
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json)
Hash identifier: DlgG8qfH4Cya+YO3N6h4DiqZMs7M7xBTJag1QGFB2ww=
Subject key identifier: FD:C0:FA:15:67:30:0C:4A:F5:06:12:45:2F:DF:E3:43:7F:F2:0E:BD
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
Manifest number: 01E5
Signing time: Sat 13 Jun 2026 03:36:39 +0000
Manifest this update: Sat 13 Jun 2026 03:36:39 +0000
Manifest next update: Sat 20 Jun 2026 03:36:39 +0000
Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: lTjxJxIcsYS7HeIlNibGDkD9Rxw5aLM11Ohwu7oxCyc=)
2: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=)
3: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Validity
Not Before: Jun 13 03:36:39 2026 GMT
Not After : Jun 20 03:36:39 2026 GMT
Subject: CN=6a2cd047-06e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:97:8c:ac:c6:f8:10:40:7f:3d:99:47:7d:
ef:69:ba:14:b3:0a:7d:99:1e:d7:e3:7f:3d:43:1b:
e1:96:34:3b:35:97:65:a8:68:3e:e6:ea:f7:42:12:
92:a9:3d:23:4c:ef:12:12:0c:ca:d8:70:6f:2b:63:
a6:ec:75:c4:1d:4d:fa:e6:11:e0:51:35:59:f8:f1:
06:01:ce:a0:ef:cf:fd:7c:9e:b0:0d:f4:3a:38:2b:
2f:2f:09:a0:07:88:8f:dc:25:bd:a6:8a:01:04:0b:
45:3d:47:9c:fb:28:a9:7d:c8:5b:68:fc:8d:10:08:
09:c8:be:6a:9b:f4:11:34:a6:c9:9b:ff:cb:cb:10:
0f:02:a8:45:e4:61:c7:d6:1b:0b:c2:b3:bf:fb:58:
41:cb:22:db:9f:17:55:68:ef:02:dd:05:68:47:57:
a9:9a:64:fb:80:f3:47:72:e9:0b:59:67:6c:70:c9:
47:92:21:a3:75:fb:92:87:f3:2e:77:e0:64:9b:bd:
26:e5:ea:b9:4b:7a:0a:e5:af:a6:47:84:5d:21:96:
b1:74:9c:34:a5:b6:c9:57:9e:1b:07:ba:37:23:b9:
92:1f:5e:a7:ce:4a:fa:a3:88:c1:5b:e8:90:43:04:
1d:8b:80:fe:e7:27:53:27:ff:57:75:dd:33:cb:a6:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C0:FA:15:67:30:0C:4A:F5:06:12:45:2F:DF:E3:43:7F:F2:0E:BD
X509v3 Authority Key Identifier:
keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:ee:32:7d:d3:83:f0:db:d6:42:92:85:7c:d1:bf:37:f5:71:
b8:1c:2b:c1:08:03:c2:af:f5:3e:ca:67:9f:3d:84:0e:45:76:
cf:19:9c:4d:4a:0a:55:cd:de:41:73:19:a8:c4:f9:c8:b7:7f:
b4:e9:cd:99:99:6f:d0:5c:81:82:36:cd:09:79:e8:2f:08:49:
7c:22:02:8e:04:d3:b9:44:2e:68:df:e6:e4:44:70:b1:f7:20:
8a:51:3e:c6:03:b4:67:f7:a4:e2:e2:e2:e0:b4:42:db:24:cf:
b5:dc:23:17:77:e1:09:fc:bc:6c:36:71:aa:4d:d7:d9:7a:0e:
f9:47:87:cf:8e:7c:30:e5:b2:86:ed:2a:54:c5:83:cd:a8:d1:
99:0d:de:67:44:9f:eb:c3:93:1b:98:89:19:4b:93:ea:89:9d:
87:00:9f:bc:81:5a:89:4b:7d:89:55:9c:8b:16:e0:de:88:19:
7c:57:71:3a:98:76:60:ee:e3:41:78:9b:08:b8:3a:84:9e:37:
de:c6:bb:b2:e9:28:f3:90:b0:90:66:38:02:59:40:00:e6:4e:
a1:10:60:e9:9c:cc:f4:29:86:af:95:aa:9a:17:32:8b:a1:5c:
88:fe:cc:19:ce:67:7d:93:6d:c8:c7:08:1d:f9:eb:90:c3:b1:
6e:88:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:41:49 2026 by rpki-client