
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json)
Hash identifier: Qa/jqIZZIlZYlHMWyQMBhySMW4/xpv4DOqnB4YiuJoo=
Subject key identifier: D3:B7:3F:46:DB:47:04:E5:8D:F1:6B:0F:DE:AF:DF:14:63:8A:62:E3
Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B
Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
Manifest number: 0114
Signing time: Fri 17 Apr 2026 05:39:18 +0000
Manifest this update: Fri 17 Apr 2026 05:39:17 +0000
Manifest next update: Fri 24 Apr 2026 05:39:17 +0000
Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: dj/cPAluLbcfXGmt8ne03CeYTz4lRvP6gFJIDzXBy6I=)
2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: uTJLxFWxmXVPmsyuMe7D4Y0DugrlFezuy8t+kMf4wQc=)
3: 6D79D956EF8E11F0A4EF9B52626F56BC.roa (hash: KKSESbqhU98WASzJOcVdGg55+wdN1l+Incegb07CJzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl
rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B
Validity
Not Before: Apr 17 05:39:17 2026 GMT
Not After : Apr 24 05:39:17 2026 GMT
Subject: CN=69e1c786-d33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:f3:b4:bc:10:01:95:97:78:85:3f:3c:fc:
f8:fc:16:69:8f:0f:40:4a:3f:f3:86:d6:27:1a:99:
c8:2c:ac:80:b7:7c:d9:24:3f:6f:98:04:44:5b:74:
f4:26:70:95:52:b2:6c:c3:a0:f0:ca:26:a3:94:2e:
36:6b:0d:05:4c:48:73:b0:20:f0:c5:09:f0:b2:df:
1b:b8:e2:b0:d0:02:cb:e1:f1:e1:a3:d6:01:21:42:
9d:e0:8a:8b:03:7a:fe:71:73:2f:a4:73:eb:4b:c8:
3f:42:10:a1:4e:4c:80:80:52:6b:59:a9:1c:4a:51:
88:32:f5:cd:fe:da:3f:02:f8:53:4b:2a:2d:df:c6:
68:2a:f4:11:90:67:59:38:6a:a3:81:2a:d9:7f:f8:
a6:a2:e2:32:18:be:76:7f:f6:4a:de:7c:a4:9a:a6:
04:ab:b1:18:c8:f6:e9:7a:f2:82:59:70:93:76:7c:
a0:a1:8a:4d:42:bb:2b:d6:68:f8:52:17:26:b4:76:
02:6e:61:7e:a3:7f:8f:c9:14:c6:0b:f0:5f:b1:c2:
8f:b9:4d:ba:c0:ae:2f:03:6f:49:72:12:78:61:9f:
53:a1:3b:25:b6:c7:a9:12:f8:a8:64:82:d7:fc:67:
d1:13:28:b5:47:3f:60:b1:62:83:45:8b:77:2b:a1:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B7:3F:46:DB:47:04:E5:8D:F1:6B:0F:DE:AF:DF:14:63:8A:62:E3
X509v3 Authority Key Identifier:
keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d0:a7:0d:98:83:68:bc:d7:1f:e3:70:08:26:76:ce:bd:58:
b6:e5:28:bf:83:bb:f7:f6:55:21:4a:38:2a:e0:34:3f:cc:65:
62:8d:0a:d2:74:b1:0b:48:79:2b:c1:11:4f:6d:91:b0:30:89:
b5:0a:64:38:0b:c0:55:11:5c:33:ef:9a:15:86:34:6c:9e:f5:
d3:17:53:e3:a9:9b:72:e6:b3:af:c0:62:d5:11:d8:eb:34:d7:
e0:44:ff:ea:95:87:86:bb:81:97:94:7c:d7:ab:f5:fa:e8:ff:
13:7c:6b:38:a7:20:c8:3b:3b:4e:e5:f8:7c:e0:69:a8:fb:ce:
4b:a4:ec:66:fc:a9:db:49:57:b9:b1:ae:3d:e6:4b:6a:20:4f:
b6:8d:72:59:4f:8e:ac:ab:6f:9b:3b:92:37:04:6c:8c:37:ab:
06:1e:4f:a5:b7:80:f2:04:67:26:b0:55:26:fa:8c:d0:8b:09:
38:45:ed:ab:41:bd:0e:37:f4:ba:68:fa:a7:63:5c:32:8e:05:
f2:30:90:66:ba:3a:7d:a5:e9:82:86:8b:c5:97:92:10:e7:f2:
6f:4e:2c:32:f0:52:f4:20:87:02:f1:fb:01:f9:8e:72:64:b3:
8d:da:f6:9d:5d:e8:82:22:99:85:7d:29:89:31:31:3a:21:2d:
27:26:6d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:43:23 2026 by rpki-client