
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json)
Hash identifier: IdZOcpJvt+GM2bk5JtY1PaJu7XS6GVtejuq/PLPzbzw=
Subject key identifier: AC:6D:24:AA:AA:BF:CF:20:5B:12:8F:C7:09:0C:74:DB:4D:54:B4:BB
Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Certificate serial: 0B8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
Manifest number: 0B60
Signing time: Thu 16 Apr 2026 19:11:12 +0000
Manifest this update: Thu 16 Apr 2026 19:11:11 +0000
Manifest next update: Thu 23 Apr 2026 19:11:11 +0000
Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: 87zQxcg5gIAZFLHkwdnlgsCQnhH6Hmzbqjc+kACcao4=)
2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: pNMivkkOLffKPDrh/XyyiMiyvZdESt4jTfT5doztz7c=)
3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: lAb12WKjWNZhERVfu+rXY9B+lTIhcdPrOzSWtvyJJG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl
rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2958 (0xb8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Validity
Not Before: Apr 16 19:11:11 2026 GMT
Not After : Apr 23 19:11:11 2026 GMT
Subject: CN=69e13450-459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:f1:bc:93:1f:ef:49:58:46:c9:11:50:63:
b2:15:4f:8d:b2:9e:d6:eb:40:54:52:52:54:1a:45:
d5:f3:38:bd:2d:49:8b:f8:b5:46:05:d7:cc:0a:ef:
3d:48:c8:0a:70:63:f1:a5:43:58:f0:4c:fb:58:a8:
88:62:2e:95:d7:da:57:7c:64:73:17:02:2e:7b:d4:
d0:80:1f:81:ac:8e:ec:c4:c9:e5:19:58:de:0f:41:
be:05:be:6e:3f:8e:6a:32:0f:b6:3c:ec:bb:c6:c7:
26:ab:90:94:fc:0d:1c:29:ea:28:aa:1c:d7:7c:94:
2c:71:02:b9:bc:f2:db:18:a2:57:20:53:44:c6:d8:
aa:cb:5b:46:7a:5a:ca:f3:f7:c1:18:f8:9d:31:62:
18:49:cb:86:d1:74:f5:d8:13:28:a1:d8:56:b3:ee:
e4:3c:0f:67:fe:0c:44:20:bd:d0:ee:ef:d3:91:64:
15:13:61:ad:f2:54:27:6d:3f:cc:26:b5:aa:e0:e5:
fa:94:c2:5e:97:72:d9:5a:72:d3:d9:4e:7f:24:b9:
71:59:8c:ad:54:54:2f:b7:73:d6:e6:b9:3d:bd:4a:
62:80:66:09:03:0d:31:82:ad:0a:c7:30:d1:81:02:
b2:50:1a:6d:d9:d5:8e:d6:d5:e5:a5:47:7f:42:c9:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:24:AA:AA:BF:CF:20:5B:12:8F:C7:09:0C:74:DB:4D:54:B4:BB
X509v3 Authority Key Identifier:
keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7e:ac:26:83:a8:d4:d3:fd:b7:8b:eb:29:05:f8:db:bf:96:
16:87:b2:8a:79:e3:33:42:fb:f7:46:b7:04:e7:e9:1a:6f:b4:
1d:23:4b:ae:05:96:61:1f:75:49:a0:d3:0b:5f:ff:ec:de:d1:
d5:50:31:f1:fe:98:9d:a1:df:d5:25:dc:ce:e1:59:a5:d1:f6:
68:79:fb:19:b7:28:cd:ed:95:76:d2:c3:fc:97:23:f2:c8:44:
77:77:4c:97:40:7b:42:fe:6d:c8:94:b2:64:8c:37:57:6a:fa:
40:2f:12:ec:71:13:05:a2:96:f1:1c:26:c4:f8:a0:08:6c:41:
47:b2:6f:b9:9a:5b:14:56:76:dc:36:0f:34:1b:8f:3e:76:14:
03:54:93:4c:e7:86:6d:45:1f:87:2a:5a:a7:3f:9d:23:8b:08:
fe:27:40:a2:d7:c4:c2:65:e5:af:0a:94:81:01:77:2f:7c:05:
3f:9c:8c:e2:7a:ad:d8:1f:51:fe:8b:ea:fe:b8:18:09:77:00:
6d:15:5b:df:ed:14:ce:2a:e9:f9:d8:e7:d9:f8:01:ff:97:1c:
ff:3b:ca:7c:0f:7e:4f:e8:19:9f:09:b3:c5:26:c9:a2:64:92:
6e:d1:f3:38:f5:74:9a:05:95:07:b3:23:0c:2b:54:0e:15:d6:
85:02:65:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:42 2026 by rpki-client