb:ac:1e:36:22:d7:9c:84:1a:73:b4:
7d:7a:b8:52:25:fa:ff:6b:7c:11:c2:47:09:3e:19:4e:12:e8:
6d:cb:99:61:9a:34:ae:9e:aa:6a:5c:a1:dd:69:72:19:d2:43:
31:8b:37:0d:7b:95:86:51:a5:54:e7:4e:e2:81:78:65:53:f6:
49:54:0e:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGRUIxMTAvBgNVBAUTKEM3OTVFNTlDMDMwQzdDOTI5RkNCRTQ3NDE5RkM1RUM2
OUUxRkFDRkQwHhcNMjYwMjI4MjE0MjM4WhcNMjYwMzA3MjE0MjM4WjAYMRYwFAYD
VQQDDA02OWEzNjE0ZS1mZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjgbnOgJLtEWeMRj6dO4gaiPg5LhgNa4vODP9d2qweTYlp6aurufouTr57zMz
3PDkvWOazup8JMRLKj0BHKikTzQXRsPY+C2EYFT0ynCtJVvjn21+MBzdKr2oTW0W
RuudcFiLGk026uOAhpRWKhbwLCnvUZAIZW2tr6Yv/7OeLkwx9OW7JaNiEnHax95N
9RQwsrN1tUsiDWi6yFSVqMCZBPP3+aav+oFSFiCx3cZSNmWHRRsn//w5aCtdW5YE
ccvUUbhxv5c8GJnh2BWJJJvPouYN/L+y1umCqEJHvmfGw92KAfdqlBXMk0DbG9AH
iSojkGhGFaxIs3ceF4EtkeJvBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjFPQEW
NWOXTJJcB+zj8T4e04sqMB8GA1UdIwQYMBaAFMeV5ZwDDHySn8vkdBn8XsaeH6z9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi9CMDE4QUQ5NjI5
MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZKS2Z5LVIwR2Z4ZXhwNGZy
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g1WGxuQU1NZkpLZnktUjBHZnhleHA0ZnJQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0ZFQi9CMDE4QUQ5NjI5MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZK
S2Z5LVIwR2Z4ZXhwNGZyUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAowLIFv9GUnzCP8vk8pSa7cpF86ymX7WplgJFs2kx5SitNRZ1EYayxmP5zUZN
Jyv9FXP6ZpYLguAtRZdgnsiJMaCX7p/7xp0ekvkDa36HJ3anBF+Nux1xVXWey4cJ
xMJRGGc0fQGXoFOA1oC+dpaG9Ed7uwEY532fAP1FA4oXAhe+mRsWe6OqKtLhEYJG
MrXJN7skgZB+I9NXY8kkVVay1tU5mbjWA0kk2aoYpmpDrCQRhiRdmWgzrY9hrvus
HjYi15yEGnO0fXq4UiX6/2t8EcJHCT4ZThLobcuZYZo0rp6qalyh3WlyGdJDMYs3
DXuVhlGlVOdO4oF4ZVP2SVQOSw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:36:53 2026 by rpki-client