
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
File: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft (raw, json)
Hash identifier: ZjkHxYdS/ycyuy22UvfCym/dGt38fTdB4+TqIb+C64c=
Subject key identifier: 95:E9:3C:21:9C:34:71:B5:10:C0:2B:DF:C0:38:78:0A:47:D3:B4:9D
Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
Certificate issuer: /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Certificate serial: 09A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
Manifest number: 099D
Signing time: Sat 18 Apr 2026 19:51:06 +0000
Manifest this update: Sat 18 Apr 2026 19:51:06 +0000
Manifest next update: Sat 25 Apr 2026 19:51:06 +0000
Files and hashes: 1: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl (hash: SXcFjqkjUU1gHQMbmRjddppfccjIBZkJDxexC3AoM2g=)
2: A862F866AA3111EA9E08C324C4F9AE02.roa (hash: ugSUEDm51JpwxsKQw3/Ce/i8kMyJ/T7+EguAolkLIDY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2469 (0x9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4BD2, serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Validity
Not Before: Apr 18 19:51:06 2026 GMT
Not After : Apr 25 19:51:06 2026 GMT
Subject: CN=69e3e0aa-8409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:57:a3:fc:1d:ba:13:e3:db:90:de:e1:bd:
ba:8f:bf:44:b2:55:be:21:e4:bf:6d:06:4a:63:3a:
51:6d:c8:30:c7:a6:ff:be:a3:ca:3c:46:30:91:47:
a5:dc:79:65:a9:fe:b3:c6:f4:bc:dc:69:b0:c4:19:
35:a9:f3:3e:4f:74:73:7f:e5:a6:ac:98:b4:cb:15:
72:53:5b:5b:94:71:74:c2:8e:94:0b:44:18:28:16:
9a:b2:18:ad:ff:98:08:f9:82:ea:d4:1d:d4:45:b8:
ab:38:3c:c5:71:c3:f8:a5:e9:85:b9:48:ee:ad:8e:
71:a9:59:60:35:c8:74:43:84:22:ba:d9:d2:cc:99:
1d:39:a3:29:9f:dd:ca:36:d3:0d:a4:86:4f:10:3f:
41:eb:c0:7c:72:d7:96:27:85:76:b9:5b:df:df:db:
db:0d:9e:8a:d3:c5:fa:ef:d7:21:3f:2d:ec:40:fa:
58:2e:0b:97:ef:07:6c:8a:9d:4e:37:68:b7:a2:fd:
be:76:15:51:11:11:22:7e:f4:22:a4:fa:45:86:4e:
12:fd:39:85:71:a7:e9:e2:af:9f:76:a0:ec:f6:ae:
bb:96:76:5f:ee:2f:a9:77:58:e6:58:43:b1:b4:8a:
f8:d3:eb:f0:4f:dd:69:43:87:8d:eb:0a:a1:4a:61:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:3C:21:9C:34:71:B5:10:C0:2B:DF:C0:38:78:0A:47:D3:B4:9D
X509v3 Authority Key Identifier:
keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:82:72:d7:0c:52:87:3c:15:9e:f2:8c:8e:48:66:f9:dd:56:
de:10:5b:38:a5:c9:09:e4:f6:5f:ad:b6:da:87:41:9b:e0:57:
25:38:40:79:fa:c3:45:e2:27:03:62:d2:6f:3f:04:d9:ad:ae:
64:a1:37:0d:ad:ce:f2:bc:5a:5d:42:d4:01:9f:ce:f1:d0:ea:
87:ce:71:ca:3c:e9:b6:33:d7:a7:94:3a:e2:65:c3:c0:79:ec:
68:7a:fe:67:ae:02:fb:ce:4d:74:69:ff:00:1b:3b:18:6f:15:
fe:a4:fe:39:ca:f5:9a:47:0b:c6:dc:0b:53:df:b4:29:17:4b:
73:1a:6d:a7:bc:02:ae:44:0d:56:78:d3:e1:06:c6:6f:f4:05:
e7:b5:b8:1e:c0:43:10:aa:61:a1:9f:93:72:32:ef:f8:45:94:
1c:06:be:cf:2a:63:26:46:27:f9:91:eb:b8:b2:9f:a7:fa:16:
00:d1:c9:b5:24:fb:83:3c:30:f8:0b:2a:77:cf:05:5f:18:62:
e1:e9:16:1f:b9:e3:f6:d0:15:04:22:e8:bc:43:94:69:eb:ef:
81:93:91:c9:b0:f4:d3:f9:13:1a:23:a3:92:f2:16:b0:9f:0d:
e6:dc:cb:64:f3:64:ec:ac:a3:63:73:5c:c0:c8:55:86:9f:68:
ca:85:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:18 2026 by rpki-client