
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json)
Hash identifier: 5CFh575PHx/OsKNy9Ct1tL+3iskqzGXsMd2J0YcEFcQ=
Subject key identifier: 23:A5:B3:6D:66:ED:4F:8F:2F:46:13:C1:39:45:1C:D2:DB:4E:DD:3D
Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Certificate serial: 0531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
Manifest number: 052A
Signing time: Thu 16 Apr 2026 23:26:50 +0000
Manifest this update: Thu 16 Apr 2026 23:26:49 +0000
Manifest next update: Thu 23 Apr 2026 23:26:49 +0000
Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: KhpKSHwvXqqnMyX0le5mzyWCgGBK5i63XuuW2RqJGdE=)
2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: 7nE2sjWaqJwApCwjBQjwmTVTdgonybAUx01R5hVKq1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1329 (0x531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7E61, serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Validity
Not Before: Apr 16 23:26:49 2026 GMT
Not After : Apr 23 23:26:49 2026 GMT
Subject: CN=69e17039-f5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:70:82:c7:75:b7:be:49:78:a6:6f:94:bf:
53:1b:a3:50:3c:13:b4:64:1f:de:03:29:98:99:fd:
86:34:bd:c3:10:9a:a5:26:07:e9:af:72:99:30:57:
5a:0b:52:8e:07:10:58:3b:1e:8f:38:5f:38:e1:3a:
d4:1a:28:96:7a:b3:e4:0b:b4:af:40:83:5e:d0:6c:
c2:94:b9:b6:cb:e5:9a:df:9e:df:f3:44:eb:69:bf:
cc:61:e3:0e:a4:61:2e:9b:e3:cd:dd:44:cc:3c:94:
84:5d:bd:ac:fd:73:22:e7:ee:8b:12:6d:e1:b7:e2:
b7:58:c2:d8:64:11:0f:d5:82:b4:10:64:11:a1:12:
0e:d6:e0:eb:ae:70:e3:7a:86:05:10:06:ec:a0:4a:
03:81:64:54:44:10:fb:dc:80:c3:06:8c:cf:65:c2:
ae:e7:9c:60:86:0b:a1:4f:80:1e:93:f8:f0:37:7c:
69:14:36:a4:aa:81:a1:53:fd:c5:23:94:74:37:87:
c0:3e:d1:0f:23:95:11:fb:c9:38:ce:f5:ee:c4:a3:
a5:be:a2:92:fb:5b:6d:85:1e:78:6d:9f:0f:24:d1:
a0:72:80:04:aa:00:89:aa:1f:41:aa:be:40:89:3b:
a7:5e:e5:4d:dc:fb:63:44:fc:fe:9b:aa:46:b5:69:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A5:B3:6D:66:ED:4F:8F:2F:46:13:C1:39:45:1C:D2:DB:4E:DD:3D
X509v3 Authority Key Identifier:
keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:4e:17:6e:12:2d:1b:0e:2b:76:c0:2d:18:61:d1:a5:d9:3b:
17:95:6a:50:d6:f8:79:97:c9:84:e6:ee:2d:52:90:5c:49:e2:
44:68:1f:4a:db:e9:78:cc:a8:a6:e6:e2:ef:c2:f1:d5:27:3e:
3f:a0:e3:fe:b5:01:c8:54:3c:8f:f0:49:f2:4e:57:ad:0b:72:
84:f8:c2:81:49:51:73:4d:a1:5d:78:65:d7:df:7f:e3:a9:06:
b7:18:64:af:a3:c6:f3:68:6e:f9:09:9f:e6:f5:00:05:06:ef:
ef:f0:10:25:0f:54:bc:4e:c3:45:cb:dc:6a:4a:7c:ed:d5:59:
f6:4e:40:e7:4e:84:a0:33:b0:0f:8b:3b:6f:83:4b:32:f8:9b:
48:65:4e:81:b5:15:8c:15:22:b9:59:a9:5b:70:fe:d8:5e:5f:
c9:4c:b7:f8:ed:ad:31:0c:59:85:28:72:9d:4b:5c:f5:44:1d:
ca:dc:09:55:c9:9d:af:8c:eb:da:37:3f:4d:46:21:24:99:fc:
23:b7:e9:6e:d4:b6:5f:0b:b6:bb:9a:ab:e6:19:b1:29:83:c3:
0b:67:ae:1f:15:16:27:35:5d:2d:46:b2:ed:cd:d1:30:af:9e:
f7:79:ef:fe:b6:58:87:d7:e0:72:e0:72:9a:9c:14:5b:f7:e9:
6e:c3:fa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:53:36 2026 by rpki-client