
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json)
Hash identifier: VHwP9B1s2JMTYUsu8BCOqSelh7qQSsSny1FF1HibJMQ=
Subject key identifier: 9F:C1:2D:C6:83:33:E1:73:E5:7A:CE:B4:11:AE:61:17:7E:09:AB:A4
Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
Manifest number: 0172
Signing time: Fri 17 Apr 2026 04:24:52 +0000
Manifest this update: Fri 17 Apr 2026 04:24:51 +0000
Manifest next update: Fri 24 Apr 2026 04:24:51 +0000
Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: 5oBzOz2ryCSoM5rPXNeUhDDtQsxy94QeA3PfUrh8Di8=)
2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: tC7+VJT22TXj7yUL7xjBDLMNT6SajKWeU3nOU11r1Qw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Validity
Not Before: Apr 17 04:24:51 2026 GMT
Not After : Apr 24 04:24:51 2026 GMT
Subject: CN=69e1b613-b028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:cb:6f:18:01:4e:60:e5:98:d1:2d:d5:10:
06:0d:01:a6:19:c6:6f:98:b4:92:46:61:8f:e8:e3:
c4:0b:fb:cf:03:e3:0a:d3:39:6b:1c:b3:12:85:12:
be:7d:6b:47:01:29:f2:f1:80:5b:dc:85:e3:5e:8f:
6f:9b:55:2e:d8:0d:b1:73:c9:d0:5b:d3:3b:17:e4:
57:d8:05:d7:61:e8:70:d6:a6:ee:95:58:ae:6f:e9:
de:06:a4:f2:54:4d:57:88:01:ab:67:b1:4a:59:bd:
7f:bc:28:fd:c6:8b:5b:61:1d:4f:2b:2c:46:09:43:
b2:79:50:5c:33:25:a0:ac:9c:bd:8f:c2:b6:52:0c:
2d:b7:25:b3:4d:93:2b:ea:b6:0d:b8:7f:24:fd:39:
7f:35:b0:5e:4b:ca:92:20:7c:ff:6d:82:24:05:25:
5c:26:6a:a8:74:c1:fc:36:d9:45:29:9e:41:5b:05:
05:57:42:4a:32:24:88:e8:ef:74:7b:32:5b:d4:b8:
e5:78:a1:c1:ca:47:3b:6a:fb:e8:15:43:35:a8:cb:
52:d2:e6:8d:9f:15:11:be:4e:fc:11:3c:b2:73:58:
c6:b7:3f:2e:72:25:c5:5d:b2:23:4c:18:7a:c4:e3:
d7:53:5c:12:65:ee:d9:e6:64:f7:ce:05:d1:ff:90:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C1:2D:C6:83:33:E1:73:E5:7A:CE:B4:11:AE:61:17:7E:09:AB:A4
X509v3 Authority Key Identifier:
keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:92:45:34:2a:b7:f3:5f:43:5e:e5:c3:a1:7d:02:c9:8e:d1:
39:79:37:38:2a:6f:3a:18:2e:a2:7e:e9:56:c0:ed:40:04:9f:
9e:b9:80:be:68:2a:3f:48:d5:91:ab:8c:ab:fc:07:35:32:69:
46:0e:77:ba:19:fb:32:15:ad:6b:5a:69:0a:8a:b5:43:94:c8:
de:a2:88:1b:bd:9e:f0:c8:bd:5d:4a:57:7f:37:b5:5c:33:26:
4c:58:4b:33:2a:67:de:84:2b:dd:66:2b:6b:d3:ec:aa:c3:11:
a1:17:f7:3d:11:78:09:b3:db:86:ff:17:2e:b3:d7:6d:b6:31:
05:0d:83:7f:13:62:e1:85:b4:1b:0f:3b:16:01:6d:03:17:57:
0e:ac:28:83:09:66:84:32:38:83:5c:64:7d:3f:85:e1:58:6e:
18:ce:c8:a7:49:39:bb:1c:54:c3:c9:96:16:77:1d:0b:95:67:
29:fe:12:67:d8:0a:4a:1b:51:ba:67:05:b2:48:b4:ea:e6:7c:
e3:a0:a5:c8:5d:73:da:0e:89:91:ef:76:e1:79:8c:38:15:cc:
3b:31:f5:f4:fb:f7:b2:6e:e1:bc:f9:0a:77:c7:02:42:dc:7e:
53:3e:5c:f1:e2:92:aa:0f:51:d9:26:06:22:41:51:82:c9:1a:
7b:9b:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:05 2026 by rpki-client