
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier: wQfjyl35dodA3QZz00V4YN5b6Q4Y6dqAQXr7wOxP1pc=
Subject key identifier: 9D:54:B1:20:43:93:DB:FC:73:70:64:7B:2E:2E:6C:F7:52:9D:50:4F
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial: 0A48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number: 0A3E
Signing time: Thu 16 Apr 2026 19:37:28 +0000
Manifest this update: Thu 16 Apr 2026 19:37:27 +0000
Manifest next update: Thu 23 Apr 2026 19:37:27 +0000
Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: aU4HJwq6QYVVjsVDLnh3VRfYWsKALYjm+QzerxhkVXQ=)
2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: uL14OpfP32+5y3tA0ivSjK4NgQZZVX7Ob3/KlBQRVf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2632 (0xa48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Validity
Not Before: Apr 16 19:37:27 2026 GMT
Not After : Apr 23 19:37:27 2026 GMT
Subject: CN=69e13a77-d9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:15:e1:5b:96:8a:88:60:ed:1d:2d:46:f2:
2b:59:c0:3d:9c:79:15:99:6c:14:91:03:94:0e:c9:
29:c5:92:ae:61:ca:b9:27:60:8b:c7:d9:51:c9:aa:
a1:96:cd:b2:eb:01:55:b6:10:aa:db:ee:eb:60:d8:
0b:f9:30:08:2a:e1:94:f2:c8:a4:ff:d6:c3:63:45:
df:fd:b5:b1:96:75:b3:ed:67:2a:e5:d3:a1:16:0e:
ed:bd:31:3e:5b:7b:33:c9:4e:cd:83:e0:e3:dc:26:
6f:f9:19:a4:15:f1:cf:7e:79:79:b2:e7:82:5b:e1:
d2:87:4f:a7:87:7a:13:d0:d7:e7:f8:d7:33:2d:42:
21:e6:cc:45:d5:bb:52:a0:45:77:9f:42:35:32:48:
b8:1d:a7:f8:20:03:a5:c0:39:c1:35:bf:be:fd:84:
1a:5f:0e:63:ad:61:12:86:a7:25:df:07:3a:35:c3:
af:e0:05:7b:69:f7:d1:69:9e:b9:d4:e4:f5:a3:ab:
65:0c:fb:b4:5e:75:6e:d3:7f:f2:c2:09:ce:95:85:
9b:ef:2f:90:5e:80:d3:79:d2:d7:9d:9b:fb:11:32:
87:ab:71:87:50:de:1a:b7:c5:ea:2b:58:01:9c:6c:
ed:64:84:5a:56:2c:86:dd:ae:60:1a:71:f8:dc:dc:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:54:B1:20:43:93:DB:FC:73:70:64:7B:2E:2E:6C:F7:52:9D:50:4F
X509v3 Authority Key Identifier:
keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7e:a6:58:dc:66:04:ad:ed:c7:b0:08:27:ce:c2:c3:23:76:
b4:1d:62:1a:82:91:bb:c6:4c:36:d6:c7:79:77:88:22:0f:be:
b7:97:23:67:ca:03:11:ce:e2:47:ae:d2:aa:66:af:f5:c5:3d:
39:da:19:07:65:1c:8b:42:e3:49:6a:40:8e:ee:07:b5:b6:43:
55:ad:08:e0:8a:d9:68:a2:88:ac:48:ed:af:60:dd:f3:6c:f5:
ee:c3:a7:33:5b:65:11:56:be:93:02:23:aa:91:90:6b:18:50:
f2:2c:b4:16:d0:15:3d:81:6b:a7:4b:e9:be:10:c8:20:5b:9d:
62:ec:92:24:fe:33:31:39:61:7a:92:1b:39:ca:cd:fb:8f:67:
7e:37:2e:25:9c:71:35:cf:fd:14:ee:60:84:59:58:c0:c6:05:
ec:cd:73:00:a0:53:d7:41:fe:d7:33:f0:a4:89:26:28:26:13:
db:82:53:cd:39:46:0d:a6:ab:8d:51:2f:fa:9e:89:86:27:c2:
98:72:29:78:f4:14:e4:c9:d4:69:d6:dd:ec:76:c0:54:61:bf:
9f:b6:2c:74:f7:ab:e9:b7:36:d1:28:d9:13:5f:ab:d3:de:43:
cc:19:bd:48:af:a0:fe:30:86:90:68:20:6c:54:fa:ac:d5:8f:
6f:6e:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:15 2026 by rpki-client