
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
File: XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json)
Hash identifier: Hpt7qhDIYpAUEm9RTJZuHOL84cPhnh+K4Prygb1RSuU=
Subject key identifier: 0F:C0:BC:90:ED:B9:FC:9E:A6:75:10:DA:CC:EC:C9:B1:9D:4F:68:82
Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07
Certificate issuer: /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
Manifest number: 0125
Signing time: Fri 17 Apr 2026 05:21:21 +0000
Manifest this update: Fri 17 Apr 2026 05:21:20 +0000
Manifest next update: Fri 24 Apr 2026 05:21:20 +0000
Files and hashes: 1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: N3xVfbOnJjpQFRjU5HH7rj6NFmxnW6ZkB3mr2IAU1qQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl
rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B190F, serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
Validity
Not Before: Apr 17 05:21:20 2026 GMT
Not After : Apr 24 05:21:20 2026 GMT
Subject: CN=69e1c351-168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:07:cd:27:1b:40:24:5b:f7:6d:fe:7a:c6:
c2:72:0f:cc:b3:43:a3:2b:c5:f8:93:79:77:9c:9b:
5a:e8:79:62:89:fb:42:1c:82:1b:a0:c0:89:d3:3a:
55:bb:f3:29:91:5d:f6:b4:b1:a0:a6:8e:4b:21:a8:
96:30:1f:e6:3b:f1:aa:25:98:dd:41:df:d3:af:39:
cf:27:f1:4b:cd:36:72:3f:52:91:63:db:a5:86:a8:
d6:8a:61:9f:b5:fd:ad:4b:f3:ad:0c:ef:19:7f:77:
0a:e0:df:bf:d4:0e:2f:d1:b0:a3:f7:ba:99:ae:74:
b4:e0:d0:0e:c4:a6:ce:be:df:4a:db:47:08:01:8b:
66:40:09:ea:45:a6:20:64:34:94:5c:28:91:68:1f:
be:7b:54:8a:fe:af:e1:61:32:8c:38:8e:b8:46:df:
c6:3e:d3:40:99:d2:ed:dd:d7:c7:8a:ae:11:df:69:
6c:96:db:d0:cd:9d:45:66:98:5f:77:d6:ac:7f:71:
0d:89:17:56:c5:73:24:e5:41:99:ee:e1:76:1c:85:
e7:5c:e6:5f:6e:4b:bb:59:df:fa:27:35:04:0f:6e:
f5:7f:20:60:85:95:db:01:31:c1:b7:69:7d:59:ab:
cb:55:2d:a2:45:3c:61:38:4b:e8:71:46:90:2a:28:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C0:BC:90:ED:B9:FC:9E:A6:75:10:DA:CC:EC:C9:B1:9D:4F:68:82
X509v3 Authority Key Identifier:
keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:88:98:b0:6d:e8:5a:5d:b5:97:67:e5:e7:08:da:20:81:e7:
b9:59:e7:18:47:0e:2c:65:cb:ae:d4:ad:fd:25:8c:8a:18:46:
e9:d3:2c:65:d1:64:94:6b:04:d5:35:95:8b:11:97:c4:1f:9b:
a4:e5:1b:0d:04:ee:12:4b:de:ec:6d:96:fb:b8:86:96:6d:02:
30:2f:7d:0b:70:0b:fa:14:be:e9:41:b2:97:00:4f:a1:15:fc:
33:c1:35:16:ba:57:37:b0:27:81:e0:1f:8c:bc:db:80:4d:6f:
63:a7:f8:40:cf:ef:53:c4:52:77:54:52:8d:ba:2d:6f:08:6f:
3d:15:6b:44:58:50:3c:8a:23:55:0e:48:d2:55:c7:55:8c:36:
a8:a1:c4:31:e2:ec:82:22:71:a7:2b:b7:17:c7:95:3c:14:41:
3d:da:62:e9:43:f1:fe:e6:12:a5:aa:1b:4f:78:17:ef:54:f6:
0b:2f:86:4e:b3:ac:2f:71:21:04:10:15:aa:97:21:77:fc:c6:
6b:f6:88:6e:72:f7:26:e2:99:c4:56:8d:87:75:af:19:4e:71:
3c:c9:4e:81:7e:7c:b0:44:ca:5e:03:e9:0d:39:34:f7:b7:0d:
3f:52:d3:bd:a1:88:6e:e1:0f:98:1f:01:b0:ca:27:09:9d:ac:
40:c7:61:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:17 2026 by rpki-client