
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier: e8Vh+ig6V3kyHhjOpTjX3bysMO2t/drSNA07NCz3NoU=
Subject key identifier: B7:DF:1D:CB:BE:B4:8F:5E:18:D6:FE:B6:1C:D4:66:3E:9D:41:8B:E2
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number: 0125
Signing time: Fri 17 Apr 2026 05:21:11 +0000
Manifest this update: Fri 17 Apr 2026 05:21:11 +0000
Manifest next update: Fri 24 Apr 2026 05:21:11 +0000
Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: bJKeeNsIQFWPPWi9QZR6wSvrHU/B0Y6rCcL56pLfpIY=)
2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: mfW/Qkg0MzRAXyBHrSlkZ0QHKIFcW/HURnHy5WY1eYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Validity
Not Before: Apr 17 05:21:11 2026 GMT
Not After : Apr 24 05:21:11 2026 GMT
Subject: CN=69e1c347-b4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:8c:07:f0:31:fb:08:04:49:90:31:7a:a1:
4e:d4:2c:be:95:44:ac:ae:c1:6b:cf:ee:c1:19:1b:
7e:d9:42:55:01:b7:20:4e:f9:f3:e6:25:0b:b0:cb:
68:70:3b:75:94:5e:d1:a5:8c:e2:9e:ec:44:20:19:
2f:46:ae:54:51:a2:83:b7:fc:3a:40:1a:ef:37:25:
19:2e:84:4a:f4:39:31:13:de:4f:5f:42:44:07:d9:
e8:4e:65:94:d7:29:1a:c0:3a:f0:20:3c:a7:f5:04:
45:6d:d2:66:82:92:b6:32:43:6d:6e:39:14:ed:c6:
3a:8e:2e:d1:f1:6d:89:fb:26:b6:d6:22:cc:cc:b6:
83:61:a9:d4:16:46:cf:df:b9:23:95:e0:11:b2:0c:
8c:98:d4:15:ff:b1:8c:94:97:d5:d1:47:4a:25:5b:
9c:d2:ea:76:9f:c8:a8:b1:4c:cd:ff:5b:fd:53:5b:
24:12:1b:92:d8:eb:fc:78:93:5b:3e:e3:6c:df:e1:
73:55:40:eb:19:63:46:1b:ad:7a:10:69:99:c7:15:
34:f4:61:2d:31:72:f0:0d:2a:8c:1b:aa:a0:04:12:
50:b5:fe:2d:41:3f:7f:52:19:ee:60:d6:d2:5a:2c:
75:77:a1:50:63:23:27:9e:d8:5c:51:02:c6:5f:a4:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DF:1D:CB:BE:B4:8F:5E:18:D6:FE:B6:1C:D4:66:3E:9D:41:8B:E2
X509v3 Authority Key Identifier:
keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:e6:bc:81:1e:44:76:ab:ec:cf:98:e2:d4:a5:2e:7c:94:ff:
7b:43:48:08:be:46:e1:a0:eb:62:c0:f5:c6:62:3b:d0:d5:e5:
b8:cb:e0:23:17:ca:ef:68:e7:1e:f5:d7:28:c9:09:89:73:ed:
ba:c1:01:49:ef:2b:8d:a2:5b:76:c6:9b:63:f1:ab:d8:c2:99:
d7:b5:ca:fb:c5:0d:56:59:1a:56:84:37:69:1c:de:2b:3d:4c:
49:d7:fc:05:56:2c:7d:3f:12:97:8d:7e:48:73:9c:cc:b4:86:
3c:ed:b7:87:a8:8d:90:bb:a6:c3:09:02:4e:b8:c9:17:b9:c9:
09:6d:3f:ab:58:7b:10:08:49:1c:94:28:64:47:36:e0:45:d1:
91:25:86:cf:fa:d9:74:3c:91:5c:d2:d7:53:1d:04:1a:bb:14:
2d:b6:77:8c:67:36:fd:f8:d8:78:3e:ca:24:72:7c:87:fb:e8:
48:94:71:a9:87:f9:aa:99:e6:2f:d8:5f:70:2d:47:38:80:84:
fe:91:3b:17:cc:2a:a3:fe:73:d5:89:5c:58:88:5e:c2:d7:1a:
ce:a2:eb:e6:a4:83:88:c3:99:ad:22:a9:81:02:33:b0:37:ba:
55:4c:ee:1e:a9:e7:fe:84:de:b9:59:37:19:c8:d3:ce:7b:32:
45:6a:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:13:45 2026 by rpki-client